Program discount dragon i wyskakujace reklamy

**Posty:** 4 · przez **czarnyfreestyle** 26 Mar 2014, 00:15

Mam wielką prośbę, nie mam doswiadczenia zbyt wielkiego jesli chodzi o tak zaawansowane czyszczenie komputera. Robiłam wszystko punkt po punkcie jak tu zalecanał *ordynat i chyba cos nagrzebałam, usunełam BringStar i Discount Dragon itd, itd zatrzymałam sie punkcie trzecim, siedze juz 2godziny nad tym i nie wiem czy czasem czegos nie spieprzyłam.. i teraz faktycznie reklamy nie wyskakują, ale nie zdawalam sobie sprawy z tego co robie.. mam nadzieje, ze wszystko będzie dobrze z komputerem. uratujcie mnie bo facet mnie zabije sciana

**Posty:** 2183 · przez **NieWiem** 26 Mar 2014, 00:21

Nikt Cię nie zabije tylko się dostosuj

Każdy problem jest indywidualny, zatem odpowiedz mi na takie pytanie:
Jaki system jest zainstalowany na nim?

**Posty:** 4 · przez **czarnyfreestyle** 26 Mar 2014, 00:26

O wielkie dzięki ze sie zainteresowałes moją prośbą Win32:Sality Zainstalowany jest windows 7

Jednak uratowana

Dodano Dzisiaj, 23:33:
Podejrzewam ze to jest Ci potrzebne do wglądu:
http://www.wklejto.pl/195887 - Fixlog
http://www.wklejto.pl/195889 - FRST
czy mam cos jeszcze wrzucic?

**Posty:** 2183 · przez **NieWiem** 26 Mar 2014, 00:37

Nie korzystaj nigdy więcej z cudzych skryptów! Można w ten sposób uszkodzić sobie komputer!

Raporty, które wkleiłaś są zresztą bezużyteczne dla mnie. Proszę żebyś pobrała świeżą wersję FRST, uruchomiła, zaznaczyła opcję addition.txt i wstawiła mi świeże raporty.
Wstawiaj je w załącznikach, a nie na żadnym wklejto czy innych.

**Posty:** 4 · przez **czarnyfreestyle** 26 Mar 2014, 01:08

1.

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by ADMIN (administrator) on ADMIN-KOMPUTER on 26-03-2014 00:06:43 Running from C:\Users\ADMIN\Downloads Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe () C:\ProgramData\MobileBrServ\mbbservice.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe (Highresolution Enterprises) C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Valve Corporation) C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Open Text Inc.) C:\Program Files (x86)\FirstClass\fcc32.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [XMouseButtonControl] - C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1171088 2013-10-06] (Highresolution Enterprises) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [fst_pl_59] - [X] HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-03-23] (AVAST Software) HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [37664 2014-03-05] (Overwolf LTD) HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1821888 2014-02-25] (Valve Corporation) HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\MountPoints2: {659f6249-6ee1-11e3-b0bd-806e6f6e6963} - 1 HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\MountPoints2: {91efb802-6f0c-11e3-8f22-20cf30db9bde} - K:\Setup.exe HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\MountPoints2: {91efba29-6f0c-11e3-8f22-20cf30db9bde} - K:\Setup.exe HKU\S-1-5-21-1748468773-1243006942-2189356820-1000\...\MountPoints2: {ab1e27d5-801a-11e3-9da7-20cf30db9bde} - F:\AutoRun.exe GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?pc=UP97&ocid=UP97DHP HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?pc=UP97&ocid=UP97DHP HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-pl HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://pl.yahoo.com?fr=fp-comodo StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388836144&from=cor&uid=395049983_1052499_ACB580DF&q={searchTerms} SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388836144&from=cor&uid=395049983_1052499_ACB580DF&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388836144&from=cor&uid=395049983_1052499_ACB580DF&q={searchTerms} SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1388836144&from=cor&uid=395049983_1052499_ACB580DF&q={searchTerms} SearchScopes: HKCU - A18B7183FE364D0CA6F6230FD9A0505D URL = http://www.sweet-page.com/web/?type=ds&ts=1388836144&from=cor&uid=395049983_1052499_ACB580DF&q={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = http://pl.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 FireFox: ======== FF ProfilePath: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\d2e3sf40.default FF user.js: detected! => C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\d2e3sf40.default\user.js FF DefaultSearchEngine: Bing FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Google FF Homepage: hxxp://pl.msn.com/?pc=UP97&ocid=UP97DHP FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense) FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 - C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense) FF SearchPlugin: C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\d2e3sf40.default\searchplugins\bingp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\sweet-page.xml FF Extension: SaveSense - C:\Users\ADMIN\AppData\Roaming\Mozilla\Firefox\Profiles\d2e3sf40.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23} [2014-02-19] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-23] Chrome: ======= CHR HomePage: https://www.google.pl/ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll () CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Dokumenty Google) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-27] CHR Extension: (Dysk Google) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-27] CHR Extension: (YouTube) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-27] CHR Extension: (Szukaj w Google) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-27] CHR Extension: (avast! Online Security) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-23] CHR Extension: (Google Wallet) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-27] CHR Extension: (Gmail) - C:\Users\ADMIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-27] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-03-23] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-23] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-03-23] (AVAST Software) R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] () R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [241232 2013-11-04] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] () S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [99616 2014-03-05] (Overwolf LTD) S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-19] (SaveSense) S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-19] (SaveSense) ==================== Drivers (Whitelisted) ==================== R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-03-23] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-03-23] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [445304 2014-03-23] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-03-23] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-03-23] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-03-23] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-03-23] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-03-23] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-03-23] () R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] () R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-25 23:50 - 2014-03-25 23:50 - 01143808 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST_www.INSTALKI.pl.exe 2014-03-25 23:44 - 2014-03-25 23:48 - 00000000 ____D () C:\ProgramData\RFA_Backups 2014-03-25 23:43 - 2014-03-25 23:44 - 06570472 _____ (RoseCitySoftware ) C:\Users\ADMIN\Downloads\rfasetup.exe 2014-03-25 23:42 - 2014-03-25 23:42 - 00000000 ____D () C:\Users\ADMIN\Documents\FirstClass 2014-03-25 23:41 - 2014-03-25 23:41 - 00001870 _____ () C:\Users\Public\Desktop\FirstClass.lnk 2014-03-25 23:41 - 2014-03-25 23:41 - 00000000 ____D () C:\ProgramData\FirstClass 2014-03-25 23:41 - 2014-03-25 23:41 - 00000000 ____D () C:\Program Files (x86)\FirstClass 2014-03-25 23:40 - 2014-03-25 23:40 - 27158528 _____ () C:\Users\ADMIN\Downloads\fcc12007.msi 2014-03-25 23:38 - 2014-03-25 23:38 - 00000061 _____ () C:\Users\ADMIN\Desktop\wklejto.txt 2014-03-25 22:46 - 2014-03-26 00:06 - 00014490 _____ () C:\Users\ADMIN\Downloads\FRST.txt 2014-03-25 22:46 - 2014-03-25 22:46 - 00050496 _____ () C:\Users\ADMIN\Downloads\Shortcut.txt 2014-03-25 22:46 - 2014-03-25 22:46 - 00023903 _____ () C:\Users\ADMIN\Downloads\Addition.txt 2014-03-25 22:46 - 2014-03-25 22:46 - 00000000 ____D () C:\Users\ADMIN\Desktop\Nowy folder 2014-03-25 22:42 - 2014-03-25 22:42 - 02157056 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST64.exe 2014-03-25 22:42 - 2014-03-25 22:42 - 01145856 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST (1).exe 2014-03-25 22:37 - 2014-03-25 22:37 - 00000231 _____ () C:\Users\ADMIN\Desktop\sfsdfdsf.txt 2014-03-25 22:35 - 2014-03-25 22:35 - 00000000 ____D () C:\Program Files (x86)\predm 2014-03-25 22:16 - 2014-03-26 00:06 - 00000000 ____D () C:\FRST 2014-03-25 22:11 - 2014-03-25 22:11 - 01145856 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST.exe 2014-03-25 08:50 - 2014-03-25 08:50 - 00001172 _____ () C:\Users\ADMIN\Downloads\glowny (6).m3u 2014-03-25 08:50 - 2014-03-25 08:50 - 00001112 _____ () C:\Users\ADMIN\Downloads\djmixes.m3u 2014-03-24 21:54 - 2014-03-24 21:54 - 00001172 _____ () C:\Users\ADMIN\Downloads\glowny (5).m3u 2014-03-23 21:57 - 2014-03-23 21:57 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\DropboxMaster 2014-03-23 21:56 - 2014-03-23 21:57 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Dropbox 2014-03-23 21:56 - 2014-03-23 21:56 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-03-23 21:55 - 2014-03-23 21:55 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\AVAST Software 2014-03-23 21:50 - 2014-03-25 10:23 - 00002056 _____ () C:\Users\ADMIN\Desktop\avast! SafeZone.lnk 2014-03-23 21:50 - 2014-03-25 10:23 - 00001996 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-03-23 21:50 - 2014-03-24 21:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-03-23 21:48 - 2014-03-23 21:47 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-03-23 21:48 - 2014-03-23 21:47 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-03-23 21:48 - 2014-03-23 21:47 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00445304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-03-23 21:47 - 2014-03-23 21:47 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-03-23 21:47 - 2014-03-23 21:47 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2014-03-23 21:45 - 2014-03-23 21:45 - 00000000 ____D () C:\Program Files\AVAST Software 2014-03-23 21:44 - 2014-03-23 21:44 - 04704344 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup_online.exe 2014-03-23 21:44 - 2014-03-23 21:44 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-03-22 19:16 - 2014-03-22 19:16 - 00001975 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-03-22 19:16 - 2014-03-22 19:16 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-03-22 19:15 - 2014-03-22 19:16 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-03-22 19:14 - 2014-03-22 19:16 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-03-22 19:14 - 2014-03-22 19:14 - 00001166 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-03-21 13:01 - 2014-03-21 13:01 - 00000247 _____ () C:\Users\ADMIN\Desktop\all.txt 2014-03-21 11:57 - 2014-03-21 11:57 - 00262144 ____N () C:\Windows\Minidump\032114-16816-01.dmp 2014-03-21 11:34 - 2014-03-21 11:34 - 00000016 _____ () C:\Users\ADMIN\Desktop\intern.txt 2014-03-20 21:32 - 2014-03-20 21:32 - 00000221 _____ () C:\Users\ADMIN\Desktop\Call of Duty Modern Warfare 2.url 2014-03-20 21:32 - 2014-03-20 21:32 - 00000221 _____ () C:\Users\ADMIN\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url 2014-03-20 21:32 - 2014-03-20 21:32 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-03-20 20:46 - 2014-03-20 20:46 - 00000103 _____ () C:\Users\ADMIN\Desktop\stem.txt 2014-03-20 20:13 - 2014-03-20 20:28 - 00000000 ____D () C:\Program Files (x86)\dumps 2014-03-20 20:11 - 2014-03-25 19:31 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-03-20 20:11 - 2014-03-20 20:46 - 00000993 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-03-19 23:00 - 2014-03-19 23:00 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-03-17 20:59 - 2014-03-17 20:59 - 00155317 _____ () C:\Users\ADMIN\Downloads\BBotNET (2).rar 2014-03-17 20:58 - 2014-03-17 21:00 - 00000000 ____D () C:\Users\ADMIN\Desktop\BBot 2014-03-17 20:58 - 2014-03-17 20:58 - 01177187 _____ () C:\Users\ADMIN\Downloads\BBot-33.0.7z 2014-03-16 16:16 - 2014-03-16 16:16 - 00047155 _____ () C:\Users\ADMIN\Desktop\to-ja-juz-wole-sweet-asne-focie-z-dziobkiem-pl-d018bc 2014-03-15 21:21 - 2014-03-15 21:21 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Macromedia 2014-03-15 21:21 - 2014-03-15 21:21 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-03-15 21:20 - 2014-03-25 10:23 - 00001975 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-03-15 21:20 - 2014-03-15 21:21 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Adobe 2014-03-15 21:20 - 2014-03-15 21:20 - 00000000 ____D () C:\ProgramData\McAfee 2014-03-14 09:57 - 2014-03-14 09:57 - 00141886 _____ () C:\Users\ADMIN\Downloads\uchwala-senatu-2014-2015.zip 2014-03-13 23:02 - 2014-03-13 23:02 - 00315245 _____ () C:\Users\ADMIN\Desktop\pobrane.htm 2014-03-13 21:36 - 2014-03-13 21:37 - 00902264 _____ () C:\Users\ADMIN\Downloads\yet_another_cleaner_reh.exe 2014-03-11 14:12 - 2014-03-11 14:12 - 00262144 ____N () C:\Windows\Minidump\031114-15678-01.dmp 2014-03-07 06:36 - 2014-03-07 06:36 - 01175968 _____ () C:\Users\ADMIN\Downloads\BBot-32.0.7z 2014-03-06 22:03 - 2014-03-06 22:03 - 00155317 _____ () C:\Users\ADMIN\Downloads\BBotNET (1).rar 2014-03-06 22:02 - 2014-03-06 22:02 - 01176661 _____ () C:\Users\ADMIN\Downloads\BBot-31.2 (1).7z 2014-03-05 19:29 - 2014-03-05 19:29 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll 2014-03-05 19:28 - 2014-03-05 19:28 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll 2014-03-05 19:27 - 2014-03-05 19:27 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Skype 2014-03-05 15:05 - 2014-03-05 15:10 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Skype 2014-03-05 15:05 - 2014-03-05 15:10 - 00000000 ____D () C:\ProgramData\Skype 2014-03-05 15:04 - 2014-03-05 15:04 - 34828960 _____ (Skype Technologies S.A.) C:\Users\ADMIN\Downloads\SkypeSetupFull.exe 2014-02-25 23:05 - 2014-02-25 23:05 - 06659584 _____ () C:\Users\ADMIN\Downloads\setup.msi 2014-02-25 22:58 - 2014-02-25 22:58 - 00000055 _____ () C:\Users\ADMIN\Downloads\Sorcerer [200+] Yalahar Sunken Quaras [LINK].txt ==================== One Month Modified Files and Folders ======= 2014-03-26 00:06 - 2014-03-25 22:46 - 00014490 _____ () C:\Users\ADMIN\Downloads\FRST.txt 2014-03-26 00:06 - 2014-03-25 22:16 - 00000000 ____D () C:\FRST 2014-03-26 00:05 - 2013-12-27 21:07 - 00000324 _____ () C:\Windows\Tasks\HP Photo Creations Communicator.job 2014-03-25 23:51 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-25 23:51 - 2009-07-14 05:45 - 00016640 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-25 23:50 - 2014-03-25 23:50 - 01143808 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST_www.INSTALKI.pl.exe 2014-03-25 23:48 - 2014-03-25 23:44 - 00000000 ____D () C:\ProgramData\RFA_Backups 2014-03-25 23:45 - 2013-12-27 11:33 - 00000000 ___RD () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-25 23:44 - 2014-03-25 23:43 - 06570472 _____ (RoseCitySoftware ) C:\Users\ADMIN\Downloads\rfasetup.exe 2014-03-25 23:42 - 2014-03-25 23:42 - 00000000 ____D () C:\Users\ADMIN\Documents\FirstClass 2014-03-25 23:41 - 2014-03-25 23:41 - 00001870 _____ () C:\Users\Public\Desktop\FirstClass.lnk 2014-03-25 23:41 - 2014-03-25 23:41 - 00000000 ____D () C:\ProgramData\FirstClass 2014-03-25 23:41 - 2014-03-25 23:41 - 00000000 ____D () C:\Program Files (x86)\FirstClass 2014-03-25 23:40 - 2014-03-25 23:40 - 27158528 _____ () C:\Users\ADMIN\Downloads\fcc12007.msi 2014-03-25 23:38 - 2014-03-25 23:38 - 00000061 _____ () C:\Users\ADMIN\Desktop\wklejto.txt 2014-03-25 23:35 - 2014-02-19 15:30 - 00000930 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job 2014-03-25 23:23 - 2013-12-27 12:07 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-25 22:46 - 2014-03-25 22:46 - 00050496 _____ () C:\Users\ADMIN\Downloads\Shortcut.txt 2014-03-25 22:46 - 2014-03-25 22:46 - 00023903 _____ () C:\Users\ADMIN\Downloads\Addition.txt 2014-03-25 22:46 - 2014-03-25 22:46 - 00000000 ____D () C:\Users\ADMIN\Desktop\Nowy folder 2014-03-25 22:42 - 2014-03-25 22:42 - 02157056 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST64.exe 2014-03-25 22:42 - 2014-03-25 22:42 - 01145856 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST (1).exe 2014-03-25 22:37 - 2014-03-25 22:37 - 00000231 _____ () C:\Users\ADMIN\Desktop\sfsdfdsf.txt 2014-03-25 22:35 - 2014-03-25 22:35 - 00000000 ____D () C:\Program Files (x86)\predm 2014-03-25 22:11 - 2014-03-25 22:11 - 01145856 _____ (Farbar) C:\Users\ADMIN\Downloads\FRST.exe 2014-03-25 21:57 - 2014-02-20 00:58 - 00000404 __RSH () C:\ProgramData\ntuser.pol 2014-03-25 21:57 - 2014-02-20 00:58 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-03-25 21:57 - 2013-12-27 11:29 - 01130531 _____ () C:\Windows\WindowsUpdate.log 2014-03-25 21:00 - 2014-02-20 00:58 - 00000344 _____ () C:\Windows\Tasks\bench-sys.job 2014-03-25 19:31 - 2014-03-20 20:11 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-03-25 19:29 - 2013-12-27 12:07 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-25 18:04 - 2011-02-04 18:55 - 00697674 _____ () C:\Windows\system32\perfh015.dat 2014-03-25 18:04 - 2011-02-04 18:55 - 00134784 _____ () C:\Windows\system32\perfc015.dat 2014-03-25 18:04 - 2009-07-14 06:13 - 01549696 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-25 17:59 - 2014-01-06 19:44 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder 2014-03-25 17:58 - 2014-02-21 20:32 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Overwolf 2014-03-25 17:58 - 2014-02-19 15:30 - 00000926 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job 2014-03-25 17:58 - 2013-12-27 12:26 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-25 17:58 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-25 17:58 - 2009-07-14 05:51 - 00106400 _____ () C:\Windows\setupact.log 2014-03-25 11:16 - 2013-12-27 12:04 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\AIMP3 2014-03-25 10:23 - 2014-03-23 21:50 - 00002056 _____ () C:\Users\ADMIN\Desktop\avast! SafeZone.lnk 2014-03-25 10:23 - 2014-03-23 21:50 - 00001996 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-03-25 10:23 - 2014-03-15 21:20 - 00001975 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-03-25 08:51 - 2014-02-21 20:32 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\TS3Client 2014-03-25 08:50 - 2014-03-25 08:50 - 00001172 _____ () C:\Users\ADMIN\Downloads\glowny (6).m3u 2014-03-25 08:50 - 2014-03-25 08:50 - 00001112 _____ () C:\Users\ADMIN\Downloads\djmixes.m3u 2014-03-24 21:54 - 2014-03-24 21:54 - 00001172 _____ () C:\Users\ADMIN\Downloads\glowny (5).m3u 2014-03-24 21:50 - 2014-03-23 21:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-03-23 23:06 - 2010-11-21 04:47 - 00012650 _____ () C:\Windows\PFRO.log 2014-03-23 22:38 - 2014-02-19 15:30 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\SaveSense 2014-03-23 22:20 - 2014-01-04 12:49 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\newnext.me 2014-03-23 22:20 - 2014-01-04 12:49 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\genienext 2014-03-23 21:57 - 2014-03-23 21:57 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\DropboxMaster 2014-03-23 21:57 - 2014-03-23 21:56 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Dropbox 2014-03-23 21:56 - 2014-03-23 21:56 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-03-23 21:55 - 2014-03-23 21:55 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\AVAST Software 2014-03-23 21:47 - 2014-03-23 21:48 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-03-23 21:47 - 2014-03-23 21:48 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-03-23 21:47 - 2014-03-23 21:48 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00445304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-03-23 21:47 - 2014-03-23 21:47 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-03-23 21:47 - 2014-03-23 21:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-03-23 21:47 - 2014-03-23 21:47 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2014-03-23 21:45 - 2014-03-23 21:45 - 00000000 ____D () C:\Program Files\AVAST Software 2014-03-23 21:44 - 2014-03-23 21:44 - 04704344 _____ (AVAST Software) C:\Users\ADMIN\Downloads\avast_premier_antivirus_setup_online.exe 2014-03-23 21:44 - 2014-03-23 21:44 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-03-22 19:16 - 2014-03-22 19:16 - 00001975 _____ () C:\Users\Public\Desktop\Overwolf.lnk 2014-03-22 19:16 - 2014-03-22 19:16 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-03-22 19:16 - 2014-03-22 19:15 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-03-22 19:16 - 2014-03-22 19:14 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-03-22 19:14 - 2014-03-22 19:14 - 00001166 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-03-21 13:01 - 2014-03-21 13:01 - 00000247 _____ () C:\Users\ADMIN\Desktop\all.txt 2014-03-21 11:57 - 2014-03-21 11:57 - 00262144 ____N () C:\Windows\Minidump\032114-16816-01.dmp 2014-03-21 11:57 - 2014-01-08 18:40 - 00000000 ____D () C:\Windows\Minidump 2014-03-21 11:34 - 2014-03-21 11:34 - 00000016 _____ () C:\Users\ADMIN\Desktop\intern.txt 2014-03-20 21:32 - 2014-03-20 21:32 - 00000221 _____ () C:\Users\ADMIN\Desktop\Call of Duty Modern Warfare 2.url 2014-03-20 21:32 - 2014-03-20 21:32 - 00000221 _____ () C:\Users\ADMIN\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url 2014-03-20 21:32 - 2014-03-20 21:32 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-03-20 20:57 - 2014-01-06 19:56 - 00062792 _____ () C:\Windows\DirectX.log 2014-03-20 20:46 - 2014-03-20 20:46 - 00000103 _____ () C:\Users\ADMIN\Desktop\stem.txt 2014-03-20 20:46 - 2014-03-20 20:11 - 00000993 _____ () C:\Users\Public\Desktop\Steam.lnk 2014-03-20 20:28 - 2014-03-20 20:13 - 00000000 ____D () C:\Program Files (x86)\dumps 2014-03-19 23:00 - 2014-03-19 23:00 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-03-18 16:38 - 2014-01-26 16:21 - 00000000 ____D () C:\Users\ADMIN\Desktop\M 2014-03-17 21:00 - 2014-03-17 20:58 - 00000000 ____D () C:\Users\ADMIN\Desktop\BBot 2014-03-17 20:59 - 2014-03-17 20:59 - 00155317 _____ () C:\Users\ADMIN\Downloads\BBotNET (2).rar 2014-03-17 20:58 - 2014-03-17 20:58 - 01177187 _____ () C:\Users\ADMIN\Downloads\BBot-33.0.7z 2014-03-16 16:16 - 2014-03-16 16:16 - 00047155 _____ () C:\Users\ADMIN\Desktop\to-ja-juz-wole-sweet-asne-focie-z-dziobkiem-pl-d018bc 2014-03-15 21:28 - 2013-12-27 12:07 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-15 21:21 - 2014-03-15 21:21 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Macromedia 2014-03-15 21:21 - 2014-03-15 21:21 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-03-15 21:21 - 2014-03-15 21:20 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Adobe 2014-03-15 21:20 - 2014-03-15 21:20 - 00000000 ____D () C:\ProgramData\McAfee 2014-03-15 21:20 - 2014-02-19 15:31 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-15 21:20 - 2014-02-19 15:31 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-14 09:57 - 2014-03-14 09:57 - 00141886 _____ () C:\Users\ADMIN\Downloads\uchwala-senatu-2014-2015.zip 2014-03-13 23:02 - 2014-03-13 23:02 - 00315245 _____ () C:\Users\ADMIN\Desktop\pobrane.htm 2014-03-13 21:37 - 2014-03-13 21:36 - 00902264 _____ () C:\Users\ADMIN\Downloads\yet_another_cleaner_reh.exe 2014-03-12 14:11 - 2013-12-27 21:16 - 00000000 ____D () C:\Program Files (x86)\Tibia10 2014-03-11 14:12 - 2014-03-11 14:12 - 00262144 ____N () C:\Windows\Minidump\031114-15678-01.dmp 2014-03-07 06:36 - 2014-03-07 06:36 - 01175968 _____ () C:\Users\ADMIN\Downloads\BBot-32.0.7z 2014-03-06 22:03 - 2014-03-06 22:03 - 00155317 _____ () C:\Users\ADMIN\Downloads\BBotNET (1).rar 2014-03-06 22:02 - 2014-03-06 22:02 - 01176661 _____ () C:\Users\ADMIN\Downloads\BBot-31.2 (1).7z 2014-03-05 19:29 - 2014-03-05 19:29 - 00773968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100.dll 2014-03-05 19:28 - 2014-03-05 19:28 - 00421200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp100.dll 2014-03-05 19:27 - 2014-03-05 19:27 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll 2014-03-05 15:11 - 2013-12-27 12:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-03-05 15:10 - 2014-03-05 15:05 - 00000000 ____D () C:\Users\ADMIN\AppData\Roaming\Skype 2014-03-05 15:10 - 2014-03-05 15:05 - 00000000 ____D () C:\ProgramData\Skype 2014-03-05 15:06 - 2014-03-05 15:06 - 00000000 ____D () C:\Users\ADMIN\AppData\Local\Skype 2014-03-05 15:04 - 2014-03-05 15:04 - 34828960 _____ (Skype Technologies S.A.) C:\Users\ADMIN\Downloads\SkypeSetupFull.exe 2014-03-01 19:26 - 2013-12-30 21:46 - 00000917 _____ () C:\Users\ADMIN\Desktop\Ventrilo.lnk 2014-03-01 19:26 - 2013-12-27 20:13 - 00002236 _____ () C:\Users\Public\Desktop\HP Deskjet 1050 J410 series.lnk 2014-03-01 19:26 - 2013-12-27 20:13 - 00001194 _____ () C:\Users\Public\Desktop\Zakup materiałów eksploatacyjnych - HP Deskjet 1050 J410 series.lnk 2014-02-27 20:35 - 2014-02-20 00:58 - 00003240 _____ () C:\Windows\System32\Tasks\bench-sys 2014-02-27 11:59 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-02-26 20:20 - 2013-12-27 20:13 - 00000000 ____D () C:\ProgramData\HP 2014-02-25 23:05 - 2014-02-25 23:05 - 06659584 _____ () C:\Users\ADMIN\Downloads\setup.msi 2014-02-25 22:58 - 2014-02-25 22:58 - 00000055 _____ () C:\Users\ADMIN\Downloads\Sorcerer [200+] Yalahar Sunken Quaras [LINK].txt Some content of TEMP: ==================== C:\Users\ADMIN\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpadrwum.dll C:\Users\ADMIN\AppData\Local\Temp\Foxit Updater.exe C:\Users\ADMIN\AppData\Local\Temp\MSNA192.exe C:\Users\ADMIN\AppData\Local\Temp\nseCB25.tmp.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-21 12:30 ==================== End Of Log ============================

2.

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014 Ran by ADMIN at 2014-03-26 00:07:04 Running from C:\Users\ADMIN\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Flash Player 11 ActiveX (HKLM-x32\...\{41042E28-CCA1-4147-869F-9E928B38F04C}) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated) AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.20.1165, 21.12.2012 - AIMP DevTeam) AnyProtect Packages (HKCU\...\AnyProtect Packages) (Version: - ) <==== ATTENTION Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG) avast! Premier (HKLM-x32\...\Avast) (Version: 9.0.2016 - Avast Software) Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward) Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward) Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: - ) Creative System Information (HKLM-x32\...\SysInfo) (Version: - ) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd) Dll-Files Fixer (HKLM-x32\...\Dll-Files Fixer_is1) (Version: 3.1.81 - Dll-Files.com) Dropbox (HKCU\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.) FirstClass Client (HKLM-x32\...\{3367D1F6-D572-4DAE-AF01-7F19B3965950}) (Version: 12.007 - OpenText) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 5.4.5.124 - Foxit Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HP Deskjet 1050 J410 series Badanie ulepszeń produktu (HKLM\...\{713CDBCF-4352-4AB8-A288-90CEE3F3A8D1}) (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series Podstawowe oprogramowanie urządzenia (HKLM\...\{B2BF224C-9818-4942-BF11-8929859E53AE}) (Version: 22.50.231.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series Pomoc (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP Photo Creations Powered by RocketLife) HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard) Huawei E3272 (HKLM-x32\...\Huawei E3272) (Version: 22.001.20.03.1202 - Huawei Technologies Co.,Ltd) Java 7 Update 17 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.170 - Oracle) Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 9.7.5 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.7.5 - ) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Mozilla Firefox 19.0.2 (x86 pl) (HKLM-x32\...\Mozilla Firefox 19.0.2 (x86 pl)) (Version: 19.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 19.0.2 - Mozilla) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation) NVIDIA ForceWare Network Access Manager (HKLM-x32\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.140.952 - NVIDIA Corporation) Hidden NVIDIA Oprogramowanie systemu PhysX 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation) NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden NVIDIA Sterownik 3D Vision 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.82 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Sterownik graficzny 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation) OpenOffice.org 3.4.1 (HKLM-x32\...\{18192D3F-5537-4560-AD89-D695F72AF91D}) (Version: 3.41.9593 - Apache Software Foundation) Opera Stable 19.0.1326.56 (HKLM-x32\...\Opera 19.0.1326.56) (Version: 19.0.1326.56 - Opera Software ASA) Overwolf (HKLM-x32\...\{FB83467F-D8EB-43E6-8B3D-860B045C1C52}) (Version: 0.51.325 - Overwolf) Overwolf.Setup.VC100CRTx64.Dist (HKLM\...\{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}) (Version: 1.0.0 - Overwolf) Panel sterowania NVIDIA 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden Platform (x32 Version: 1.34 - VIA Technologies, Inc.) Hidden Sound Blaster Audigy (HKLM-x32\...\{1B1DDAD2-C704-49F8-8FC2-18DAAD9A87C5}) (Version: 1.0 - ) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Tasker version 3.13 (HKLM-x32\...\Tasker_is1) (Version: - Vista Software, Inc.) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) The Sims 3 (HKLM-x32\...\The Sims 3_is1) (Version: The Sims 3 - ) The Sims 3 Cztery pory roku (HKLM-x32\...\The Sims 3 Cztery pory roku_is1) (Version: The Sims 3 Cztery pory roku - ) The Sims 3 Diesel – akcesoria (HKLM-x32\...\The Sims 3 Diesel – akcesoria_is1) (Version: The Sims 3 Diesel – akcesoria - ) The Sims 3 Impreza w plenerze – akcesoria (HKLM-x32\...\The Sims 3 Impreza w plenerze – akcesoria_is1) (Version: The Sims 3 Impreza w plenerze – akcesoria - ) The Sims 3 Kariera (HKLM-x32\...\The Sims 3 Kariera_is1) (Version: The Sims 3 Kariera - ) The Sims 3 Luksusowy wypoczynek Akcesoria (HKLM-x32\...\The Sims 3 Luksusowy wypoczynek Akcesoria_is1) (Version: The Sims 3 Luksusowy wypoczynek Akcesoria - ) The Sims 3 Miejskie Życie - akcesoria (HKLM-x32\...\The Sims 3 Miejskie Życie - akcesoria_is1) (Version: The Sims 3 Miejskie Życie - akcesoria - ) The Sims 3 Nie z tego świata (HKLM-x32\...\The Sims 3 Nie z tego świata_is1) (Version: The Sims 3 Nie z tego świata - ) The Sims 3 Nowoczesny apartament - akcesoria (HKLM-x32\...\The Sims 3 Nowoczesny apartament - akcesoria_is1) (Version: The Sims 3 Nowoczesny apartament - akcesoria - ) The Sims 3 Po Zmroku (HKLM-x32\...\The Sims 3 Po Zmroku_is1) (Version: The Sims 3 Po Zmroku - ) The Sims 3 Pokolenia (HKLM-x32\...\The Sims 3 Pokolenia_is1) (Version: The Sims 3 Pokolenia - ) The Sims 3 Słodkie Niespodzianki Katy Perry (HKLM-x32\...\The Sims 3 Słodkie Niespodzianki Katy Perry_is1) (Version: The Sims 3 Słodkie Niespodzianki Katy Perry - ) The Sims 3 Szybka jazda – akcesoria (HKLM-x32\...\The Sims 3 Szybka jazda – akcesoria_is1) (Version: The Sims 3 Szybka jazda – akcesoria - ) The Sims 3 Wymarzone Podróże (HKLM-x32\...\The Sims 3 Wymarzone Podróże_is1) (Version: The Sims 3 Wymarzone Podróże - ) The Sims 3 Zostań gwiazdą (HKLM-x32\...\The Sims 3 Zostań gwiazdą_is1) (Version: The Sims 3 Zostań gwiazdą - ) The Sims 3 Zwierzaki (HKLM-x32\...\The Sims 3 Zwierzaki_is1) (Version: The Sims 3 Zwierzaki - ) Tibia (HKLM-x32\...\Tibia_is1) (Version: 10.33 - CipSoft GmbH) Ventrilo Client for Windows x64 (HKLM\...\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.) VIA Platforma Menedżera urządzeń (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.34 - VIA Technologies, Inc.) Visual C++ 2008 Runtime (x64) (x32 Version: 1.0.1 - Highresolution Enterprises) Hidden X-Mouse Button Control 2.6.2 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.6.2 - Highresolution Enterprises) ==================== Restore Points ========================= 20-03-2014 19:07:47 Zainstalowano: Microsoft Visual C++ 2005 Redistributable 20-03-2014 19:08:36 Zainstalowany program DirectX 20-03-2014 19:11:02 Zainstalowano: Steam 20-03-2014 19:30:00 Zainstalowany program DirectX 20-03-2014 19:56:51 Zainstalowany program DirectX 23-03-2014 20:45:27 avast! antivirus system restore point 23-03-2014 20:50:27 Instalacja pakietu sterownika urządzenia: Avast Usługa sieciowa 25-03-2014 22:41:38 Installed FirstClass Client. ==================== Hosts content: ========================== 2009-07-14 03:34 - 2014-03-25 21:57 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {33D9CC14-C74E-4A9C-9E8F-0218C1682BAB} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe [2013-11-25] (Dll-FIles.Com) Task: {3DCC13CF-A9F5-4E14-9D7C-64272B01E961} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27] (Google Inc.) Task: {53623246-585A-4EA6-A9BF-03155174E679} - System32\Tasks\bench-sys => C:\Program Files (x86)\Bench\Updater\updater.exe [2013-12-18] () <==== ATTENTION Task: {AC557566-8987-427A-8103-1E286AEFD9F8} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-19] (SaveSense) <==== ATTENTION Task: {CBF55C65-D889-4127-8198-BF14460E4E1C} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-19] (SaveSense) <==== ATTENTION Task: {E072131A-F715-4C1C-9F00-A4A55E16D3DE} - System32\Tasks\cenzura! HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [2010-11-16] (Hewlett-Packard Co.) Task: {E87A808B-B9F6-4F31-B82D-94D2E83A11F7} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2013-12-27] () Task: {EFF0418F-0D03-44C9-84AA-D2451F372C20} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-03-23] (AVAST Software) Task: {F02DBA35-E6FD-4B24-BDFD-B2B86105FAF7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-27] (Google Inc.) Task: C:\Windows\Tasks\bench-sys.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2013-12-27 12:26 - 2013-11-11 16:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-01-18 10:59 - 2013-11-04 10:22 - 00241232 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe 2013-12-27 12:13 - 2010-01-21 01:53 - 00496232 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe 2013-12-27 12:13 - 2010-01-21 01:52 - 00076392 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nv_common.dll 2013-12-27 12:13 - 2010-01-21 01:53 - 00731752 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\SpecialCase.dll 2013-12-27 12:13 - 2010-01-21 01:53 - 00209000 _____ () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe 2014-03-25 16:20 - 2014-03-25 16:20 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14032500\algo.dll 2014-03-25 23:47 - 2014-03-25 23:47 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14032501\algo.dll 2014-03-23 21:47 - 2014-03-23 21:47 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-12-12 14:19 - 2013-12-12 23:19 - 00142848 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll 2013-11-04 17:12 - 2013-11-05 02:12 - 00890592 _____ () C:\Program Files (x86)\Steam\libavutil-52.dll 2014-02-10 18:34 - 2014-02-11 03:34 - 00751616 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2014-02-25 13:57 - 2014-02-25 22:57 - 01135296 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2014-01-10 15:33 - 2014-01-11 00:33 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2013-06-14 15:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll 2013-06-14 15:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll 2013-06-14 15:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libglesv2.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\libegl.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\pdf.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll 2014-03-15 21:28 - 2014-03-15 01:50 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupreg: CTSysVol => C:\Program Files (x86)\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r MSCONFIG\startupreg: P17Helper => Rundll32 P17.dll,P17Helper MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: UpdReg => C:\Windows\UpdReg.EXE ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (03/25/2014 10:39:59 PM) (Source: SideBySide) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (03/25/2014 07:46:40 PM) (Source: Steam Client Service) (User: ) Description: Error: Failed to poke open firewall Error: (03/25/2014 06:00:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 05:58:30 PM) (Source: Winlogon) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error: (03/25/2014 04:20:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 04:18:54 PM) (Source: Winlogon) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error: (03/25/2014 10:24:29 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 10:22:47 AM) (Source: Winlogon) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. Error: (03/25/2014 08:13:21 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 08:11:41 AM) (Source: Winlogon) (User: ) Description: Aktywacja licencji systemu Windows nie powiodła się. Błąd 0x80070005. System errors: ============= Error: (03/25/2014 07:46:39 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi Steam Client Service z powodu następującego błędu: %%1053 Error: (03/25/2014 07:46:39 PM) (Source: Service Control Manager) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Steam Client Service. Error: (03/23/2014 09:44:58 PM) (Source: Service Control Manager) (User: ) Description: Nie można uruchomić usługi cqqobyhu z powodu następującego błędu: %%2 Error: (03/21/2014 01:27:44 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (03/21/2014 11:57:59 AM) (Source: Microsoft-Windows-WHEA-Logger) (User: ZARZĄDZANIE NT) Description: Wystąpił krytyczny błąd sprzętowy. Składnik: mostek północny firmy AMD Źródło błędu: 3 Typ błędu: 7 Identyfikator procesora: 0 Widok szczegółów tego wpisu zawiera dodatkowe informacje. Error: (03/21/2014 11:57:49 AM) (Source: BugCheck) (User: ) Description: 0x00000124 (0x0000000000000000, 0xfffffa800493f8f8, 0x0000000000000000, 0x0000000000000000)C:\Windows\Minidump\032114-16816-01.dmp032114-16816-01 Error: (03/21/2014 11:57:48 AM) (Source: EventLog) (User: ) Description: Poprzednie zamknięcie systemu przy 11:55:13 na ‎2014-‎03-‎21 było nieoczekiwane. Error: (03/17/2014 11:48:41 AM) (Source: EventLog) (User: ) Description: Poprzednie zamknięcie systemu przy 11:47:21 na ‎2014-‎03-‎17 było nieoczekiwane. Error: (03/17/2014 09:28:00 AM) (Source: nvlddmkm) (User: ) Description: \Device\Video5!051d(2558) Error: (03/16/2014 02:39:20 PM) (Source: EventLog) (User: ) Description: Poprzednie zamknięcie systemu przy 01:15:12 na ‎2014-‎03-‎16 było nieoczekiwane. Microsoft Office Sessions: ========================= Error: (03/25/2014 10:39:59 PM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\ADMIN\Downloads\SoftonicDownloader_dla_directx.exe Error: (03/25/2014 07:46:40 PM) (Source: Steam Client Service)(User: ) Description: Failed to poke open firewall Error: (03/25/2014 06:00:10 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 05:58:30 PM) (Source: Winlogon)(User: ) Description: 0x800700050x00000000 Error: (03/25/2014 04:20:35 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 04:18:54 PM) (Source: Winlogon)(User: ) Description: 0x800700050x00000000 Error: (03/25/2014 10:24:29 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 10:22:47 AM) (Source: Winlogon)(User: ) Description: 0x800700050x00000000 Error: (03/25/2014 08:13:21 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (03/25/2014 08:11:41 AM) (Source: Winlogon)(User: ) Description: 0x800700050x00000000 ==================== Memory info =========================== Percentage of memory in use: 35% Total physical RAM: 4095.23 MB Available physical RAM: 2654.41 MB Total Pagefile: 8188.65 MB Available Pagefile: 6245.47 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:195.21 GB) (Free:116.67 GB) NTFS Drive d: () (Fixed) (Total:736.2 GB) (Free:701.29 GB) NTFS Drive e: (Disk_2) (CDROM) (Total:3.26 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 41BD7DFB) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=195 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=736 GB) - (Type=07 NTFS) ==================== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 26 Mar 2014, 01:12

Przeczytaj uważnie instrukcję uruchomienia programu ComboFix i zastosuj się do niej.
Przeklej raport z działania programu.