Problem z google - przekierowuje na podejrzane strony

**Posty:** 11 · przez **mario113** 31 Mar 2014, 12:30

Witam Od tygodnia nie mogę normalnie korzystać z google bo mnie przekierowuje na jakąś dziwne strony i dzieje się to nie tylko w Firefox ale i w Internet Explorer do tego komputer coraz wolniej chodzi. Dodam, że skanowałam komputer Dr.Web CureIt i Malwarebytes Anti-Malware i żaden z nich nie znalazł wirusa. Wszystko jest ”niby w porządku”. Proszę o pomoc, bo nie umiem sobie z tym dać rady.

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 12:39

Jaki system operacyjny jest na tym komputerze?

**Posty:** 11 · przez **mario113** 31 Mar 2014, 12:51

Windows 7 64-bitowy

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 13:05

Pobierz FRST w wersji zgodnej z Twoim systemem - 64bit.
Zapisz na pulpicie, uruchom, kliknij scan.
Wygeneruje dwa logi. Obydwa proszę załączyć na forum.

**Posty:** 11 · przez **mario113** 31 Mar 2014, 13:19

Kod: Zaznacz wszystko: ]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by MARIO (administrator) on MARIO-LAP on 31-03-2014 13:16:41 Running from C:\Users\MARIO\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Young Digital Poland) C:\Program Files (x86)\YDP\YdpDict.2\Watch.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (Broadcom Corporation.) C:\Windows\system32\BtwRSupportService.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe ( ) C:\Windows\system32\lxbkcoms.exe (ITE Tech. Inc.) C:\Users\MARIO\AppData\Local\IRMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Safer-Surf-soft\Safer-Surf157.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2847016 2013-11-28] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM-x32\...\Run: [QlbCtrl.exe] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.) HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3829328 2014-02-21] (Tonec Inc.) HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\Run: [BlockNSurf] - C:\Program Files (x86)\Safer-Surf-soft\BlockNSurf.exe [104448 2014-03-23] (Revizer) HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: E - E:\setup.exe HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: F - F:\autorun.exe HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: {2d8f6ab7-ad08-11e3-94a8-001e37665561} - F:\AutoRun.exe AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:13828 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.speedbit.com/?s=E3Na URLSearchHook: HKLM-x32 - Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = SearchScopes: HKLM-x32 - DefaultScope {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://go.speedbit.com/search.aspx?s=E3Na&q={searchTerms} SearchScopes: HKLM-x32 - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://go.speedbit.com/search.aspx?s=E3Na&q={searchTerms} SearchScopes: HKCU - DefaultScope {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://go.speedbit.com/search.aspx?s=E3Na&q={searchTerms} SearchScopes: HKCU - URL http://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPFC73DD7C-F595-43EB-88FB-97BA40AB1FA0&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKCU - {01518D9B-FBE6-400F-9E25-C2CC2D470E80} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=80754032-0715-4671-8C27-B8810BB78227&apn_sauid=66FA34EC-DA13-44BE-8A9B-BBB175B43BA0 SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q={searchTerms} SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = http://go.speedbit.com/search.aspx?s=E3Na&q={searchTerms} BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO-x32: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default FF user.js: detected! => C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\user.js FF SearchEngineOrder.1: Speedbit Search FF Homepage: chrome://speeddial/content/speeddial.xul FF Keyword.URL: hxxp://go.speedbit.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms} FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\searchplugins\speedbit.xml FF Extension: BitComet Video Downloader - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2014-03-23] FF Extension: Noia 4 Theme Manager - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\Noia4Options@ArisT2.xpi [2013-10-05] FF Extension: Speed Dial - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2013-10-05] FF Extension: Noia 4 - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi [2013-10-05] FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 [2014-03-19] FF HKCU\...\Firefox\Extensions: [{51052ae6-fec7-4ca0-b963-5497add8acbf}] - C:\Program Files (x86)\Safer-Surf-soft\157.xpi FF Extension: No Name - C:\Program Files (x86)\Safer-Surf-soft\157.xpi [2014-03-23] FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 [2014-03-19] Chrome: ======= CHR HomePage: hxxp://go.speedbit.com/?s=E3Na CHR RestoreOnStartup: "hxxp://go.speedbit.com/?s=E3Na" CHR DefaultSearchKeyword: speedbit.com CHR DefaultSearchProvider: Speedbit Search CHR DefaultSearchURL: http://go.speedbit.com/search.aspx?s=E3Na&q={searchTerms} CHR Extension: (Docs) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-30] CHR Extension: (Google Drive) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-30] CHR Extension: (YouTube) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-30] CHR Extension: (surF annd keeepa) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgkbcbmjfghhllgenoncodfdidjpkope [2013-11-28] CHR Extension: (SearchNewTab) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cilnhakialkbjpmfflnfdgalmpdlidbd [2013-12-05] CHR Extension: (Google Search) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-30] CHR Extension: (SearchNewTab) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgopkdnhflahedeicelolmkbagmilhop [2013-12-06] CHR Extension: (Chrome In-App Payments service) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-30] CHR Extension: (Gmail) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-30] CHR Extension: (surf andd kEeP) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pockaihljoijiepjeekmibicmkabdidg [2013-11-28] CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-02-21] ==================== Services (Whitelisted) ================= R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-11-28] (Broadcom Corporation.) S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (http://www.BitComet.com) R2 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( ) R2 lxbk_device; C:\Windows\SysWOW64\lxbkcoms.exe [537256 2008-02-19] ( ) S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-28] () R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-11-28] (Realtek Semiconductor) R2 Safer-Surf; C:\Program Files (x86)\Safer-Surf-soft\Safer-Surf157.exe [194560 2014-03-23] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG) ==================== Drivers (Whitelisted) ==================== R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-11-28] (Broadcom Corporation.) S3 GUCI_AVS; C:\Windows\System32\DRIVERS\GUCI_AVS.sys [646656 2010-06-10] (PixArt Imaging Incorporation) R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation) R3 MODEMCSA; C:\Windows\System32\drivers\MODEMCSA.sys [24064 2009-07-14] (Microsoft Corporation) R2 risdptsk; C:\Windows\System32\DRIVERS\risdsn64.sys [76288 2013-11-28] (REDC) R3 smserial; C:\Windows\System32\DRIVERS\smserial.sys [1202688 2013-11-28] (Motorola Inc.) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software) R3 usbhub; C:\Windows\SysWOW64\DRIVERS\usbhub.sys [57600 2004-08-03] (Microsoft Corporation) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-31 13:11 - 2014-03-31 13:15 - 00030584 _____ () C:\Users\MARIO\Desktop\Addition.txt 2014-03-31 13:10 - 2014-03-31 13:16 - 00020218 _____ () C:\Users\MARIO\Desktop\FRST.txt 2014-03-31 13:09 - 2014-03-31 13:16 - 00000000 ____D () C:\FRST 2014-03-31 13:09 - 2014-03-31 13:09 - 02157056 _____ (Farbar) C:\Users\MARIO\Desktop\FRST64.exe 2014-03-30 19:31 - 2014-03-31 12:06 - 00000336 _____ () C:\Windows\setupact.log 2014-03-30 19:31 - 2014-03-30 19:32 - 00415648 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-30 19:31 - 2014-03-30 19:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-30 19:12 - 2014-03-30 19:12 - 00109728 _____ () C:\Users\MARIO\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-29 17:33 - 2014-03-29 17:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software 2014-03-24 21:12 - 2014-03-27 23:04 - 00000000 ____D () C:\Users\MARIO\Desktop\FOTKI I PLIKI DLA ALI 2014-03-24 16:21 - 2014-03-24 16:21 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SuperMemo World 2014-03-24 16:19 - 2014-03-24 16:19 - 00001000 _____ () C:\Users\Public\Desktop\SuperMemo UX.lnk 2014-03-24 16:17 - 2014-03-24 16:24 - 00000000 ____D () C:\Program Files (x86)\SuperMemo UX 2014-03-23 18:27 - 2014-03-23 18:27 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE 2014-03-23 18:04 - 2014-03-23 18:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SpeedBit 2014-03-23 18:03 - 2014-03-23 18:29 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit 2014-03-23 18:03 - 2014-03-23 18:04 - 00000000 ____D () C:\ProgramData\SpeedBit 2014-03-23 12:05 - 2014-03-23 12:05 - 00002211 _____ () C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00002169 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG 2014-03-23 12:05 - 2013-12-18 10:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-03-23 12:05 - 2013-12-18 10:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-03-23 12:05 - 2013-12-18 10:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll 2014-03-23 12:04 - 2014-03-23 12:06 - 00000000 ____D () C:\ProgramData\AVG 2014-03-23 12:03 - 2014-03-24 09:57 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-03-23 08:35 - 2014-03-31 08:55 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-23 08:34 - 2014-03-23 08:34 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-03-23 08:34 - 2014-03-23 08:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-03-23 08:34 - 2014-03-05 10:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-23 08:34 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-23 08:34 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero_AG 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero 2014-03-23 02:29 - 2014-03-23 02:29 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Nero 2014-03-23 02:28 - 2014-03-23 02:28 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-03-23 02:27 - 2014-03-23 02:27 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2014.lnk 2014-03-23 02:22 - 2014-03-23 02:28 - 00000000 ____D () C:\ProgramData\Nero 2014-03-23 02:22 - 2014-03-23 02:27 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-03-23 01:59 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-03-23 01:59 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-03-23 01:35 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-03-23 01:15 - 2014-03-23 01:15 - 00001179 _____ () C:\Users\MARIO\Desktop\Bandizip.lnk 2014-03-23 01:15 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bandizip 2014-03-23 01:14 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Bandizip 2014-03-23 01:08 - 2014-03-31 12:07 - 00000396 _____ () C:\Windows\Tasks\Safer-Surf Update.job 2014-03-23 01:08 - 2014-03-31 12:07 - 00000392 _____ () C:\Windows\Tasks\Safer-Surf_wd.job 2014-03-23 01:08 - 2014-03-28 19:22 - 00000000 ____D () C:\Program Files (x86)\Safer-Surf-soft 2014-03-23 01:08 - 2014-03-23 01:08 - 00003044 _____ () C:\Windows\System32\Tasks\Safer-Surf Update 2014-03-23 01:08 - 2014-03-23 01:08 - 00002980 _____ () C:\Windows\System32\Tasks\Safer-Surf_wd 2014-03-23 00:40 - 2014-03-23 00:40 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG2014 2014-03-23 00:39 - 2014-03-28 09:19 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-03-23 00:39 - 2014-03-23 00:39 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\TuneUp Software 2014-03-23 00:38 - 2014-03-23 12:05 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-03-23 00:38 - 2014-03-23 00:38 - 00000000 ___HD () C:\$AVG 2014-03-23 00:18 - 2014-03-23 00:19 - 00000000 ____D () C:\Program Files (x86)\BitComet 2014-03-23 00:18 - 2014-03-23 00:18 - 00000967 _____ () C:\Users\Public\Desktop\BitComet.lnk 2014-03-23 00:14 - 2014-03-23 00:39 - 00000000 ____D () C:\ProgramData\AVG2014 2014-03-22 23:50 - 2014-03-31 12:21 - 00000000 ____D () C:\ProgramData\MFAData 2014-03-22 23:50 - 2014-03-23 00:52 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Avg2014 2014-03-22 23:50 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\MFAData 2014-03-22 14:07 - 2014-03-22 14:07 - 00001001 _____ () C:\Users\MARIO\Desktop\Słownik YDP.lnk 2014-03-22 14:04 - 2014-03-22 14:12 - 00000185 _____ () C:\Windows\YdpDict.ini 2014-03-22 14:04 - 2014-03-22 14:07 - 00000000 ____D () C:\Program Files (x86)\YDP 2014-03-22 14:04 - 2014-03-22 14:04 - 00021052 _____ () C:\Windows\SysWOW64\SIntfNT.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00015144 _____ () C:\Windows\SysWOW64\SIntf32.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00012067 _____ () C:\Windows\SysWOW64\SIntf16.dll 2014-03-22 14:04 - 1995-07-14 02:43 - 00027632 ____R (Microsoft Corporation) C:\Windows\system\Ctl3dv2.dll 2014-03-22 14:04 - 1995-04-27 00:20 - 00125856 ____R (Microsoft Corporation) C:\Windows\system\Mfco250.dll 2014-03-22 14:04 - 1995-04-27 00:15 - 00322384 _____ (Microsoft Corporation) C:\Windows\system\Mfc250.dll 2014-03-22 14:04 - 1995-04-26 23:33 - 00146976 _____ (Microsoft Corporation) C:\Windows\system\Mfcoleui.dll 2014-03-22 14:02 - 1998-10-07 14:54 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUn0415.exe 2014-03-21 20:03 - 2014-03-23 08:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-21 20:03 - 2014-03-21 20:03 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Malwarebytes 2014-03-21 19:20 - 2014-03-21 19:21 - 145244480 _____ () C:\Users\MARIO\Desktop\cureit.exe 2014-03-21 01:01 - 2014-03-21 01:01 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Eraser 6 2014-03-20 19:51 - 2014-03-28 16:29 - 00000000 ____D () C:\Users\MARIO\Desktop\DO ŚCIĄGNIĘCIA 2014-03-20 19:51 - 2014-03-20 19:51 - 00000000 ____D () C:\Program Files\Eraser 2014-03-20 10:19 - 2014-03-20 10:19 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Logitech® Webcam Software 2014-03-20 10:16 - 2014-03-20 10:16 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-03-20 10:15 - 2014-03-20 10:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Leadertech 2014-03-20 10:14 - 2014-03-20 10:15 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-03-20 10:14 - 2014-03-20 10:14 - 00001584 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk 2014-03-19 00:58 - 2014-03-31 10:54 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\DMCache 2014-03-19 00:58 - 2014-03-30 19:17 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\IDM 2014-03-19 00:58 - 2014-03-19 00:59 - 00000000 ____D () C:\Program Files (x86)\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000969 _____ () C:\Users\MARIO\Desktop\Internet Download Manager.lnk 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\ProgramData\IDM 2014-03-19 00:22 - 2014-03-19 00:22 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I 2014-03-19 00:21 - 2014-03-21 19:17 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro 2014-03-19 00:20 - 2014-03-21 20:55 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\systweak 2014-03-18 23:47 - 2014-03-18 23:47 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications 2014-03-17 21:55 - 2014-03-17 21:55 - 00000000 ____D () C:\Windows\Sun 2014-03-16 18:23 - 2014-03-16 18:23 - 00003364 _____ () C:\Windows\System32\Tasks\Odkurzacz 2014-03-16 18:23 - 2014-03-16 18:23 - 00001019 _____ () C:\Users\MARIO\Desktop\Odkurzacz.lnk 2014-03-16 18:23 - 2014-03-16 18:23 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-03-16 14:56 - 2014-03-16 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-03-16 14:56 - 2012-08-20 02:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2014-03-16 14:54 - 2014-03-16 18:10 - 00000000 ____D () C:\ProgramData\DatacardService 2014-03-16 08:00 - 2014-03-16 08:00 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Boilsoft 2014-03-16 00:13 - 2014-03-16 00:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\FreemakeVideoConverter 2014-03-16 00:12 - 2014-03-21 07:51 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Pokki 2014-03-16 00:12 - 2014-03-16 18:07 - 00000000 ____D () C:\ProgramData\Freemake 2014-03-16 00:12 - 2014-03-16 00:12 - 00002112 _____ () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2014-03-16 00:11 - 2014-03-16 18:07 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-03-16 00:09 - 2014-03-16 00:10 - 00000000 ____D () C:\Users\MARIO\AppData\Local\SearchProtect 2014-03-15 07:57 - 2014-03-28 13:11 - 00000000 ____D () C:\Users\MARIO\Desktop\Niemiecki_w_pracy 2014-03-14 07:37 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-14 07:37 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-13 20:45 - 2014-03-20 10:15 - 00005720 _____ () C:\Windows\system32\lvcoinst.log 2014-03-13 20:45 - 2014-03-20 10:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd 2014-03-12 19:47 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-12 19:47 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-12 19:47 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-12 19:47 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-12 19:47 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-12 19:47 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-12 19:47 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-12 19:47 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-12 19:47 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-12 19:47 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-12 19:47 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-12 19:47 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-12 19:47 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-12 19:47 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-12 19:47 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-12 19:47 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-12 19:47 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-12 19:47 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-12 19:47 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-12 19:47 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-12 19:47 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-12 19:47 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-12 19:47 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-12 19:47 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-12 19:47 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-12 19:47 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-12 19:47 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-12 19:47 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-12 19:47 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-12 19:47 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-12 19:47 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-12 19:47 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-12 19:47 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-12 19:47 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-12 19:47 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-12 19:47 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-12 19:47 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-12 19:47 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-12 19:47 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-12 19:47 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-12 19:47 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-12 19:47 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-12 19:46 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-12 19:46 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-12 19:46 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-12 19:46 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-11 20:42 - 2008-09-24 11:40 - 04122368 ____R (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\Drivers\alcxwdm.sys 2014-03-11 20:42 - 2007-04-16 16:28 - 00577536 _____ (Realtek Semiconductor Corp.) C:\Windows\soundman.exe 2014-03-11 20:42 - 2006-12-08 16:20 - 10528768 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RTLCPL.exe 2014-03-11 20:42 - 2006-11-17 06:40 - 18804736 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\alsndmgr.cpl 2014-03-11 20:42 - 2006-10-18 03:53 - 00147456 _____ () C:\Windows\SysWOW64\RtlCPAPI.dll 2014-03-11 20:42 - 2006-08-01 16:02 - 00049152 _____ () C:\Windows\SysWOW64\ChCfg.exe 2014-03-11 20:42 - 2002-02-05 14:54 - 00141016 _____ () C:\Windows\SysWOW64\alsndmgr.wav 2014-03-11 20:41 - 2014-03-11 20:41 - 00000000 ____D () C:\Program Files (x86)\Realtek AC97 2014-03-11 20:41 - 2006-07-31 12:27 - 00217088 _____ (Realtek Semiconductor Corp.) C:\Windows\alcrmv.exe 2014-03-11 20:41 - 2006-07-31 12:19 - 00315392 _____ (Realtek Semiconductor Corp.) C:\Windows\alcupd.exe 2014-03-11 20:40 - 2014-03-11 20:40 - 00003118 _____ () C:\Windows\System32\Tasks\{58AE1ABE-90EA-4585-BE69-AD8C404A4D79} 2014-03-11 20:18 - 2014-03-11 20:40 - 00319488 _____ (Realtek Semiconductor Corp.) C:\Windows\HideWin.exe 2014-03-09 17:07 - 2014-03-09 17:07 - 00000146 _____ () C:\Users\MARIO\Desktop\Dźwięk.lnk 2014-03-09 13:55 - 2014-03-23 02:09 - 00000082 _____ () C:\Users\MARIO\AppData\Roaming\WB.CFG 2014-03-09 13:13 - 2014-03-09 13:13 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Skype 2014-03-09 09:14 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-03-09 09:14 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-03-09 09:14 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-03-09 09:14 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-03-05 11:09 - 2014-03-05 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-03-05 10:57 - 2014-03-05 10:57 - 00000000 ____D () C:\Users\MARIO\AppData\Local\GHISLER ==================== One Month Modified Files and Folders ======= 2014-03-31 13:16 - 2014-03-31 13:10 - 00020218 _____ () C:\Users\MARIO\Desktop\FRST.txt 2014-03-31 13:16 - 2014-03-31 13:09 - 00000000 ____D () C:\FRST 2014-03-31 13:15 - 2014-03-31 13:11 - 00030584 _____ () C:\Users\MARIO\Desktop\Addition.txt 2014-03-31 13:09 - 2014-03-31 13:09 - 02157056 _____ (Farbar) C:\Users\MARIO\Desktop\FRST64.exe 2014-03-31 12:57 - 2012-08-11 23:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Skype 2014-03-31 12:56 - 2009-07-14 06:45 - 00017760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-31 12:56 - 2009-07-14 06:45 - 00017760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-31 12:21 - 2014-03-22 23:50 - 00000000 ____D () C:\ProgramData\MFAData 2014-03-31 12:13 - 2009-07-14 19:55 - 00744074 _____ () C:\Windows\system32\perfh015.dat 2014-03-31 12:13 - 2009-07-14 19:55 - 00157524 _____ () C:\Windows\system32\perfc015.dat 2014-03-31 12:13 - 2009-07-14 07:13 - 01679434 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-31 12:11 - 2013-07-13 08:43 - 01178963 _____ () C:\Windows\WindowsUpdate.log 2014-03-31 12:07 - 2014-03-23 01:08 - 00000396 _____ () C:\Windows\Tasks\Safer-Surf Update.job 2014-03-31 12:07 - 2014-03-23 01:08 - 00000392 _____ () C:\Windows\Tasks\Safer-Surf_wd.job 2014-03-31 12:07 - 2013-07-13 15:04 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-03-31 12:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-31 12:06 - 2014-03-30 19:31 - 00000336 _____ () C:\Windows\setupact.log 2014-03-31 10:54 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\DMCache 2014-03-31 08:55 - 2014-03-23 08:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-30 19:32 - 2014-03-30 19:31 - 00415648 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-30 19:31 - 2014-03-30 19:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-30 19:19 - 2013-04-07 15:17 - 00000000 ____D () C:\Users\MARIO\Desktop\fotki 2014-03-30 19:17 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\IDM 2014-03-30 19:12 - 2014-03-30 19:12 - 00109728 _____ () C:\Users\MARIO\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-30 10:17 - 2012-08-12 00:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\BitComet 2014-03-29 17:34 - 2014-03-29 17:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-29 14:44 - 2013-03-17 22:44 - 00000000 ____D () C:\Users\MARIO\Doctor Web 2014-03-29 00:07 - 2013-01-02 19:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\GG 2014-03-28 19:22 - 2014-03-23 01:08 - 00000000 ____D () C:\Program Files (x86)\Safer-Surf-soft 2014-03-28 17:48 - 2012-08-11 20:48 - 00000000 ____D () C:\Users\MARIO\Desktop\FOLDERY MOJE 2014-03-28 16:29 - 2014-03-20 19:51 - 00000000 ____D () C:\Users\MARIO\Desktop\DO ŚCIĄGNIĘCIA 2014-03-28 13:11 - 2014-03-15 07:57 - 00000000 ____D () C:\Users\MARIO\Desktop\Niemiecki_w_pracy 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software 2014-03-28 09:19 - 2014-03-23 00:39 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-03-27 23:04 - 2014-03-24 21:12 - 00000000 ____D () C:\Users\MARIO\Desktop\FOTKI I PLIKI DLA ALI 2014-03-25 18:45 - 2013-12-08 20:01 - 00000000 ____D () C:\Users\MARIO\Desktop\Praca 2014-03-25 15:24 - 2014-01-01 18:43 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\vlc 2014-03-24 16:24 - 2014-03-24 16:17 - 00000000 ____D () C:\Program Files (x86)\SuperMemo UX 2014-03-24 16:21 - 2014-03-24 16:21 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SuperMemo World 2014-03-24 16:19 - 2014-03-24 16:19 - 00001000 _____ () C:\Users\Public\Desktop\SuperMemo UX.lnk 2014-03-24 09:57 - 2014-03-23 12:03 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-03-24 09:57 - 2014-01-02 20:59 - 00000000 ____D () C:\ProgramData\{70FE9869-8D38-4EB3-8541-A735C2285CF7} 2014-03-24 09:57 - 2012-08-11 22:36 - 00000000 ___RD () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-23 18:29 - 2014-03-23 18:03 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit 2014-03-23 18:27 - 2014-03-23 18:27 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE 2014-03-23 18:04 - 2014-03-23 18:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SpeedBit 2014-03-23 18:04 - 2014-03-23 18:03 - 00000000 ____D () C:\ProgramData\SpeedBit 2014-03-23 14:08 - 2012-08-12 00:57 - 00000000 ___RD () C:\Users\MARIO\Desktop\Filmy 2014-03-23 12:06 - 2014-03-23 12:04 - 00000000 ____D () C:\ProgramData\AVG 2014-03-23 12:05 - 2014-03-23 12:05 - 00002211 _____ () C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00002169 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG 2014-03-23 12:05 - 2014-03-23 00:38 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-03-23 08:59 - 2012-08-11 23:49 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-03-23 08:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Vss 2014-03-23 08:34 - 2014-03-23 08:34 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-03-23 08:34 - 2014-03-23 08:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-03-23 08:34 - 2014-03-21 20:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero_AG 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero 2014-03-23 02:29 - 2014-03-23 02:29 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Nero 2014-03-23 02:28 - 2014-03-23 02:28 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-03-23 02:28 - 2014-03-23 02:22 - 00000000 ____D () C:\ProgramData\Nero 2014-03-23 02:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors 2014-03-23 02:27 - 2014-03-23 02:27 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2014.lnk 2014-03-23 02:27 - 2014-03-23 02:22 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-03-23 02:09 - 2014-03-09 13:55 - 00000082 _____ () C:\Users\MARIO\AppData\Roaming\WB.CFG 2014-03-23 01:15 - 2014-03-23 01:15 - 00001179 _____ () C:\Users\MARIO\Desktop\Bandizip.lnk 2014-03-23 01:15 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bandizip 2014-03-23 01:15 - 2014-03-23 01:14 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Bandizip 2014-03-23 01:08 - 2014-03-23 01:08 - 00003044 _____ () C:\Windows\System32\Tasks\Safer-Surf Update 2014-03-23 01:08 - 2014-03-23 01:08 - 00002980 _____ () C:\Windows\System32\Tasks\Safer-Surf_wd 2014-03-23 00:52 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Avg2014 2014-03-23 00:40 - 2014-03-23 00:40 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG2014 2014-03-23 00:39 - 2014-03-23 00:39 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\TuneUp Software 2014-03-23 00:39 - 2014-03-23 00:14 - 00000000 ____D () C:\ProgramData\AVG2014 2014-03-23 00:38 - 2014-03-23 00:38 - 00000000 ___HD () C:\$AVG 2014-03-23 00:19 - 2014-03-23 00:18 - 00000000 ____D () C:\Program Files (x86)\BitComet 2014-03-23 00:18 - 2014-03-23 00:18 - 00000967 _____ () C:\Users\Public\Desktop\BitComet.lnk 2014-03-22 23:50 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\MFAData 2014-03-22 23:38 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default 2014-03-22 14:12 - 2014-03-22 14:04 - 00000185 _____ () C:\Windows\YdpDict.ini 2014-03-22 14:07 - 2014-03-22 14:07 - 00001001 _____ () C:\Users\MARIO\Desktop\Słownik YDP.lnk 2014-03-22 14:07 - 2014-03-22 14:04 - 00000000 ____D () C:\Program Files (x86)\YDP 2014-03-22 14:06 - 2009-07-14 04:34 - 00000574 _____ () C:\Windows\win.ini 2014-03-22 14:04 - 2014-03-22 14:04 - 00021052 _____ () C:\Windows\SysWOW64\SIntfNT.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00015144 _____ () C:\Windows\SysWOW64\SIntf32.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00012067 _____ () C:\Windows\SysWOW64\SIntf16.dll 2014-03-22 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system 2014-03-21 20:55 - 2014-03-19 00:20 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\systweak 2014-03-21 20:55 - 2013-12-04 16:17 - 00001449 _____ () C:\Windows\wininit.ini 2014-03-21 20:03 - 2014-03-21 20:03 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Malwarebytes 2014-03-21 19:21 - 2014-03-21 19:20 - 145244480 _____ () C:\Users\MARIO\Desktop\cureit.exe 2014-03-21 19:17 - 2014-03-19 00:21 - 00003108 _____ () C:\Windows\System32\Tasks\RegClean Pro 2014-03-21 07:51 - 2014-03-16 00:12 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Pokki 2014-03-21 01:01 - 2014-03-21 01:01 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Eraser 6 2014-03-20 19:51 - 2014-03-20 19:51 - 00000000 ____D () C:\Program Files\Eraser 2014-03-20 10:19 - 2014-03-20 10:19 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Logitech® Webcam Software 2014-03-20 10:16 - 2014-03-20 10:16 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-03-20 10:15 - 2014-03-20 10:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Leadertech 2014-03-20 10:15 - 2014-03-20 10:14 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-03-20 10:15 - 2014-03-13 20:45 - 00005720 _____ () C:\Windows\system32\lvcoinst.log 2014-03-20 10:15 - 2014-03-13 20:45 - 00000000 ____D () C:\Program Files\Common Files\logishrd 2014-03-20 10:14 - 2014-03-20 10:14 - 00001584 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk 2014-03-20 08:25 - 2012-08-11 22:35 - 00000000 ____D () C:\Users\MARIO 2014-03-20 08:24 - 2013-12-01 14:26 - 00001652 _____ () C:\Windows\system32\ASOROSet.bin 2014-03-20 08:24 - 2009-07-14 04:34 - 89128960 _____ () C:\Windows\system32\config\software.bak 2014-03-20 08:24 - 2009-07-14 04:34 - 21233664 _____ () C:\Windows\system32\config\system.bak 2014-03-20 08:24 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-03-20 08:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-03-20 08:17 - 2013-12-01 14:23 - 00000000 ____D () C:\Windows\system32\config\RCCBakup 2014-03-20 07:41 - 2013-01-13 01:15 - 00000000 ____D () C:\FFOutput 2014-03-19 06:40 - 2014-01-01 18:42 - 00001026 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-03-19 00:59 - 2014-03-19 00:58 - 00000000 ____D () C:\Program Files (x86)\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000969 _____ () C:\Users\MARIO\Desktop\Internet Download Manager.lnk 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\ProgramData\IDM 2014-03-19 00:22 - 2014-03-19 00:22 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I 2014-03-18 23:47 - 2014-03-18 23:47 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications 2014-03-18 20:43 - 2013-08-15 03:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-18 20:40 - 2012-10-20 23:58 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-17 21:55 - 2014-03-17 21:55 - 00000000 ____D () C:\Windows\Sun 2014-03-16 18:31 - 2012-12-06 11:11 - 00000000 ____D () C:\Users\MARIO\DoctorWeb 2014-03-16 18:27 - 2012-08-12 02:16 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack 2014-03-16 18:23 - 2014-03-16 18:23 - 00003364 _____ () C:\Windows\System32\Tasks\Odkurzacz 2014-03-16 18:23 - 2014-03-16 18:23 - 00001019 _____ () C:\Users\MARIO\Desktop\Odkurzacz.lnk 2014-03-16 18:23 - 2014-03-16 18:23 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-03-16 18:10 - 2014-03-16 14:54 - 00000000 ____D () C:\ProgramData\DatacardService 2014-03-16 18:08 - 2012-08-11 23:58 - 00000000 ____D () C:\ProgramData\Skype 2014-03-16 18:07 - 2014-03-16 00:12 - 00000000 ____D () C:\ProgramData\Freemake 2014-03-16 18:07 - 2014-03-16 00:11 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-03-16 16:00 - 2012-12-30 21:27 - 00000000 ____D () C:\Users\MARIO\Desktop\OGLADNIĘTE 2014-03-16 14:56 - 2014-03-16 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-03-16 08:00 - 2014-03-16 08:00 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Boilsoft 2014-03-16 00:13 - 2014-03-16 00:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\FreemakeVideoConverter 2014-03-16 00:12 - 2014-03-16 00:12 - 00002112 _____ () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2014-03-16 00:10 - 2014-03-16 00:09 - 00000000 ____D () C:\Users\MARIO\AppData\Local\SearchProtect 2014-03-14 22:42 - 2013-12-04 20:48 - 01697300 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-03-13 04:21 - 2012-11-07 19:47 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-13 04:21 - 2012-11-07 19:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-13 04:03 - 2012-08-11 23:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-11 20:52 - 2013-01-14 23:49 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-03-11 20:41 - 2014-03-11 20:41 - 00000000 ____D () C:\Program Files (x86)\Realtek AC97 2014-03-11 20:41 - 2012-08-11 22:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-03-11 20:40 - 2014-03-11 20:40 - 00003118 _____ () C:\Windows\System32\Tasks\{58AE1ABE-90EA-4585-BE69-AD8C404A4D79} 2014-03-11 20:40 - 2014-03-11 20:18 - 00319488 _____ (Realtek Semiconductor Corp.) C:\Windows\HideWin.exe 2014-03-10 15:21 - 2013-10-30 11:12 - 00000866 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-03-10 13:53 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-09 20:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-03-09 19:05 - 2013-01-10 18:39 - 00000000 _____ () C:\Users\MARIO\AppData\Local\FnF4.txt 2014-03-09 17:07 - 2014-03-09 17:07 - 00000146 _____ () C:\Users\MARIO\Desktop\Dźwięk.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Skype 2014-03-09 13:13 - 2012-08-11 23:58 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-03-09 11:40 - 2013-04-06 11:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-03-05 11:09 - 2014-03-05 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-03-05 11:04 - 2013-04-10 16:06 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Downloaded Installations 2014-03-05 11:04 - 2012-11-09 12:07 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-03-05 11:04 - 2012-08-11 23:36 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\hpqLog 2014-03-05 11:04 - 2012-08-11 23:20 - 00000000 ____D () C:\Windows\Panther 2014-03-05 11:02 - 2013-10-30 11:09 - 00000000 ____D () C:\Program Files\CCleaner 2014-03-05 10:59 - 2013-11-28 14:49 - 00000000 ____D () C:\ProgramData\9f6539c2cf5992af 2014-03-05 10:57 - 2014-03-05 10:57 - 00000000 ____D () C:\Users\MARIO\AppData\Local\GHISLER 2014-03-05 10:26 - 2014-03-23 08:34 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-05 10:26 - 2014-03-23 08:34 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-05 10:26 - 2014-03-23 08:34 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-01 08:05 - 2014-03-12 19:46 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-01 07:17 - 2014-03-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-01 07:16 - 2014-03-12 19:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-01 06:58 - 2014-03-12 19:47 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-01 06:52 - 2014-03-12 19:47 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-01 06:51 - 2014-03-12 19:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-01 06:42 - 2014-03-12 19:47 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-01 06:40 - 2014-03-12 19:47 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-01 06:37 - 2014-03-12 19:47 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-01 06:33 - 2014-03-12 19:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-01 06:33 - 2014-03-12 19:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-01 06:32 - 2014-03-12 19:47 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-01 06:30 - 2014-03-12 19:47 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-01 06:23 - 2014-03-12 19:46 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-01 06:17 - 2014-03-12 19:47 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-01 06:11 - 2014-03-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-01 06:02 - 2014-03-12 19:47 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-01 05:54 - 2014-03-12 19:47 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-01 05:52 - 2014-03-12 19:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-01 05:51 - 2014-03-12 19:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-01 05:47 - 2014-03-12 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-01 05:43 - 2014-03-12 19:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-01 05:43 - 2014-03-12 19:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-01 05:42 - 2014-03-12 19:47 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-01 05:40 - 2014-03-12 19:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-01 05:38 - 2014-03-12 19:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-01 05:37 - 2014-03-12 19:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-01 05:35 - 2014-03-12 19:47 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-01 05:18 - 2014-03-12 19:47 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-01 05:16 - 2014-03-12 19:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-01 05:14 - 2014-03-12 19:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-01 05:10 - 2014-03-12 19:47 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-01 05:03 - 2014-03-12 19:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-01 05:00 - 2014-03-12 19:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-01 04:57 - 2014-03-12 19:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-01 04:38 - 2014-03-12 19:47 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-01 04:32 - 2014-03-12 19:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-01 04:27 - 2014-03-12 19:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-01 04:25 - 2014-03-12 19:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-01 04:25 - 2014-03-12 19:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by MARIO at 2014-03-31 13:17:32 Running from C:\Users\MARIO\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Aktualizacje NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Angry Birds Space 1.0.0 (HKLM-x32\...\Angry Birds Space 1.0.0_is1) (Version: - ) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Ashampoo Burning Studio 12 v.12.0.1 (HKLM-x32\...\Ashampoo Burning Studio 12_is1) (Version: 12.0.1 - Ashampoo GmbH & Co. KG) Ashampoo PO Toolbar (HKCU\...\CT2481033) (Version: 10.14.0.105 - Ashampoo PO) <==== ATTENTION AuthenTec TrueSuite (HKLM\...\{E6C44758-FF49-47D1-8182-65E3818ACE23}) (Version: 2.0.0.57 - AuthenTec, Inc.) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4354 - AVG Technologies) AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4354 - AVG Technologies) Hidden AVG PC TuneUp 2014 (HKLM-x32\...\AVG PC TuneUp) (Version: 14.0.1001.295 - AVG) AVG PC TuneUp 2014 (pl-PL) (x32 Version: 14.0.1001.295 - AVG) Hidden AVG PC TuneUp 2014 (x32 Version: 14.0.1001.295 - AVG) Hidden Bandizip (HKCU\...\Bandizip) (Version: 3.10 - Bandisoft.com) BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform) concept/design onlineTV 8 (HKLM-x32\...\{D2AC7034-15AC-4F62-85BD-1E48021E45D6}_is1) (Version: 8.0.0.0 - concept/design GmbH) concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: Video Jukebox - concept/design GmbH) Deluxe Ski Jump 3 v1.7.0 (HKLM-x32\...\Deluxe Ski Jump 3_is1) (Version: 1.7.0 - Mediamond Tmi) eMule (HKLM-x32\...\eMule) (Version: - ) Eraser 6.0.10.2620 (HKLM\...\{6E5159B4-A519-41EF-80EF-AD58371515DF}) (Version: 6.0.2620 - The Eraser Project) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time) GG (HKCU\...\GG) (Version: 11 - GG Network S.A.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP) HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) Internet Download Manager PL 5.18 Build 8 Packages (HKCU\...\Internet Download Manager PL 5.18 Build 8 Packages) (Version: - ) <==== ATTENTION ipla 2.6.3 (HKLM-x32\...\ipla) (Version: 2.6.3 - Redefine Sp z o.o.) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 6.2.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.2.0 - ) Lexmark X1100 Series (HKLM\...\Lexmark X1100 Series) (Version: - Lexmark International, Inc.) Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden LWS Gallery (x32 Version: 13.51.827.0 - Logitech) Hidden LWS Help_main (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Launcher (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Motion Detection (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Pictures And Video (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden LWS Webcam Software (x32 Version: 13.51.815.0 - Logitech) Hidden LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden Malwarebytes Anti-Malware wersja 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation) MegaPinball (HKLM-x32\...\{710913F4-5E9D-495B-A5F4-43FF7CF26B43}) (Version: 1.00.000 - ) Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Monopoly by Parker Brothers (HKLM-x32\...\Monopoly by Parker Brothers) (Version: 1.0.406.0 - GameHouse, Inc.) Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc) Mozilla Firefox 28.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 pl)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 2014 (HKLM-x32\...\{0128492C-AB60-43BE-9D9A-8CA622CAF06E}) (Version: 15.0.07700 - Nero AG) Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 15.1.0030 - Nero AG) Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nokia Connectivity Cable Driver (HKLM-x32\...\{4216D328-0FE8-48B8-85B8-BD300E6F080F}) (Version: 7.1.36.0 - Nokia) Nokia Flashing Cable Driver (HKLM-x32\...\{2A0A6470-FD0F-4F45-9B11-85F3167DB943}) (Version: 8.23.0.0 - Nokia) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliński) Panel sterowania NVIDIA 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.2.10 - Prolific Technology INC) PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.) Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden Realtek AC'97 Audio (HKLM-x32\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: 5.36 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.) Safer-Surf (HKLM-x32\...\9c069507-b3c8-491f-8c69-e5a2aae87bb0) (Version: - Safer-Surf software) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.) Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Słownik YDP (niemiecko-polski, polsko-niemiecki) (HKLM-x32\...\YdpDict200) (Version: - ) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.) Super Kulki (HKLM-x32\...\Super Kulki_is1) (Version: 5.0 - ALLCinema Ltd.) SuperMemo UX - Niemiecki. Kein Problem!+ 1 (HKLM-x32\...\SuperMemo UX - Niemiecki. Kein Problem!+ 1) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.33.0 - Synaptics Incorporated) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version: - Microsoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) ==================== Restore Points ========================= 22-03-2014 23:32:54 Zainstalowany program DirectX 22-03-2014 23:56:59 Zainstalowany program DirectX 22-03-2014 23:59:18 Zainstalowany program DirectX 23-03-2014 00:21:57 Installed Nero 2014. 23-03-2014 10:04:20 Zainstalowano: AVG PC TuneUp 2014 31-03-2014 06:53:51 Configured MegaPinball ==================== Hosts content: ========================== 2009-07-14 04:34 - 2012-12-06 11:47 - 00000808 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04E9BD74-8A61-4A6F-B589-FEF116AF0248} - \Safer-Networking\Spybot - Search and Destroy\Check for updates No Task File Task: {12D0FAF0-11EF-4B66-852F-92D6B5CE3045} - \Safer-Networking\Spybot - Search and Destroy\Scan the system No Task File Task: {190EF493-D181-4474-8E68-FB0319B634F2} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-09-21] (FranmoSoftware) Task: {2C9AEA5E-972B-4520-A28A-BF920552E449} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG) Task: {51134F56-3615-41AC-A871-3A656BFDB61A} - System32\Tasks\irMonitor => C:\Users\MARIO\AppData\Local\IRMonitor.exe [2013-12-30] (ITE Tech. Inc.) Task: {53B32AF4-C918-424C-9D6E-3F842024F19F} - System32\Tasks\Safer-Surf_wd => C:\Program Files (x86)\Safer-Surf-soft\Safer-Surfw.exe Task: {586B1F80-02EE-4598-AF09-5FC175C5B216} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {6B7845DD-833F-42D2-B2BE-4011E0494811} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION Task: {75786114-EF2D-4792-B000-F4AFBF98DCDD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-04-24] (Piriform Ltd) Task: {788B3260-E633-4AA6-B658-E944C45AEEB7} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization No Task File Task: {96067DB2-0945-466D-90B8-8C59ABEFBC67} - System32\Tasks\Safer-Surf Update => C:\Program Files (x86)\Safer-Surf-soft\safeS.exe [2014-03-23] () Task: {A8AE4538-C422-405B-8EA0-709D31681C05} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: C:\Windows\Tasks\Safer-Surf Update.job => C:\Program Files (x86)\Safer-Surf-soft\safeS.exe Task: C:\Windows\Tasks\Safer-Surf_wd.job => C:\Program Files (x86)\Safer-Surf-soft\Safer-Surfw.exe

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 13:24

Addition jest ucięty. Wstaw go jeszcze raz.

**Posty:** 11 · przez **mario113** 31 Mar 2014, 13:30

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by MARIO at 2014-03-31 13:28:15 Running from C:\Users\MARIO\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Aktualizacje NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Angry Birds Space 1.0.0 (HKLM-x32\...\Angry Birds Space 1.0.0_is1) (Version: - ) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Ashampoo Burning Studio 12 v.12.0.1 (HKLM-x32\...\Ashampoo Burning Studio 12_is1) (Version: 12.0.1 - Ashampoo GmbH & Co. KG) Ashampoo PO Toolbar (HKCU\...\CT2481033) (Version: 10.14.0.105 - Ashampoo PO) <==== ATTENTION AuthenTec TrueSuite (HKLM\...\{E6C44758-FF49-47D1-8182-65E3818ACE23}) (Version: 2.0.0.57 - AuthenTec, Inc.) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4354 - AVG Technologies) AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4354 - AVG Technologies) Hidden AVG PC TuneUp 2014 (HKLM-x32\...\AVG PC TuneUp) (Version: 14.0.1001.295 - AVG) AVG PC TuneUp 2014 (pl-PL) (x32 Version: 14.0.1001.295 - AVG) Hidden AVG PC TuneUp 2014 (x32 Version: 14.0.1001.295 - AVG) Hidden Bandizip (HKCU\...\Bandizip) (Version: 3.10 - Bandisoft.com) BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform) concept/design onlineTV 8 (HKLM-x32\...\{D2AC7034-15AC-4F62-85BD-1E48021E45D6}_is1) (Version: 8.0.0.0 - concept/design GmbH) concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: Video Jukebox - concept/design GmbH) Deluxe Ski Jump 3 v1.7.0 (HKLM-x32\...\Deluxe Ski Jump 3_is1) (Version: 1.7.0 - Mediamond Tmi) eMule (HKLM-x32\...\eMule) (Version: - ) Eraser 6.0.10.2620 (HKLM\...\{6E5159B4-A519-41EF-80EF-AD58371515DF}) (Version: 6.0.2620 - The Eraser Project) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time) GG (HKCU\...\GG) (Version: 11 - GG Network S.A.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP) HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) Internet Download Manager PL 5.18 Build 8 Packages (HKCU\...\Internet Download Manager PL 5.18 Build 8 Packages) (Version: - ) <==== ATTENTION ipla 2.6.3 (HKLM-x32\...\ipla) (Version: 2.6.3 - Redefine Sp z o.o.) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 6.2.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.2.0 - ) Lexmark X1100 Series (HKLM\...\Lexmark X1100 Series) (Version: - Lexmark International, Inc.) Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden LWS Gallery (x32 Version: 13.51.827.0 - Logitech) Hidden LWS Help_main (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Launcher (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Motion Detection (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Pictures And Video (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden LWS Webcam Software (x32 Version: 13.51.815.0 - Logitech) Hidden LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden Malwarebytes Anti-Malware wersja 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation) MegaPinball (HKLM-x32\...\{710913F4-5E9D-495B-A5F4-43FF7CF26B43}) (Version: 1.00.000 - ) Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Monopoly by Parker Brothers (HKLM-x32\...\Monopoly by Parker Brothers) (Version: 1.0.406.0 - GameHouse, Inc.) Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc) Mozilla Firefox 28.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 pl)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 2014 (HKLM-x32\...\{0128492C-AB60-43BE-9D9A-8CA622CAF06E}) (Version: 15.0.07700 - Nero AG) Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 15.1.0030 - Nero AG) Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nokia Connectivity Cable Driver (HKLM-x32\...\{4216D328-0FE8-48B8-85B8-BD300E6F080F}) (Version: 7.1.36.0 - Nokia) Nokia Flashing Cable Driver (HKLM-x32\...\{2A0A6470-FD0F-4F45-9B11-85F3167DB943}) (Version: 8.23.0.0 - Nokia) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliński) Panel sterowania NVIDIA 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.2.10 - Prolific Technology INC) PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.) Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden Realtek AC'97 Audio (HKLM-x32\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: 5.36 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.) Safer-Surf (HKLM-x32\...\9c069507-b3c8-491f-8c69-e5a2aae87bb0) (Version: - Safer-Surf software) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.) Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Słownik YDP (niemiecko-polski, polsko-niemiecki) (HKLM-x32\...\YdpDict200) (Version: - ) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.) Super Kulki (HKLM-x32\...\Super Kulki_is1) (Version: 5.0 - ALLCinema Ltd.) SuperMemo UX - Niemiecki. Kein Problem!+ 1 (HKLM-x32\...\SuperMemo UX - Niemiecki. Kein Problem!+ 1) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.33.0 - Synaptics Incorporated) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version: - Microsoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) ==================== Restore Points ========================= 22-03-2014 23:32:54 Zainstalowany program DirectX 22-03-2014 23:56:59 Zainstalowany program DirectX 22-03-2014 23:59:18 Zainstalowany program DirectX 23-03-2014 00:21:57 Installed Nero 2014. 23-03-2014 10:04:20 Zainstalowano: AVG PC TuneUp 2014 31-03-2014 06:53:51 Configured MegaPinball ==================== Hosts content: ========================== 2009-07-14 04:34 - 2012-12-06 11:47 - 00000808 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04E9BD74-8A61-4A6F-B589-FEF116AF0248} - \Safer-Networking\Spybot - Search and Destroy\Check for updates No Task File Task: {12D0FAF0-11EF-4B66-852F-92D6B5CE3045} - \Safer-Networking\Spybot - Search and Destroy\Scan the system No Task File Task: {190EF493-D181-4474-8E68-FB0319B634F2} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-09-21] (FranmoSoftware) Task: {2C9AEA5E-972B-4520-A28A-BF920552E449} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG) Task: {51134F56-3615-41AC-A871-3A656BFDB61A} - System32\Tasks\irMonitor => C:\Users\MARIO\AppData\Local\IRMonitor.exe [2013-12-30] (ITE Tech. Inc.) Task: {53B32AF4-C918-424C-9D6E-3F842024F19F} - System32\Tasks\Safer-Surf_wd => C:\Program Files (x86)\Safer-Surf-soft\Safer-Surfw.exe Task: {586B1F80-02EE-4598-AF09-5FC175C5B216} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {6B7845DD-833F-42D2-B2BE-4011E0494811} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe <==== ATTENTION Task: {75786114-EF2D-4792-B000-F4AFBF98DCDD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-04-24] (Piriform Ltd) Task: {788B3260-E633-4AA6-B658-E944C45AEEB7} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization No Task File Task: {96067DB2-0945-466D-90B8-8C59ABEFBC67} - System32\Tasks\Safer-Surf Update => C:\Program Files (x86)\Safer-Surf-soft\safeS.exe [2014-03-23] () Task: {A8AE4538-C422-405B-8EA0-709D31681C05} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: C:\Windows\Tasks\Safer-Surf Update.job => C:\Program Files (x86)\Safer-Surf-soft\safeS.exe Task: C:\Windows\Tasks\Safer-Surf_wd.job => C:\Program Files (x86)\Safer-Surf-soft\Safer-Surfw.exe ==================== Loaded Modules (whitelisted) ============= 2012-08-11 23:20 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe 2012-12-13 02:32 - 2013-11-28 13:21 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-03-23 01:08 - 2014-03-23 01:08 - 00194560 _____ () C:\Program Files (x86)\Safer-Surf-soft\Safer-Surf157.exe 2013-12-04 14:42 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-12-04 14:42 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2012-09-13 01:38 - 2012-09-13 01:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2012-09-13 01:39 - 2012-09-13 01:39 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll 2013-12-04 14:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-12-04 14:42 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-12-04 14:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-03-29 17:33 - 2014-03-29 17:34 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-02-17 17:12 - 2014-02-17 17:13 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^Users^MARIO^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk => C:\Windows\pss\MyPC Backup.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: BitComet => "C:\Program Files\BitComet\BitComet.exe" /tray MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart MSCONFIG\startupreg: Eraser => "C:\PROGRA~1\Eraser\Eraser.exe" --atRestart MSCONFIG\startupreg: GG => "C:\Users\MARIO\AppData\Local\GG\Application\gghub.exe" MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: GUDelayStartup => C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe -delayrun MSCONFIG\startupreg: IDMan => C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot MSCONFIG\startupreg: IPLA! => C:\Program Files (x86)\ipla\ipla.exe /autorun MSCONFIG\startupreg: lxbkbmgr.exe => "C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe" MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SMSERIAL => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe MSCONFIG\startupreg: UIExec => "C:\Program Files (x86)\Join Air\UIExec.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: The catalog is corrupt. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Usługa wyszukiwania wykryła uszkodzone pliki danych w indeksie {id=4400}. Usługa podejmie próbę automatycznego rozwiązania tego problemu przez odbudowanie indeksu. Szczegóły: Wykaz indeksów zawartości jest uszkodzony. (HRESULT : 0xc0041801) (0xc0041801) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Nie można zainicjować indeksu. Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Nie można zainicjować aplikacji. Kontekst: aplikacja Windows Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Nie można zainicjować obiektu programu zbierającego. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Nie można zainicjować dodatku typu plug-in w <Search.TripoliIndexer>. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Nie można odnaleźć elementu. (HRESULT : 0x80070490) (0x80070490) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Nie można zainicjować dodatku typu plug-in w <Search.JetPropStore>. Kontekst: aplikacja Windows, wykaz SystemIndex Szczegóły: Baza danych indeksów zawartości jest uszkodzona. (HRESULT : 0xc0041800) (0xc0041800) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Usługa Windows Search jest zatrzymywana, ponieważ wystąpił problem z indeksatorem: The catalog is corrupt. Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. 0xc0041801 (0xc0041801) Error: (03/30/2014 07:19:43 PM) (Source: Windows Search Service) (User: ) Description: Usługa wyszukiwania wykryła uszkodzone pliki danych w indeksie {id=2801}. Usługa podejmie próbę automatycznego rozwiązania tego problemu przez odbudowanie indeksu. Kontekst: aplikacja Windows Szczegóły: Wykaz indeksów zawartości jest uszkodzony. 0xc0041801 (0xc0041801) Error: (03/30/2014 07:19:19 PM) (Source: Application Error) (User: ) Description: Nazwa aplikacji powodującej błąd: SearchIndexer.exe, wersja: 7.0.7601.17610, sygnatura czasowa: 0x4dc0d019 Nazwa modułu powodującego błąd: msvcrt.dll, wersja: 7.0.7601.17744, sygnatura czasowa: 0x4eeb033f Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00000000000011fd Identyfikator procesu powodującego błąd: 0x10f8 Godzina uruchomienia aplikacji powodującej błąd: 0xSearchIndexer.exe0 Ścieżka aplikacji powodującej błąd: SearchIndexer.exe1 Ścieżka modułu powodującego błąd: SearchIndexer.exe2 Identyfikator raportu: SearchIndexer.exe3 System errors: ============= Error: (03/31/2014 10:55:01 AM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (03/30/2014 07:20:13 PM) (Source: Service Control Manager) (User: ) Description: Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom usługę ponownie) po nieoczekiwanym zakończeniu usługi Windows Search, ale ta akcja nie powiodła się przy następującym błędzie: %%1056. Error: (03/30/2014 07:19:51 PM) (Source: Service Control Manager) (User: ) Description: Menedżer sterowania usługami próbował podjąć akcję korekcyjną (Uruchom usługę ponownie) po nieoczekiwanym zakończeniu usługi Windows Search, ale ta akcja nie powiodła się przy następującym błędzie: %%1056. Error: (03/30/2014 07:19:43 PM) (Source: Service Control Manager) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 2. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/30/2014 07:19:43 PM) (Source: Service Control Manager) (User: ) Description: Usługa Windows Search zakończyła działanie; wystąpił specyficzny dla niej błąd %%-1073473536. Error: (03/30/2014 07:19:21 PM) (Source: Service Control Manager) (User: ) Description: Usługa Windows Search niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 30000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie. Error: (03/30/2014 10:13:53 AM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2. Error: (03/30/2014 10:13:52 AM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2. Error: (03/30/2014 10:13:52 AM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2. Error: (03/30/2014 10:13:51 AM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR2. Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 3070.43 MB Available physical RAM: 1497.02 MB Total Pagefile: 6139.04 MB Available Pagefile: 4130.94 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:380.23 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A6775642) Partition: GPT Partition Type. ==================== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 13:31

Pobierz GMER i zapisz do na pulpicie.
Jeśli posiadasz wirtualne napędy, to zrób z nimi porządek zgodnie z tym tematem.

Uruchom GMERa z prawokliku jako administrator.
Gdy skończy się pre-skan, w małym oknie zaznacz C: oraz upewnij się, że opcja 3rd party NIE JEST zaznaczona.
Kliknij Szukaj i w międzyczasie nie rób nic więcej na komputerze. Ten ma skan może trwać długo, ale musi przelecieć spokojnie i możliwie bez przeszkód.

Na zakończenie zapisz raport i przeklej go.
Prawdopodobnie będziesz musiał zmienić rozszerzenie zapisanego pliku z *.log na *.txt.

**Posty:** 11 · przez **mario113** 31 Mar 2014, 14:45

Kod: Zaznacz wszystko: GMER 2.1.19357 - http://www.gmer.net Rootkit scan 2014-03-31 14:40:32 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 TOSHIBA_ rev.GT00 465,76GB Running: 5p9h5oyy.exe; Driver: C:\Users\MARIO\AppData\Local\Temp\uglyipod.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff800031b1000 45 bytes [00, 00, 0A, 02, 4D, 75, 74, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff800031b102f 16 bytes [00, 01, 00, 00, 00, 00, 00, ...] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\AVG\AVG2014\avgfws.exe[1936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Program Files (x86)\AVG\AVG2014\avgfws.exe[1936] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 00000000722d1a22 2 bytes [2D, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 00000000722d1ad0 2 bytes [2D, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 00000000722d1b08 2 bytes [2D, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 00000000722d1bba 2 bytes [2D, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 00000000722d1bda 2 bytes [2D, 72] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Windows\SysWOW64\PnkBstrA.exe[2812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 .text C:\Program Files (x86)\Safer-Surf-soft\Safer-Surf157.exe[2844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Program Files (x86)\Safer-Surf-soft\Safer-Surf157.exe[2844] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[2880] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe[2880] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2624] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe[2624] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 .text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[2632] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075b21465 2 bytes [B2, 75] .text C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe[2632] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075b214bb 2 bytes [B2, 75] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Windows\system32\svchost.exe [112:1304] 000007fefbb28274 Thread C:\Windows\system32\svchost.exe [112:1640] 000007fefbb28274 Thread C:\Windows\System32\spoolsv.exe [1464:1948] 000007fef78f10c8 Thread C:\Windows\System32\spoolsv.exe [1464:1056] 000007fef78b6144 Thread C:\Windows\System32\spoolsv.exe [1464:1100] 000007fef73b5fd0 Thread C:\Windows\System32\spoolsv.exe [1464:1088] 000007fef73a3438 Thread C:\Windows\System32\spoolsv.exe [1464:1124] 000007fef73b63ec Thread C:\Windows\System32\spoolsv.exe [1464:2556] 000007fef8dc5e5c Thread C:\Windows\system32\svchost.exe [2100:4540] 000007feef128470 Thread C:\Windows\system32\svchost.exe [2100:4544] 000007feef132418 Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [7068:6440] 000007fefb8a2a7c Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [7068:6372] 000007fef4435124 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001e37665561 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001e37665561@28d1af767f17 0x70 0x63 0xEC 0x87 ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001e37665561@6cf373773a9f 0xEF 0x2E 0xE7 0x14 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001e37665561 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001e37665561@28d1af767f17 0x70 0x63 0xEC 0x87 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001e37665561@6cf373773a9f 0xEF 0x2E 0xE7 0x14 ... ---- EOF - GMER 2.1 ----

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 15:04

Odinstaluj w ogóle Spybota, to program przestarzały i nie nadający się już do niczego.

Pobierz AdwCleaner.
Uruchom i wciśnij Scan.
Kiedy skończy wciśnij Clean i zgodź się na restart.
Wyświetlony po restarcie raport załącz.

Pobierz Junkware Removal Tool.
Uruchom i poczekaj cierpliwie.
Po ukończeniu pojawi się raport - załącz go w odpowiedzi.

**Posty:** 11 · przez **mario113** 31 Mar 2014, 16:07

Kod: Zaznacz wszystko: # AdwCleaner v3.022 - Log utworzony 31/03/2014 o 15:31:36 # Aktualizacja 13/03/2014 przez Xplode # System operacyjny : Windows 7 Home Premium Service Pack 1 (64 bits) # Użytkownik : MARIO - MARIO-LAP # Ścieżka : C:\Users\MARIO\Desktop\AdwCleaner.exe # Opcja : Usuń ***** [ Usługi ] ***** ***** [ Pliki / Foldery ] ***** Folder Usunięto : C:\Program Files (x86)\GreenTree Applications Folder Usunięto : C:\Users\MARIO\AppData\Local\Pokki Folder Usunięto : C:\Users\MARIO\AppData\Local\SearchProtect Folder Usunięto : C:\Users\MARIO\AppData\Roaming\Systweak Plik Usunięto : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\searchplugins\speedbit.xml Plik Usunięto : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\user.js Plik Usunięto : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\880meeq2.default\user.js Plik Usunięto : C:\Windows\System32\Tasks\RegClean Pro ***** [ Skróty ] ***** ***** [ Rejestr ] ***** Klucz Usunięto : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki Klucz Usunięto : HKCU\Software\Classes\Directory\shell\pokki Klucz Usunięto : HKCU\Software\Classes\Drive\shell\pokki Klucz Usunięto : HKCU\Software\Classes\pokki Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\escort.DLL Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0} Klucz Usunięto : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Klucz Usunięto : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A} Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A} Klucz Usunięto : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844} Klucz Usunięto : HKCU\Software\Conduit Klucz Usunięto : HKCU\Software\IM Klucz Usunięto : HKCU\Software\Pokki Klucz Usunięto : HKCU\Software\Softonic Klucz Usunięto : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Klucz Usunięto : HKCU\Software\AppDataLow\Software\DynConIE Klucz Usunięto : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Klucz Usunięto : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C} Klucz Usunięto : HKLM\Software\SearchProtect ***** [ Przeglądarki internetowe ] ***** -\\ Internet Explorer v11.0.9600.16521 Ustawienie Przywrócono : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] Ustawienie Przywrócono : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] -\\ Mozilla Firefox v28.0 (pl) [ Plik : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\prefs.js ] Wpis usunięty : user_pref("browser.search.defaulturl", "hxxp://go.speedbit.com/search.aspx?s=E3Na&q="); Wpis usunięty : user_pref("browser.search.order.1", "Speedbit Search"); Wpis usunięty : user_pref("browser.startup.homepage_override_url", "hxxp://go.speedbit.com/?s=E3Na"); Wpis usunięty : user_pref("keyword.URL", "hxxp://go.speedbit.com/search.aspx?site=shdefault&pid=s&shr=d&q={searchTerms}"); [ Plik : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\880meeq2.default\prefs.js ] Wpis usunięty : user_pref("browser.search.selectedEngine", "Mysearchdial"); -\\ Google Chrome v [ Plik : C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\preferences ] Usunięto : homepage Usunięto : icon_url Usunięto : search_url Usunięto : keyword Usunięto : urls_to_restore_on_startup ************************* AdwCleaner[R1].txt - [4679 octets] - [31/03/2014 15:29:30] AdwCleaner[S1].txt - [4137 octets] - [31/03/2014 15:31:36] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4197 octets] ##########

Kod: Zaznacz wszystko: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Home Premium x64 Ran by MARIO on 2014-03-31 at 15:48:11,10 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-264233031-3586167319-933125827-1001\Software\sweetim Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{01518D9B-FBE6-400F-9E25-C2CC2D470E80} ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\MARIO\AppData\Roaming\mozilla\firefox\profiles\3ax14j69.default\minidumps [4 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2014-03-31 at 16:04:13,51 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 16:10

Hm, tego co chciałem to nie usunęło. Będziemy rzeźbić ręcznie, jeśli nie uda się z Panelu Sterowania.

Spróbuj odinstalować Safer-Surf-soft

**Posty:** 11 · przez **mario113** 31 Mar 2014, 17:29

Z usuń programy zniknęło jak to sprawdzić czy tego nadal niema

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 18:18

Spróbuj programem Revo Uninstaller

**Posty:** 11 · przez **mario113** 31 Mar 2014, 19:35

A teraz czy zostało coś jeszcze

Kod: Zaznacz wszystko: # AdwCleaner v3.022 - Log utworzony 31/03/2014 o 19:10:39 # Aktualizacja 13/03/2014 przez Xplode # System operacyjny : Windows 7 Home Premium Service Pack 1 (64 bits) # Użytkownik : MARIO - MARIO-LAP # Ścieżka : C:\Users\MARIO\Desktop\AdwCleaner.exe # Opcja : Usuń ***** [ Usługi ] ***** ***** [ Pliki / Foldery ] ***** ***** [ Skróty ] ***** ***** [ Rejestr ] ***** ***** [ Przeglądarki internetowe ] ***** -\\ Internet Explorer v11.0.9600.16521 -\\ Mozilla Firefox v28.0 (pl) [ Plik : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\prefs.js ] [ Plik : C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\880meeq2.default\prefs.js ] -\\ Google Chrome v [ Plik : C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R3].txt - [994 octets] - [31/03/2014 19:09:25] AdwCleaner[S3].txt - [913 octets] - [31/03/2014 19:10:39] ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [972 octets] ##########

Kod: Zaznacz wszystko: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows 7 Home Premium x64 Ran by MARIO on 2014-03-31 at 19:13:56,27 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2014-03-31 at 19:27:52,73 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

**Posty:** 2183 · przez **NieWiem** 31 Mar 2014, 22:56

A po co uruchamiałeś te programy nieproszony?
Bez sensu, przepuszczać kompa przez agresywne procedury, skoro można to zrobić nieagresywnie, to raz. A dwa w tych raportach i tak tego nie zobaczę.

Nowy FRST z zaznaczoną opcją addition.

**Posty:** 11 · przez **mario113** 01 Kwi 2014, 10:05

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by MARIO (administrator) on MARIO-LAP on 01-04-2014 10:01:25 Running from C:\Users\MARIO\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Broadcom Corporation.) C:\Windows\system32\BtwRSupportService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe ( ) C:\Windows\system32\lxbkcoms.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Young Digital Poland) C:\Program Files (x86)\YDP\YdpDict.2\Watch.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Microsoft Corporation) C:\Windows\system32\MsiExec.exe (Microsoft Corporation) C:\Windows\syswow64\MsiExec.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avguirux.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2847016 2013-11-28] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM-x32\...\Run: [QlbCtrl.exe] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.) HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.) HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3829328 2014-02-21] (Tonec Inc.) HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: E - E:\setup.exe HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: F - F:\autorun.exe HKU\S-1-5-21-264233031-3586167319-933125827-1001\...\MountPoints2: {2d8f6ab7-ad08-11e3-94a8-001e37665561} - F:\AutoRun.exe AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found ==================== Internet (Whitelisted) ==================== URLSearchHook: HKLM-x32 - Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = SearchScopes: HKCU - URL http://search.conduit.com/Results.aspx?ctid=CT3323737&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPFC73DD7C-F595-43EB-88FB-97BA40AB1FA0&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO-x32: BitComet Helper - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Ashampoo_PO Toolbar - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll () Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default FF Homepage: chrome://speeddial/content/speeddial.xul FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: BitComet Video Downloader - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2014-03-23] FF Extension: Noia 4 Theme Manager - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\Noia4Options@ArisT2.xpi [2013-10-05] FF Extension: Speed Dial - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2013-10-05] FF Extension: Noia 4 - C:\Users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\Extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi [2013-10-05] FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 [2014-03-19] FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 FF Extension: IDM CC - C:\Users\MARIO\AppData\Roaming\IDM\idmmzcc5 [2014-03-19] Chrome: ======= CHR HomePage: hxxp://www.google.com CHR RestoreOnStartup: "hxxp://www.google.com" CHR DefaultSearchProvider: Speedbit Search CHR DefaultSearchURL: http://www.google.com CHR Extension: (Docs) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-30] CHR Extension: (Google Drive) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-30] CHR Extension: (YouTube) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-30] CHR Extension: (surF annd keeepa) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgkbcbmjfghhllgenoncodfdidjpkope [2013-11-28] CHR Extension: (SearchNewTab) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cilnhakialkbjpmfflnfdgalmpdlidbd [2013-12-05] CHR Extension: (Google Search) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-30] CHR Extension: (SearchNewTab) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgopkdnhflahedeicelolmkbagmilhop [2013-12-06] CHR Extension: (Chrome In-App Payments service) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-30] CHR Extension: (Gmail) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-30] CHR Extension: (surf andd kEeP) - C:\Users\MARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pockaihljoijiepjeekmibicmkabdidg [2013-11-28] CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2014-02-21] ==================== Services (Whitelisted) ================= R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.) R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-11-28] (Broadcom Corporation.) S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (http://www.BitComet.com) R2 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( ) R2 lxbk_device; C:\Windows\SysWOW64\lxbkcoms.exe [537256 2008-02-19] ( ) S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-11-28] () R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-11-28] (Realtek Semiconductor) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) S3 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG) ==================== Drivers (Whitelisted) ==================== R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-11-01] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170712 2013-11-28] (Broadcom Corporation.) S3 GUCI_AVS; C:\Windows\System32\DRIVERS\GUCI_AVS.sys [646656 2010-06-10] (PixArt Imaging Incorporation) R3 HBtnKey; C:\Windows\System32\DRIVERS\cpqbttn.sys [19000 2010-02-25] (Hewlett-Packard Company) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation) R3 MODEMCSA; C:\Windows\System32\drivers\MODEMCSA.sys [24064 2009-07-14] (Microsoft Corporation) R2 risdptsk; C:\Windows\System32\DRIVERS\risdsn64.sys [76288 2013-11-28] (REDC) R3 smserial; C:\Windows\System32\DRIVERS\smserial.sys [1202688 2013-11-28] (Motorola Inc.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-03-31] (Duplex Secure Ltd.) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software) R3 usbhub; C:\Windows\SysWOW64\DRIVERS\usbhub.sys [57600 2004-08-03] (Microsoft Corporation) S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-01 10:01 - 2014-04-01 10:01 - 00018415 _____ () C:\Users\MARIO\Desktop\FRST.txt 2014-04-01 10:00 - 2014-04-01 10:00 - 02157056 _____ (Farbar) C:\Users\MARIO\Desktop\FRST64.exe 2014-03-31 23:24 - 2014-03-31 23:24 - 00000000 ____D () C:\Users\MARIO\Downloads\eMule 2014-03-31 15:48 - 2014-03-31 15:48 - 00000000 ____D () C:\Windows\ERUNT 2014-03-31 15:45 - 2014-03-31 15:46 - 00465648 _____ () C:\Windows\Minidump\033114-35521-01.dmp 2014-03-31 15:45 - 2014-03-31 15:45 - 784767061 _____ () C:\Windows\MEMORY.DMP 2014-03-31 15:29 - 2014-03-31 19:32 - 00000000 ____D () C:\AdwCleaner 2014-03-31 15:28 - 2014-03-31 15:28 - 01950720 _____ () C:\Users\MARIO\Desktop\AdwCleaner.exe 2014-03-31 15:28 - 2014-03-31 15:28 - 01038974 _____ (Thisisu) C:\Users\MARIO\Desktop\JRT.exe 2014-03-31 13:44 - 2014-03-31 13:44 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-03-31 13:09 - 2014-04-01 10:01 - 00000000 ____D () C:\FRST 2014-03-30 19:31 - 2014-04-01 07:43 - 00000840 _____ () C:\Windows\setupact.log 2014-03-30 19:31 - 2014-03-30 19:32 - 00415648 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-30 19:31 - 2014-03-30 19:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-30 19:12 - 2014-03-30 19:12 - 00109728 _____ () C:\Users\MARIO\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-29 17:33 - 2014-03-29 17:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software 2014-03-24 21:12 - 2014-03-27 23:04 - 00000000 ____D () C:\Users\MARIO\Desktop\FOTKI I PLIKI DLA ALI 2014-03-24 16:21 - 2014-03-24 16:21 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SuperMemo World 2014-03-24 16:19 - 2014-03-24 16:19 - 00001000 _____ () C:\Users\Public\Desktop\SuperMemo UX.lnk 2014-03-24 16:17 - 2014-03-24 16:24 - 00000000 ____D () C:\Program Files (x86)\SuperMemo UX 2014-03-23 18:27 - 2014-03-23 18:27 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE 2014-03-23 18:04 - 2014-03-23 18:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SpeedBit 2014-03-23 18:03 - 2014-03-23 18:29 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit 2014-03-23 18:03 - 2014-03-23 18:04 - 00000000 ____D () C:\ProgramData\SpeedBit 2014-03-23 12:05 - 2014-03-23 12:05 - 00002211 _____ () C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00002169 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG 2014-03-23 12:05 - 2013-12-18 10:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe 2014-03-23 12:05 - 2013-12-18 10:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll 2014-03-23 12:05 - 2013-12-18 10:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll 2014-03-23 12:04 - 2014-03-23 12:06 - 00000000 ____D () C:\ProgramData\AVG 2014-03-23 12:03 - 2014-03-24 09:57 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-03-23 08:35 - 2014-03-31 08:55 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-23 08:34 - 2014-03-23 08:34 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-03-23 08:34 - 2014-03-23 08:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-03-23 08:34 - 2014-03-05 10:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-23 08:34 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-23 08:34 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero_AG 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero 2014-03-23 02:29 - 2014-03-23 02:29 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Nero 2014-03-23 02:28 - 2014-03-23 02:28 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-03-23 02:27 - 2014-03-23 02:27 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2014.lnk 2014-03-23 02:22 - 2014-03-23 02:28 - 00000000 ____D () C:\ProgramData\Nero 2014-03-23 02:22 - 2014-03-23 02:27 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-03-23 01:59 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2014-03-23 01:59 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2014-03-23 01:35 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2014-03-23 01:15 - 2014-03-23 01:15 - 00001179 _____ () C:\Users\MARIO\Desktop\Bandizip.lnk 2014-03-23 01:15 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bandizip 2014-03-23 01:14 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Bandizip 2014-03-23 00:40 - 2014-03-23 00:40 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG2014 2014-03-23 00:39 - 2014-04-01 10:01 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-03-23 00:39 - 2014-03-23 00:39 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\TuneUp Software 2014-03-23 00:38 - 2014-03-23 12:05 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-03-23 00:38 - 2014-03-23 00:38 - 00000000 ___HD () C:\$AVG 2014-03-23 00:18 - 2014-03-23 00:19 - 00000000 ____D () C:\Program Files (x86)\BitComet 2014-03-23 00:18 - 2014-03-23 00:18 - 00000967 _____ () C:\Users\Public\Desktop\BitComet.lnk 2014-03-23 00:14 - 2014-03-23 00:39 - 00000000 ____D () C:\ProgramData\AVG2014 2014-03-22 23:50 - 2014-04-01 10:01 - 00000000 ____D () C:\ProgramData\MFAData 2014-03-22 23:50 - 2014-03-23 00:52 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Avg2014 2014-03-22 23:50 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\MFAData 2014-03-22 14:07 - 2014-03-22 14:07 - 00001001 _____ () C:\Users\MARIO\Desktop\Słownik YDP.lnk 2014-03-22 14:04 - 2014-03-22 14:12 - 00000185 _____ () C:\Windows\YdpDict.ini 2014-03-22 14:04 - 2014-03-22 14:07 - 00000000 ____D () C:\Program Files (x86)\YDP 2014-03-22 14:04 - 2014-03-22 14:04 - 00021052 _____ () C:\Windows\SysWOW64\SIntfNT.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00015144 _____ () C:\Windows\SysWOW64\SIntf32.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00012067 _____ () C:\Windows\SysWOW64\SIntf16.dll 2014-03-22 14:04 - 1995-07-14 02:43 - 00027632 ____R (Microsoft Corporation) C:\Windows\system\Ctl3dv2.dll 2014-03-22 14:04 - 1995-04-27 00:20 - 00125856 ____R (Microsoft Corporation) C:\Windows\system\Mfco250.dll 2014-03-22 14:04 - 1995-04-27 00:15 - 00322384 _____ (Microsoft Corporation) C:\Windows\system\Mfc250.dll 2014-03-22 14:04 - 1995-04-26 23:33 - 00146976 _____ (Microsoft Corporation) C:\Windows\system\Mfcoleui.dll 2014-03-22 14:02 - 1998-10-07 14:54 - 00327168 _____ (InstallShield Software Corporation) C:\Windows\IsUn0415.exe 2014-03-21 20:03 - 2014-03-23 08:34 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-21 20:03 - 2014-03-21 20:03 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Malwarebytes 2014-03-21 19:20 - 2014-03-21 19:21 - 145244480 _____ () C:\Users\MARIO\Desktop\cureit.exe 2014-03-21 01:01 - 2014-03-21 01:01 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Eraser 6 2014-03-20 19:51 - 2014-03-28 16:29 - 00000000 ____D () C:\Users\MARIO\Desktop\DO ŚCIĄGNIĘCIA 2014-03-20 19:51 - 2014-03-20 19:51 - 00000000 ____D () C:\Program Files\Eraser 2014-03-20 10:19 - 2014-03-20 10:19 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Logitech® Webcam Software 2014-03-20 10:16 - 2014-03-20 10:16 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-03-20 10:15 - 2014-03-20 10:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Leadertech 2014-03-20 10:14 - 2014-03-20 10:15 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-03-20 10:14 - 2014-03-20 10:14 - 00001584 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk 2014-03-19 00:58 - 2014-03-31 17:45 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\DMCache 2014-03-19 00:58 - 2014-03-30 19:17 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\IDM 2014-03-19 00:58 - 2014-03-19 00:59 - 00000000 ____D () C:\Program Files (x86)\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000969 _____ () C:\Users\MARIO\Desktop\Internet Download Manager.lnk 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\ProgramData\IDM 2014-03-19 00:22 - 2014-03-19 00:22 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I 2014-03-17 21:55 - 2014-03-17 21:55 - 00000000 ____D () C:\Windows\Sun 2014-03-16 18:23 - 2014-03-16 18:23 - 00003364 _____ () C:\Windows\System32\Tasks\Odkurzacz 2014-03-16 18:23 - 2014-03-16 18:23 - 00001019 _____ () C:\Users\MARIO\Desktop\Odkurzacz.lnk 2014-03-16 18:23 - 2014-03-16 18:23 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-03-16 14:56 - 2014-03-16 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-03-16 14:56 - 2012-08-20 02:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2014-03-16 14:54 - 2014-03-16 18:10 - 00000000 ____D () C:\ProgramData\DatacardService 2014-03-16 08:00 - 2014-03-16 08:00 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Boilsoft 2014-03-16 00:13 - 2014-03-16 00:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\FreemakeVideoConverter 2014-03-16 00:12 - 2014-03-16 18:07 - 00000000 ____D () C:\ProgramData\Freemake 2014-03-16 00:11 - 2014-03-16 18:07 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-03-15 07:57 - 2014-03-28 13:11 - 00000000 ____D () C:\Users\MARIO\Desktop\Niemiecki_w_pracy 2014-03-14 07:37 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-14 07:37 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-13 20:45 - 2014-03-20 10:15 - 00005720 _____ () C:\Windows\system32\lvcoinst.log 2014-03-13 20:45 - 2014-03-20 10:15 - 00000000 ____D () C:\Program Files\Common Files\logishrd 2014-03-12 19:47 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-12 19:47 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-12 19:47 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-12 19:47 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-12 19:47 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-12 19:47 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-12 19:47 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-12 19:47 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-12 19:47 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-12 19:47 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-12 19:47 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-12 19:47 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-12 19:47 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-12 19:47 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-12 19:47 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-12 19:47 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-12 19:47 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-12 19:47 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-12 19:47 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-12 19:47 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-12 19:47 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-12 19:47 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-12 19:47 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-12 19:47 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-12 19:47 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-12 19:47 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-12 19:47 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-12 19:47 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-12 19:47 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-12 19:47 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-12 19:47 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-12 19:47 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-12 19:47 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-12 19:47 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-12 19:47 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-12 19:47 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-12 19:47 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-12 19:47 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-12 19:47 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-12 19:47 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-03-12 19:47 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-03-12 19:47 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-03-12 19:46 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-12 19:46 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-12 19:46 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-12 19:46 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-11 20:42 - 2008-09-24 11:40 - 04122368 ____R (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\Drivers\alcxwdm.sys 2014-03-11 20:42 - 2007-04-16 16:28 - 00577536 _____ (Realtek Semiconductor Corp.) C:\Windows\soundman.exe 2014-03-11 20:42 - 2006-12-08 16:20 - 10528768 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RTLCPL.exe 2014-03-11 20:42 - 2006-11-17 06:40 - 18804736 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\alsndmgr.cpl 2014-03-11 20:42 - 2006-10-18 03:53 - 00147456 _____ () C:\Windows\SysWOW64\RtlCPAPI.dll 2014-03-11 20:42 - 2006-08-01 16:02 - 00049152 _____ () C:\Windows\SysWOW64\ChCfg.exe 2014-03-11 20:42 - 2002-02-05 14:54 - 00141016 _____ () C:\Windows\SysWOW64\alsndmgr.wav 2014-03-11 20:41 - 2014-03-11 20:41 - 00000000 ____D () C:\Program Files (x86)\Realtek AC97 2014-03-11 20:41 - 2006-07-31 12:27 - 00217088 _____ (Realtek Semiconductor Corp.) C:\Windows\alcrmv.exe 2014-03-11 20:41 - 2006-07-31 12:19 - 00315392 _____ (Realtek Semiconductor Corp.) C:\Windows\alcupd.exe 2014-03-11 20:40 - 2014-03-11 20:40 - 00003118 _____ () C:\Windows\System32\Tasks\{58AE1ABE-90EA-4585-BE69-AD8C404A4D79} 2014-03-11 20:18 - 2014-03-11 20:40 - 00319488 _____ (Realtek Semiconductor Corp.) C:\Windows\HideWin.exe 2014-03-09 17:07 - 2014-03-09 17:07 - 00000146 _____ () C:\Users\MARIO\Desktop\Dźwięk.lnk 2014-03-09 13:55 - 2014-03-23 02:09 - 00000082 _____ () C:\Users\MARIO\AppData\Roaming\WB.CFG 2014-03-09 13:13 - 2014-03-09 13:13 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Skype 2014-03-09 09:14 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-03-09 09:14 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-03-09 09:14 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-03-09 09:14 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-03-05 11:09 - 2014-03-05 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-03-05 10:57 - 2014-03-05 10:57 - 00000000 ____D () C:\Users\MARIO\AppData\Local\GHISLER ==================== One Month Modified Files and Folders ======= 2014-04-01 10:01 - 2014-04-01 10:01 - 00018415 _____ () C:\Users\MARIO\Desktop\FRST.txt 2014-04-01 10:01 - 2014-03-31 13:09 - 00000000 ____D () C:\FRST 2014-04-01 10:01 - 2014-03-23 00:39 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-04-01 10:01 - 2014-03-22 23:50 - 00000000 ____D () C:\ProgramData\MFAData 2014-04-01 10:00 - 2014-04-01 10:00 - 02157056 _____ (Farbar) C:\Users\MARIO\Desktop\FRST64.exe 2014-04-01 09:03 - 2013-07-13 08:43 - 01223154 _____ () C:\Windows\WindowsUpdate.log 2014-04-01 07:51 - 2009-07-14 06:45 - 00017760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-01 07:51 - 2009-07-14 06:45 - 00017760 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-01 07:43 - 2014-03-30 19:31 - 00000840 _____ () C:\Windows\setupact.log 2014-04-01 07:43 - 2013-07-13 15:04 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-04-01 07:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-31 23:42 - 2012-08-12 00:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\BitComet 2014-03-31 23:31 - 2012-09-09 01:21 - 00000000 ____D () C:\Users\MARIO\AppData\Local\eMule 2014-03-31 23:24 - 2014-03-31 23:24 - 00000000 ____D () C:\Users\MARIO\Downloads\eMule 2014-03-31 23:04 - 2009-07-14 19:55 - 00744074 _____ () C:\Windows\system32\perfh015.dat 2014-03-31 23:04 - 2009-07-14 19:55 - 00157524 _____ () C:\Windows\system32\perfc015.dat 2014-03-31 23:04 - 2009-07-14 07:13 - 01679434 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-31 22:06 - 2012-08-11 23:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Skype 2014-03-31 19:32 - 2014-03-31 15:29 - 00000000 ____D () C:\AdwCleaner 2014-03-31 17:45 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\DMCache 2014-03-31 15:48 - 2014-03-31 15:48 - 00000000 ____D () C:\Windows\ERUNT 2014-03-31 15:46 - 2014-03-31 15:45 - 00465648 _____ () C:\Windows\Minidump\033114-35521-01.dmp 2014-03-31 15:45 - 2014-03-31 15:45 - 784767061 _____ () C:\Windows\MEMORY.DMP 2014-03-31 15:45 - 2013-09-22 11:43 - 00000000 ____D () C:\Windows\Minidump 2014-03-31 15:28 - 2014-03-31 15:28 - 01950720 _____ () C:\Users\MARIO\Desktop\AdwCleaner.exe 2014-03-31 15:28 - 2014-03-31 15:28 - 01038974 _____ (Thisisu) C:\Users\MARIO\Desktop\JRT.exe 2014-03-31 13:44 - 2014-03-31 13:44 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-03-31 08:55 - 2014-03-23 08:35 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-30 19:32 - 2014-03-30 19:31 - 00415648 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-30 19:31 - 2014-03-30 19:31 - 00000000 _____ () C:\Windows\setuperr.log 2014-03-30 19:19 - 2013-04-07 15:17 - 00000000 ____D () C:\Users\MARIO\Desktop\fotki 2014-03-30 19:17 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\IDM 2014-03-30 19:12 - 2014-03-30 19:12 - 00109728 _____ () C:\Users\MARIO\AppData\Local\GDIPFONTCACHEV1.DAT 2014-03-29 17:34 - 2014-03-29 17:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-29 14:44 - 2013-03-17 22:44 - 00000000 ____D () C:\Users\MARIO\Doctor Web 2014-03-29 00:07 - 2013-01-02 19:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\GG 2014-03-28 17:48 - 2012-08-11 20:48 - 00000000 ____D () C:\Users\MARIO\Desktop\FOLDERY MOJE 2014-03-28 16:29 - 2014-03-20 19:51 - 00000000 ____D () C:\Users\MARIO\Desktop\DO ŚCIĄGNIĘCIA 2014-03-28 13:11 - 2014-03-15 07:57 - 00000000 ____D () C:\Users\MARIO\Desktop\Niemiecki_w_pracy 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software 2014-03-28 09:19 - 2014-03-28 09:19 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software 2014-03-27 23:04 - 2014-03-24 21:12 - 00000000 ____D () C:\Users\MARIO\Desktop\FOTKI I PLIKI DLA ALI 2014-03-25 18:45 - 2013-12-08 20:01 - 00000000 ____D () C:\Users\MARIO\Desktop\Praca 2014-03-25 15:24 - 2014-01-01 18:43 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\vlc 2014-03-24 16:24 - 2014-03-24 16:17 - 00000000 ____D () C:\Program Files (x86)\SuperMemo UX 2014-03-24 16:21 - 2014-03-24 16:21 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SuperMemo World 2014-03-24 16:19 - 2014-03-24 16:19 - 00001000 _____ () C:\Users\Public\Desktop\SuperMemo UX.lnk 2014-03-24 09:57 - 2014-03-23 12:03 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-03-24 09:57 - 2014-01-02 20:59 - 00000000 ____D () C:\ProgramData\{70FE9869-8D38-4EB3-8541-A735C2285CF7} 2014-03-24 09:57 - 2012-08-11 22:36 - 00000000 ___RD () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-23 18:29 - 2014-03-23 18:03 - 00000000 ____D () C:\Program Files\Common Files\SpeedBit 2014-03-23 18:27 - 2014-03-23 18:27 - 00002560 _____ () C:\Windows\_MSRSTRT.EXE 2014-03-23 18:04 - 2014-03-23 18:04 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\SpeedBit 2014-03-23 18:04 - 2014-03-23 18:03 - 00000000 ____D () C:\ProgramData\SpeedBit 2014-03-23 14:08 - 2012-08-12 00:57 - 00000000 ___RD () C:\Users\MARIO\Desktop\Filmy 2014-03-23 12:06 - 2014-03-23 12:04 - 00000000 ____D () C:\ProgramData\AVG 2014-03-23 12:05 - 2014-03-23 12:05 - 00002211 _____ () C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00002169 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk 2014-03-23 12:05 - 2014-03-23 12:05 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG 2014-03-23 12:05 - 2014-03-23 00:38 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-03-23 08:59 - 2012-08-11 23:49 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-03-23 08:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Vss 2014-03-23 08:34 - 2014-03-23 08:34 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-03-23 08:34 - 2014-03-23 08:34 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-03-23 08:34 - 2014-03-21 20:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero_AG 2014-03-23 02:34 - 2014-03-23 02:34 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Nero 2014-03-23 02:29 - 2014-03-23 02:29 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Nero 2014-03-23 02:28 - 2014-03-23 02:28 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-03-23 02:28 - 2014-03-23 02:22 - 00000000 ____D () C:\ProgramData\Nero 2014-03-23 02:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors 2014-03-23 02:27 - 2014-03-23 02:27 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2014.lnk 2014-03-23 02:27 - 2014-03-23 02:22 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-03-23 02:09 - 2014-03-09 13:55 - 00000082 _____ () C:\Users\MARIO\AppData\Roaming\WB.CFG 2014-03-23 01:15 - 2014-03-23 01:15 - 00001179 _____ () C:\Users\MARIO\Desktop\Bandizip.lnk 2014-03-23 01:15 - 2014-03-23 01:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bandizip 2014-03-23 01:15 - 2014-03-23 01:14 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Bandizip 2014-03-23 00:52 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Avg2014 2014-03-23 00:40 - 2014-03-23 00:40 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\AVG2014 2014-03-23 00:39 - 2014-03-23 00:39 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\TuneUp Software 2014-03-23 00:39 - 2014-03-23 00:14 - 00000000 ____D () C:\ProgramData\AVG2014 2014-03-23 00:38 - 2014-03-23 00:38 - 00000000 ___HD () C:\$AVG 2014-03-23 00:19 - 2014-03-23 00:18 - 00000000 ____D () C:\Program Files (x86)\BitComet 2014-03-23 00:18 - 2014-03-23 00:18 - 00000967 _____ () C:\Users\Public\Desktop\BitComet.lnk 2014-03-22 23:50 - 2014-03-22 23:50 - 00000000 ____D () C:\Users\MARIO\AppData\Local\MFAData 2014-03-22 23:38 - 2009-07-14 05:20 - 00000000 ___RD () C:\Users\Default 2014-03-22 14:12 - 2014-03-22 14:04 - 00000185 _____ () C:\Windows\YdpDict.ini 2014-03-22 14:07 - 2014-03-22 14:07 - 00001001 _____ () C:\Users\MARIO\Desktop\Słownik YDP.lnk 2014-03-22 14:07 - 2014-03-22 14:04 - 00000000 ____D () C:\Program Files (x86)\YDP 2014-03-22 14:06 - 2009-07-14 04:34 - 00000574 _____ () C:\Windows\win.ini 2014-03-22 14:04 - 2014-03-22 14:04 - 00021052 _____ () C:\Windows\SysWOW64\SIntfNT.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00015144 _____ () C:\Windows\SysWOW64\SIntf32.dll 2014-03-22 14:04 - 2014-03-22 14:04 - 00012067 _____ () C:\Windows\SysWOW64\SIntf16.dll 2014-03-22 14:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system 2014-03-21 20:55 - 2013-12-04 16:17 - 00001449 _____ () C:\Windows\wininit.ini 2014-03-21 20:03 - 2014-03-21 20:03 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Malwarebytes 2014-03-21 19:21 - 2014-03-21 19:20 - 145244480 _____ () C:\Users\MARIO\Desktop\cureit.exe 2014-03-21 01:01 - 2014-03-21 01:01 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Eraser 6 2014-03-20 19:51 - 2014-03-20 19:51 - 00000000 ____D () C:\Program Files\Eraser 2014-03-20 10:19 - 2014-03-20 10:19 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Logitech® Webcam Software 2014-03-20 10:16 - 2014-03-20 10:16 - 00000000 ____D () C:\ProgramData\LogiShrd 2014-03-20 10:15 - 2014-03-20 10:15 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Leadertech 2014-03-20 10:15 - 2014-03-20 10:14 - 00000000 ____D () C:\Program Files (x86)\Logitech 2014-03-20 10:15 - 2014-03-13 20:45 - 00005720 _____ () C:\Windows\system32\lvcoinst.log 2014-03-20 10:15 - 2014-03-13 20:45 - 00000000 ____D () C:\Program Files\Common Files\logishrd 2014-03-20 10:14 - 2014-03-20 10:14 - 00001584 _____ () C:\Users\Public\Desktop\Logitech Webcam Software .lnk 2014-03-20 08:25 - 2012-08-11 22:35 - 00000000 ____D () C:\Users\MARIO 2014-03-20 08:24 - 2013-12-01 14:26 - 00001652 _____ () C:\Windows\system32\ASOROSet.bin 2014-03-20 08:24 - 2009-07-14 04:34 - 89128960 _____ () C:\Windows\system32\config\software.bak 2014-03-20 08:24 - 2009-07-14 04:34 - 21233664 _____ () C:\Windows\system32\config\system.bak 2014-03-20 08:24 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-03-20 08:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-03-20 08:17 - 2013-12-01 14:23 - 00000000 ____D () C:\Windows\system32\config\RCCBakup 2014-03-20 07:41 - 2013-01-13 01:15 - 00000000 ____D () C:\FFOutput 2014-03-19 06:40 - 2014-01-01 18:42 - 00001026 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-03-19 00:59 - 2014-03-19 00:58 - 00000000 ____D () C:\Program Files (x86)\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000969 _____ () C:\Users\MARIO\Desktop\Internet Download Manager.lnk 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2014-03-19 00:58 - 2014-03-19 00:58 - 00000000 ____D () C:\ProgramData\IDM 2014-03-19 00:22 - 2014-03-19 00:22 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I 2014-03-18 20:43 - 2013-08-15 03:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-18 20:40 - 2012-10-20 23:58 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-17 21:55 - 2014-03-17 21:55 - 00000000 ____D () C:\Windows\Sun 2014-03-16 18:31 - 2012-12-06 11:11 - 00000000 ____D () C:\Users\MARIO\DoctorWeb 2014-03-16 18:27 - 2012-08-12 02:16 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack 2014-03-16 18:23 - 2014-03-16 18:23 - 00003364 _____ () C:\Windows\System32\Tasks\Odkurzacz 2014-03-16 18:23 - 2014-03-16 18:23 - 00001019 _____ () C:\Users\MARIO\Desktop\Odkurzacz.lnk 2014-03-16 18:23 - 2014-03-16 18:23 - 00000000 ____D () C:\Program Files (x86)\Odkurzacz 2014-03-16 18:10 - 2014-03-16 14:54 - 00000000 ____D () C:\ProgramData\DatacardService 2014-03-16 18:08 - 2012-08-11 23:58 - 00000000 ____D () C:\ProgramData\Skype 2014-03-16 18:07 - 2014-03-16 00:12 - 00000000 ____D () C:\ProgramData\Freemake 2014-03-16 18:07 - 2014-03-16 00:11 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-03-16 16:00 - 2012-12-30 21:27 - 00000000 ____D () C:\Users\MARIO\Desktop\OGLADNIĘTE 2014-03-16 14:56 - 2014-03-16 14:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf 2014-03-16 08:00 - 2014-03-16 08:00 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\Boilsoft 2014-03-16 00:13 - 2014-03-16 00:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\FreemakeVideoConverter 2014-03-14 22:42 - 2013-12-04 20:48 - 01697300 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-03-13 04:21 - 2012-11-07 19:47 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-13 04:21 - 2012-11-07 19:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-13 04:03 - 2012-08-11 23:41 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-11 20:52 - 2013-01-14 23:49 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-03-11 20:41 - 2014-03-11 20:41 - 00000000 ____D () C:\Program Files (x86)\Realtek AC97 2014-03-11 20:41 - 2012-08-11 22:39 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-03-11 20:40 - 2014-03-11 20:40 - 00003118 _____ () C:\Windows\System32\Tasks\{58AE1ABE-90EA-4585-BE69-AD8C404A4D79} 2014-03-11 20:40 - 2014-03-11 20:18 - 00319488 _____ (Realtek Semiconductor Corp.) C:\Windows\HideWin.exe 2014-03-10 15:21 - 2013-10-30 11:12 - 00000866 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-03-10 13:53 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-09 20:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-03-09 19:05 - 2013-01-10 18:39 - 00000000 _____ () C:\Users\MARIO\AppData\Local\FnF4.txt 2014-03-09 17:07 - 2014-03-09 17:07 - 00000146 _____ () C:\Users\MARIO\Desktop\Dźwięk.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2014-03-09 13:13 - 2014-03-09 13:13 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Skype 2014-03-09 13:13 - 2012-08-11 23:58 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-03-09 11:40 - 2013-04-06 11:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-03-05 11:09 - 2014-03-05 11:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-03-05 11:04 - 2013-04-10 16:06 - 00000000 ____D () C:\Users\MARIO\AppData\Local\Downloaded Installations 2014-03-05 11:04 - 2012-11-09 12:07 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-03-05 11:04 - 2012-08-11 23:36 - 00000000 ____D () C:\Users\MARIO\AppData\Roaming\hpqLog 2014-03-05 11:04 - 2012-08-11 23:20 - 00000000 ____D () C:\Windows\Panther 2014-03-05 11:02 - 2013-10-30 11:09 - 00000000 ____D () C:\Program Files\CCleaner 2014-03-05 10:59 - 2013-11-28 14:49 - 00000000 ____D () C:\ProgramData\9f6539c2cf5992af 2014-03-05 10:57 - 2014-03-05 10:57 - 00000000 ____D () C:\Users\MARIO\AppData\Local\GHISLER 2014-03-05 10:26 - 2014-03-23 08:34 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-05 10:26 - 2014-03-23 08:34 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-05 10:26 - 2014-03-23 08:34 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys Some content of TEMP: ==================== C:\Users\MARIO\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-31 09:55 ==================== End Of Log ============================

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by MARIO at 2014-04-01 10:02:34 Running from C:\Users\MARIO\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664} FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} ==================== Installed Programs ====================== Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Aktualizacja produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{04E205D6-88B1-4652-B162-42DF2C3B1228}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{442ECBCF-94A7-48CC-8CD9-D31FFFD5FA86}) (Version: - Microsoft) Aktualizacja produktu Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{128A36ED-21BE-4547-9FFE-5B85AEC735DD}) (Version: - Microsoft) Aktualizacje NVIDIA 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation) Angry Birds Space 1.0.0 (HKLM-x32\...\Angry Birds Space 1.0.0_is1) (Version: - ) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Ashampoo Burning Studio 12 v.12.0.1 (HKLM-x32\...\Ashampoo Burning Studio 12_is1) (Version: 12.0.1 - Ashampoo GmbH & Co. KG) Ashampoo PO Toolbar (HKCU\...\CT2481033) (Version: 10.14.0.105 - Ashampoo PO) <==== ATTENTION AuthenTec TrueSuite (HKLM\...\{E6C44758-FF49-47D1-8182-65E3818ACE23}) (Version: 2.0.0.57 - AuthenTec, Inc.) AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies) AVG 2014 (Version: 14.0.3722 - AVG Technologies) Hidden AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden AVG PC TuneUp 2014 (HKLM-x32\...\AVG PC TuneUp) (Version: 14.0.1001.295 - AVG) AVG PC TuneUp 2014 (pl-PL) (x32 Version: 14.0.1001.295 - AVG) Hidden AVG PC TuneUp 2014 (x32 Version: 14.0.1001.295 - AVG) Hidden Bandizip (HKCU\...\Bandizip) (Version: 3.10 - Bandisoft.com) BitComet 1.37 (HKLM-x32\...\BitComet) (Version: 1.37 - CometNetwork) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform) concept/design onlineTV 8 (HKLM-x32\...\{D2AC7034-15AC-4F62-85BD-1E48021E45D6}_is1) (Version: 8.0.0.0 - concept/design GmbH) concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: Video Jukebox - concept/design GmbH) Deluxe Ski Jump 3 v1.7.0 (HKLM-x32\...\Deluxe Ski Jump 3_is1) (Version: 1.7.0 - Mediamond Tmi) eMule (HKLM-x32\...\eMule) (Version: - ) Eraser 6.0.10.2620 (HKLM\...\{6E5159B4-A519-41EF-80EF-AD58371515DF}) (Version: 6.0.2620 - The Eraser Project) erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden FormatFactory 3.0.1 (HKLM-x32\...\FormatFactory) (Version: 3.0.1 - Free Time) GG (HKCU\...\GG) (Version: 11 - GG Network S.A.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HP Product Detection (HKLM-x32\...\{4F38594F-2C4A-4C42-B2C4-505E225F6F80}) (Version: 11.14.0004 - HP) HP Quick Launch Buttons (HKLM-x32\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.50.14.1 - Hewlett-Packard Company) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) Internet Download Manager PL 5.18 Build 8 Packages (HKCU\...\Internet Download Manager PL 5.18 Build 8 Packages) (Version: - ) <==== ATTENTION ipla 2.6.3 (HKLM-x32\...\ipla) (Version: 2.6.3 - Redefine Sp z o.o.) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 6.2.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.2.0 - ) Lexmark X1100 Series (HKLM\...\Lexmark X1100 Series) (Version: - Lexmark International, Inc.) Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) LWS Facebook (x32 Version: 13.50.854.0 - Logitech) Hidden LWS Gallery (x32 Version: 13.51.827.0 - Logitech) Hidden LWS Help_main (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Launcher (x32 Version: 13.51.828.0 - Logitech) Hidden LWS Motion Detection (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Pictures And Video (x32 Version: 13.51.815.0 - Logitech) Hidden LWS Twitter (x32 Version: 13.30.1346.0 - Logitech) Hidden LWS Webcam Software (x32 Version: 13.51.815.0 - Logitech) Hidden LWS WLM Plugin (x32 Version: 1.30.1201.0 - Logitech) Hidden LWS YouTube Plugin (x32 Version: 13.31.1038.0 - Logitech) Hidden Malwarebytes Anti-Malware wersja 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation) MegaPinball (HKLM-x32\...\{710913F4-5E9D-495B-A5F4-43FF7CF26B43}) (Version: 1.00.000 - ) Microsoft .NET Framework 4.5.1 (PLK) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Polish) 2007 (x32 Version: 12.0.4518.1020 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (Polish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (Polish) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Monopoly by Parker Brothers (HKLM-x32\...\Monopoly by Parker Brothers) (Version: 1.0.406.0 - GameHouse, Inc.) Motorola SM56 Speakerphone Modem (HKLM\...\SMSERIAL) (Version: 6.12.25.06 - Motorola Inc) Mozilla Firefox 28.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 pl)) (Version: 28.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero 2014 (HKLM-x32\...\{0128492C-AB60-43BE-9D9A-8CA622CAF06E}) (Version: 15.0.07700 - Nero AG) Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 15.1.0030 - Nero AG) Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden Nokia Connectivity Cable Driver (HKLM-x32\...\{4216D328-0FE8-48B8-85B8-BD300E6F080F}) (Version: 7.1.36.0 - Nokia) Nokia Flashing Cable Driver (HKLM-x32\...\{2A0A6470-FD0F-4F45-9B11-85F3167DB943}) (Version: 8.23.0.0 - Nokia) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA PhysX (x32 Version: 9.12.1031 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliński) Panel sterowania NVIDIA 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.2.10 - Prolific Technology INC) PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden QLBCASL (x32 Version: 6.40.17.2 - Hewlett-Packard) Hidden Realtek AC'97 Audio (HKLM-x32\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: 5.36 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.) Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.) Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.) Słownik YDP (niemiecko-polski, polsko-niemiecki) (HKLM-x32\...\YdpDict200) (Version: - ) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.) Super Kulki (HKLM-x32\...\Super Kulki_is1) (Version: 5.0 - ALLCinema Ltd.) SuperMemo UX - Niemiecki. Kein Problem!+ 1 (HKLM-x32\...\SuperMemo UX - Niemiecki. Kein Problem!+ 1) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.33.0 - Synaptics Incorporated) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{840D15BD-72E8-4710-ABDD-8E883B88BD5D}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878234) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{EC1934B0-AE0F-4BBD-8955-54BB3247ED9E}) (Version: - Microsoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) ==================== Restore Points ========================= 22-03-2014 23:32:54 Zainstalowany program DirectX 22-03-2014 23:56:59 Zainstalowany program DirectX 22-03-2014 23:59:18 Zainstalowany program DirectX 23-03-2014 00:21:57 Installed Nero 2014. 23-03-2014 10:04:20 Zainstalowano: AVG PC TuneUp 2014 31-03-2014 06:53:51 Configured MegaPinball 31-03-2014 11:43:55 SPTD setup V1.86 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2012-12-06 11:47 - 00000808 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04E9BD74-8A61-4A6F-B589-FEF116AF0248} - \Safer-Networking\Spybot - Search and Destroy\Check for updates No Task File Task: {12D0FAF0-11EF-4B66-852F-92D6B5CE3045} - \Safer-Networking\Spybot - Search and Destroy\Scan the system No Task File Task: {190EF493-D181-4474-8E68-FB0319B634F2} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-09-21] (FranmoSoftware) Task: {2C9AEA5E-972B-4520-A28A-BF920552E449} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG) Task: {51134F56-3615-41AC-A871-3A656BFDB61A} - System32\Tasks\irMonitor => C:\Users\MARIO\AppData\Local\IRMonitor.exe [2013-12-30] (ITE Tech. Inc.) Task: {586B1F80-02EE-4598-AF09-5FC175C5B216} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {6B7845DD-833F-42D2-B2BE-4011E0494811} - \RegClean Pro No Task File Task: {75786114-EF2D-4792-B000-F4AFBF98DCDD} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-04-24] (Piriform Ltd) Task: {788B3260-E633-4AA6-B658-E944C45AEEB7} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization No Task File Task: {A8AE4538-C422-405B-8EA0-709D31681C05} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) ==================== Loaded Modules (whitelisted) ============= 2012-08-11 23:20 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-12-13 02:32 - 2013-11-28 13:21 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2012-09-13 01:38 - 2012-09-13 01:38 - 00264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe 2013-12-04 14:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-12-04 14:42 - 2013-05-16 11:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-12-04 14:42 - 2013-05-16 11:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-12-04 14:42 - 2013-05-16 11:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-12-04 14:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 02144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 07955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll 2012-09-13 01:38 - 2012-09-13 01:38 - 00127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll 2012-09-13 01:39 - 2012-09-13 01:39 - 00336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll 2014-03-29 17:33 - 2014-03-29 17:34 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^Users^MARIO^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk => C:\Windows\pss\MyPC Backup.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: BitComet => "C:\Program Files\BitComet\BitComet.exe" /tray MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart MSCONFIG\startupreg: Eraser => "C:\PROGRA~1\Eraser\Eraser.exe" --atRestart MSCONFIG\startupreg: GG => "C:\Users\MARIO\AppData\Local\GG\Application\gghub.exe" MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: GUDelayStartup => C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe -delayrun MSCONFIG\startupreg: IDMan => C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot MSCONFIG\startupreg: IPLA! => C:\Program Files (x86)\ipla\ipla.exe /autorun MSCONFIG\startupreg: lxbkbmgr.exe => "C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe" MSCONFIG\startupreg: Pokki => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SMSERIAL => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe MSCONFIG\startupreg: UIExec => "C:\Program Files (x86)\Join Air\UIExec.exe" ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (03/31/2014 11:01:22 PM) (Source: Application Hang) (User: ) Description: Program explorer.exe w wersji 6.1.7601.17567 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 12f8 Godzina rozpoczęcia: 01cf4d0546a5b82c Godzina zakończenia: 0 Ścieżka aplikacji: C:\Windows\explorer.exe Identyfikator raportu: 961d7c93-b917-11e3-b6c5-001e37665561 System errors: ============= Error: (03/31/2014 11:05:43 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:05:42 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:05:41 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:05:41 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:40 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:40 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:39 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:39 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:38 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Error: (03/31/2014 11:00:09 PM) (Source: Disk) (User: ) Description: Sterownik wykrył błąd kontrolera na \Device\Harddisk2\DR4. Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3070.43 MB Available physical RAM: 1767.01 MB Total Pagefile: 6139.04 MB Available Pagefile: 4350.65 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:378.22 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A6775642) Partition: GPT Partition Type. ==================== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 03 Kwi 2014, 08:26

Przepraszam za opóźnienie.

Odinstaluj Spybota, ten program zupełnie się nie nadaje na dzisiejsze zagrożenia.

Przeczytaj uważnie instrukcję uruchomienia programu ComboFix i zastosuj się do niej.
Załącz raport z działania programu.

**Posty:** 11 · przez **mario113** 04 Kwi 2014, 16:49

Kod: Zaznacz wszystko: ComboFix 14-04-03.01 - MARIO 2014-04-04 15:53:55.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1250.48.1045.18.3070.1968 [GMT 2:00] Uruchomiony z: c:\users\MARIO\Desktop\ComboFix.exe AV: AVG Internet Security 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} FW: AVG Internet Security 2014 *Disabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} SP: AVG Internet Security 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\IsUn0415.exe c:\windows\SysWow64\AF15BDAEX.dll c:\windows\SysWow64\SET1A06.tmp . . ((((((((((((((((((((((((( Pliki utworzone od 2014-03-04 do 2014-04-04 ))))))))))))))))))))))))))))))) . . 2014-04-04 14:40 . 2014-04-04 14:40 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-04-04 14:40 . 2014-04-04 14:40 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2014-04-03 17:18 . 2014-04-03 17:19 -------- d-----w- c:\program files (x86)\USR 2014-03-31 13:48 . 2014-03-31 13:48 -------- d-----w- c:\windows\ERUNT 2014-03-31 11:44 . 2014-03-31 11:44 386680 ----a-w- c:\windows\system32\drivers\sptd.sys 2014-03-31 11:09 . 2014-04-01 08:03 -------- d-----w- C:\FRST 2014-03-28 07:19 . 2014-03-28 07:19 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software 2014-03-24 14:21 . 2014-03-24 14:21 -------- d-----w- c:\users\MARIO\AppData\Roaming\SuperMemo World 2014-03-24 14:17 . 2014-03-24 14:24 -------- d-----w- c:\program files (x86)\SuperMemo UX 2014-03-23 16:27 . 2014-03-23 16:27 2560 ----a-w- c:\windows\_MSRSTRT.EXE 2014-03-23 16:04 . 2014-03-23 16:04 -------- d-----w- c:\users\MARIO\AppData\Roaming\SpeedBit 2014-03-23 16:03 . 2014-03-23 16:04 -------- d-----w- c:\programdata\SpeedBit 2014-03-23 16:03 . 2014-03-23 16:29 -------- d-----w- c:\program files\Common Files\SpeedBit 2014-03-23 16:03 . 2014-03-23 16:03 -------- d-----w- c:\program files (x86)\Common Files\SpeedBit 2014-03-23 10:05 . 2013-12-18 08:38 40248 ----a-w- c:\windows\system32\TURegOpt.exe 2014-03-23 10:05 . 2013-12-18 08:38 29496 ----a-w- c:\windows\system32\authuitu.dll 2014-03-23 10:05 . 2013-12-18 08:38 25400 ----a-w- c:\windows\SysWow64\authuitu.dll 2014-03-23 10:05 . 2014-03-23 10:05 -------- d-----w- c:\users\MARIO\AppData\Roaming\AVG 2014-03-23 10:04 . 2014-03-23 10:06 -------- d-----w- c:\programdata\AVG 2014-03-23 10:03 . 2014-03-24 07:57 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-03-23 06:35 . 2014-03-31 06:55 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2014-03-23 06:34 . 2014-03-05 08:26 63192 ----a-w- c:\windows\system32\drivers\mwac.sys 2014-03-23 06:34 . 2014-03-05 08:26 88280 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2014-03-23 06:34 . 2014-03-05 08:26 25816 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-03-23 06:34 . 2014-03-23 06:34 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware 2014-03-23 00:34 . 2014-03-23 00:34 -------- d-----w- c:\users\MARIO\AppData\Local\Nero 2014-03-23 00:29 . 2014-03-23 00:29 -------- d-----w- c:\users\MARIO\AppData\Roaming\Nero 2014-03-23 00:22 . 2014-03-23 00:28 -------- d-----w- c:\program files (x86)\Common Files\Nero 2014-03-23 00:22 . 2014-03-23 00:27 -------- d-----w- c:\program files (x86)\Nero 2014-03-23 00:22 . 2014-03-23 00:28 -------- d-----w- c:\programdata\Nero 2014-03-22 23:59 . 2010-05-26 10:41 248672 ----a-w- c:\windows\SysWow64\d3dx11_43.dll 2014-03-22 23:59 . 2010-05-26 10:41 470880 ----a-w- c:\windows\SysWow64\d3dx10_43.dll 2014-03-22 23:35 . 2010-05-26 10:41 1868128 ----a-w- c:\windows\SysWow64\d3dcsx_43.dll 2014-03-22 23:14 . 2014-03-22 23:15 -------- d-----w- c:\users\MARIO\AppData\Local\Bandizip 2014-03-22 22:39 . 2014-03-22 22:39 -------- d-----w- c:\users\MARIO\AppData\Roaming\TuneUp Software 2014-03-22 22:38 . 2014-03-22 22:38 -------- d-----w- C:\$AVG 2014-03-22 22:38 . 2014-03-23 10:05 -------- d-----w- c:\program files (x86)\AVG 2014-03-22 22:18 . 2014-03-22 22:19 -------- d-----w- c:\program files (x86)\BitComet 2014-03-22 21:50 . 2014-04-04 14:21 -------- d-----w- c:\programdata\MFAData 2014-03-22 21:50 . 2014-03-22 22:52 -------- d-----w- c:\users\MARIO\AppData\Local\Avg2014 2014-03-22 21:50 . 2014-03-22 21:50 -------- d-----w- c:\users\MARIO\AppData\Local\MFAData 2014-03-22 21:44 . 2014-03-22 21:44 -------- d-s---w- c:\windows\SysWow64\Microsoft 2014-03-22 12:04 . 2014-03-22 12:04 21052 ----a-w- c:\windows\SysWow64\SIntfNT.dll 2014-03-22 12:04 . 2014-03-22 12:04 15144 ----a-w- c:\windows\SysWow64\SIntf32.dll 2014-03-22 12:04 . 2014-03-22 12:04 12067 ----a-w- c:\windows\SysWow64\SIntf16.dll 2014-03-22 12:04 . 1995-07-14 00:43 27632 ----a-r- c:\windows\system\Ctl3dv2.dll 2014-03-22 12:04 . 1995-04-26 22:20 125856 ----a-r- c:\windows\system\Mfco250.dll 2014-03-22 12:04 . 1995-04-26 22:15 322384 ----a-w- c:\windows\system\Mfc250.dll 2014-03-22 12:04 . 1995-04-26 21:33 146976 ----a-w- c:\windows\system\Mfcoleui.dll 2014-03-22 12:04 . 2014-03-22 12:07 -------- d-----w- c:\program files (x86)\YDP 2014-03-21 18:03 . 2014-03-21 18:03 -------- d-----w- c:\users\MARIO\AppData\Roaming\Malwarebytes 2014-03-21 18:03 . 2014-03-23 06:34 -------- d-----w- c:\programdata\Malwarebytes 2014-03-20 23:01 . 2014-03-20 23:01 -------- d-----w- c:\users\MARIO\AppData\Local\Eraser 6 2014-03-20 17:51 . 2014-03-20 17:51 -------- d-----w- c:\program files\Eraser 2014-03-20 08:19 . 2014-03-20 08:19 -------- d-----w- c:\users\MARIO\AppData\Local\Logitech® Webcam Software 2014-03-20 08:16 . 2014-03-20 08:16 -------- d-----w- c:\programdata\LogiShrd 2014-03-20 08:15 . 2014-03-20 08:15 -------- d-----w- c:\users\MARIO\AppData\Roaming\Leadertech 2014-03-20 08:15 . 2014-03-20 08:15 53248 ----a-r- c:\users\MARIO\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe 2014-03-20 08:14 . 2014-03-20 08:16 -------- d-----w- c:\program files (x86)\Common Files\LogiShrd 2014-03-20 08:14 . 2014-03-20 08:15 -------- d-----w- c:\program files (x86)\Logitech 2014-03-18 22:58 . 2014-04-03 17:47 -------- d-----w- c:\users\MARIO\AppData\Roaming\IDM 2014-03-18 22:58 . 2014-03-18 22:58 -------- d-----w- c:\programdata\IDM 2014-03-18 22:58 . 2014-04-04 14:41 -------- d-----w- c:\users\MARIO\AppData\Roaming\DMCache 2014-03-18 22:58 . 2014-03-18 22:59 -------- d-----w- c:\program files (x86)\Internet Download Manager 2014-03-18 22:22 . 2014-03-18 22:22 -------- d-----w- c:\users\MARIO\AppData\Roaming\1J1F1H1E2Y2Z1P1C1B2W1L1T2ZtF1E1I 2014-03-17 19:55 . 2014-03-17 19:55 -------- d-----w- c:\windows\Sun 2014-03-16 16:23 . 2014-03-16 16:23 -------- d-----w- c:\program files (x86)\Odkurzacz 2014-03-16 12:56 . 2012-08-20 00:37 1490656 ----a-w- c:\windows\system32\drivers\WdfCoInstaller01007.dll 2014-03-16 12:54 . 2014-03-16 16:10 -------- d-----w- c:\programdata\DatacardService 2014-03-16 06:00 . 2014-03-16 06:00 -------- d-----w- c:\users\MARIO\AppData\Roaming\Boilsoft 2014-03-15 22:13 . 2014-03-15 22:13 -------- d-----w- c:\users\MARIO\AppData\Local\FreemakeVideoConverter 2014-03-15 22:12 . 2014-03-16 16:07 -------- d-----w- c:\programdata\Freemake 2014-03-15 22:11 . 2014-03-16 16:07 -------- d-----w- c:\program files (x86)\Freemake 2014-03-14 05:37 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll 2014-03-14 05:37 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll 2014-03-13 18:45 . 2014-03-20 08:15 -------- d-----w- c:\program files\Common Files\logishrd 2014-03-12 17:46 . 2014-03-01 06:05 23133696 ----a-w- c:\windows\system32\mshtml.dll 2014-03-12 17:46 . 2014-03-01 04:23 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-03-12 17:46 . 2014-02-04 02:32 624128 ----a-w- c:\windows\system32\qedit.dll 2014-03-12 17:46 . 2014-02-04 02:04 509440 ----a-w- c:\windows\SysWow64\qedit.dll 2014-03-11 18:42 . 2008-09-24 09:40 4122368 ----a-r- c:\windows\SysWow64\drivers\alcxwdm.sys 2014-03-11 18:42 . 2007-04-16 14:28 577536 ----a-w- c:\windows\soundman.exe 2014-03-11 18:42 . 2006-12-08 14:20 10528768 ----a-w- c:\windows\SysWow64\RTLCPL.exe 2014-03-11 18:42 . 2006-10-18 01:53 147456 ----a-w- c:\windows\SysWow64\RtlCPAPI.dll 2014-03-11 18:42 . 2006-08-01 14:02 49152 ----a-w- c:\windows\SysWow64\ChCfg.exe 2014-03-11 18:42 . 2006-11-17 04:40 18804736 ----a-w- c:\windows\SysWow64\alsndmgr.cpl 2014-03-11 18:41 . 2014-03-11 18:41 -------- d-----w- c:\program files (x86)\Realtek AC97 2014-03-11 18:41 . 2006-07-31 10:27 217088 ----a-w- c:\windows\alcrmv.exe 2014-03-11 18:41 . 2006-07-31 10:19 315392 ----a-w- c:\windows\alcupd.exe 2014-03-11 18:18 . 2014-03-11 18:40 319488 ----a-w- c:\windows\HideWin.exe 2014-03-09 11:13 . 2014-03-09 11:13 -------- d-----w- c:\users\MARIO\AppData\Local\Skype 2014-03-09 11:13 . 2014-03-09 11:13 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-03-09 07:14 . 2013-12-06 02:30 1882112 ----a-w- c:\windows\system32\msxml3.dll 2014-03-09 07:14 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll 2014-03-09 07:14 . 2013-12-06 02:02 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll 2014-03-09 07:14 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-03-20 06:24 . 2013-12-01 12:26 1652 ----a-w- c:\windows\system32\ASOROSet.bin 2014-03-18 18:40 . 2012-10-20 21:58 90015360 ----a-w- c:\windows\system32\MRT.exe 2014-02-17 15:13 . 2012-08-11 21:06 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-02-17 15:13 . 2012-08-11 21:06 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}] 2012-11-15 11:46 575304 ----a-w- c:\users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{d43723ae-1ae1-4a25-a6a4-bf0929273cab}"= "c:\users\MARIO\AppData\LocalLow\CT2481033\ldrtbAsha.dll" [2012-11-15 575304] . [HKEY_CLASSES_ROOT\clsid\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files (x86)\Internet Download Manager\IDMan.exe" [2014-02-21 3829328] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-24 323640] "LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2012-09-12 204136] "AVG_UI"="c:\program files (x86)\AVG\AVG2014\avgui.exe" [2014-03-19 4971024] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Aktywacja Testera.lnk - c:\program files (x86)\YDP\YdpDict.2\Watch.exe [2014-3-22 352768] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux4"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x] R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x] R3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;c:\program files (x86)\BitComet\tools\BitCometService.exe;c:\program files (x86)\BitComet\tools\BitCometService.exe [x] R3 btwampfl;btwampfl;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x] R3 GUCI_AVS;Philips SPZ2000 Webcam;c:\windows\system32\DRIVERS\GUCI_AVS.sys;c:\windows\SYSNATIVE\DRIVERS\GUCI_AVS.sys [x] R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x] R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x] R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x] R3 netw5v64;Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista w wersji 64-bitowej;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x] R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x] R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x] R3 WatAdminSvc;Usługa Technologie aktywacji systemu Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x] S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x] S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys;c:\windows\SYSNATIVE\DRIVERS\avgfwd6a.sys [x] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x] S2 avgfws;Zapora AVG;c:\program files (x86)\AVG\AVG2014\avgfws.exe;c:\program files (x86)\AVG\AVG2014\avgfws.exe [x] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe;c:\program files (x86)\AVG\AVG2014\avgidsagent.exe [x] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2014\avgwdsvc.exe [x] S2 BcmBtRSupport;Bluetooth Driver Management Service;c:\windows\system32\BtwRSupportService.exe;c:\windows\SYSNATIVE\BtwRSupportService.exe [x] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys;c:\windows\SYSNATIVE\DRIVERS\idmwfp.sys [x] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe;c:\windows\SYSNATIVE\lxbkcoms.exe [x] S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x] S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [x] S3 ATSwpWDF;AuthenTec TruePrint WBF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x] S3 bcbtums;Bluetooth USB LD Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x] S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 NETwLv64; Sterownik karty Intel(R) Wireless WiFi Link 5000 Series dla systemu Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETwLv64.sys;c:\windows\SYSNATIVE\DRIVERS\NETwLv64.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay1] @="{E68D0A50-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A50-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:42 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay2] @="{E68D0A51-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A51-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:42 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay3] @="{E68D0A52-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A52-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:42 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GGDriveOverlay4] @="{E68D0A53-3C40-4712-B90D-DCFA93FF2534}" [HKEY_CLASSES_ROOT\CLSID\{E68D0A53-3C40-4712-B90D-DCFA93FF2534}] 2012-06-05 09:42 2023936 ----a-w- c:\programdata\GG\ggdrive\ggdrive-overlay.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2012-11-15 23:07 23496 ----a-w- c:\program files (x86)\Internet Download Manager\IDMShellExt64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-06-11 12503184] . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: &P&obierz &za pomocą BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddLink.htm IE: E&ksportuj do programu Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Pobierz wszystko za pomocą BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddAllLink.htm IE: Ściągnij przez IDM - c:\program files (x86)\Internet Download Manager\IEExt.htm IE: Ściągnij wszystkie linki przez IDM - c:\program files (x86)\Internet Download Manager\IEGetAll.htm TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\MARIO\AppData\Roaming\Mozilla\Firefox\Profiles\3ax14j69.default\ FF - prefs.js: browser.startup.homepage - chrome://speeddial/content/speeddial.xul . - - - - USUNIĘTO PUSTE WPISY - - - - . Toolbar-10 - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-10 - (no file) WebBrowser-{D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - (no file) ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-SuperMemo UX - Niemiecki. Kein Problem!+ 1 - c:\windows\IsUn0415.exe AddRemove-YdpDict200 - c:\windows\IsUn0415.exe AddRemove-CT2481033 - c:\users\MARIO\AppData\Local\Conduit\CT2481033\uninstall.exe . . . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.safariextz\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="SafariExtension" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="IE.AssocFile.SVG" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="FirefoxHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice] @Denied: (2) (S-1-5-21-264233031-3586167319-933125827-1001) @Denied: (2) (LocalSystem) "Progid"="SafariHTML" . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:6b,e8,c5,cd,ea,64,7a,70,92,d3,44,c2,b5,72,a2,fa,dd,96,c3,6a,26,f6,9f, 4f,cf,e3,cd,70,86,d1,f3,c3,45,b5,26,22,61,77,62,c4,9d,9a,a1,ac,70,7e,ca,9a,\ "??"=hex:50,b9,12,ba,5c,99,a8,9b,11,af,07,d9,86,05,24,66 . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "scansk"=hex(0):53,92,27,96,33,9e,dc,97,9a,a1,e5,6c,68,fa,31,33,b9,71,75,fd,20, aa,cb,6d,79,2b,ce,1e,70,42,23,8b,16,86,85,bc,de,3d,4c,ed,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-264233031-3586167319-933125827-1001_Classes\Wow6432Node\CLSID\{6ad8ec0d-f642-4c16-bf4a-b764da731e48}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:0000005d "Therad"=dword:00000012 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2014-04-04 16:45:27 ComboFix-quarantined-files.txt 2014-04-04 14:45 . Przed: 421 178 683 392 bajtów wolnych Po: 420 987 113 472 bajtów wolnych . - - End Of File - - 9B8D99598DDA685804AD7583965A249B

**Posty:** 2183 · przez **NieWiem** 05 Kwi 2014, 03:56

Na pewno wyinstalowałeś wirtualne napędy?
Coś mi tutaj nie pasuje.

Pobierz aswMBR na pulpit.
Uruchom jako administrator.
Zgódź się, jeśli poprosi o zaktualizowanie bazy definicji wirusów.
Po aktualizacji wciśnij Scan. Może chwilę zająć.
Wciśnij Save Log i przeklej otrzymany raport.