Usuwanie resztek po programie yac

**Posty:** 2 · przez **4from3n** 05 Lut 2015, 00:43

witam serdecznie,

mam wielką prośbę pomóżcie mi z tym fixlistem bo to nie moja bajka

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2015 01 Ran by Pan Robótka (administrator) on JACOB on 04-02-2015 22:59:49 Running from C:\Users\Pan Robótka\Downloads Loaded Profiles: Pan Robótka & UpdatusUser (Available profiles: Pan Robótka & UpdatusUser) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Elex do Brasil cenzura!ções Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe (Elex do Brasil cenzura!ções Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Elex do Brasil cenzura!ções Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe (cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe (cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe () C:\Program Files (x86)\ASRock Utility\HDMISwitch\Bin\HDMISwitch.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Phrase Finder) C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe (@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avpui.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation) C:\Windows\System32\vds.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (GARMIN Corp.) C:\Garmin\gStart.exe (Dropbox, Inc.) C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe (Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe (Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe (Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-04-30] (Intel Corporation) HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated) HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [518424 2013-07-18] (Acronis) HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [4936968 2014-10-13] (FNet Co., Ltd.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [EaseUs Tray] => C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe [1629256 2014-07-22] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [TBSmartService] => C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBSmartService.exe [236104 2014-07-22] () HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-06-16] (Oracle Corporation) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe [2089056 2014-11-18] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [7805824 2013-11-22] (Acronis) HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1102192 2013-10-10] (Acronis International GmbH) HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1791856 2014-10-16] (Simply Super Software) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [Fatal1tySTU] => [X] HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [ASRockHDMISwitch] => [X] HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [6886752 2015-01-07] (Binary Fortress Software) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3639568 2014-07-10] (Disc Soft Ltd) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [gStart] => C:\Garmin\gStart.exe [1891416 2008-08-13] (GARMIN Corp.) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [AsrKM] => C:\Program Files (x86)\ASRock Utility\Key Master\AsrKM.exe [1385224 2013-04-30] () HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [Java] => cmd /c cd %APPDATA%\soundmng & soundmng.exe soundmng.txt HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-01-07] (Adobe Systems Incorporated) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: I - I:\setup.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: J - J:\MAXON-Start.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {101b8c29-730c-11e4-96a1-bc5ff4f1122a} - J:\Autorun.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {37591f4d-8f84-11e4-9055-bc5ff4f1122a} - K:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {37591f51-8f84-11e4-9055-bc5ff4f1122a} - K:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {83a59683-7243-11e4-ac83-bc5ff4f1122a} - J:\HTC_Sync_Manager_PC.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {9f8fef1b-52b2-11e4-b327-806e6f6e6963} - H:\Setup.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {a3de088f-6f58-11e4-a272-bc5ff4f1122a} - J:\MAXON-Start.exe HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\MountPoints2: {b8e870d1-6e82-11e4-bd73-bc5ff4f1122a} - I:\HTC_Sync_Manager_PC.exe Startup: C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Officejet 6700.lnk ShortcutTarget: Powiadomienia monitorowania tuszu - HP Officejet 6700.lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => No File ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => No File ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-1058429136-942143012-1941375278-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1 FireFox: ======== FF ProfilePath: C:\Users\Pan Robótka\AppData\Roaming\Mozilla\Firefox\Profiles\e1f9vfjm.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll () FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1216156.dll (Adobe Systems, Inc.) FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=11.11.2 -> C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.11.2 -> C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com () FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF Extension: Garmin Communicator - C:\Users\Pan Robótka\AppData\Roaming\Mozilla\Firefox\Profiles\e1f9vfjm.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2015-01-28] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Ngăn chặn trang web nguy hiểm - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com [2015-02-02] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Bàn phím ảo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2015-02-02] FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Công cụ kiểm tra liên kết của Kaspersky - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com [2015-02-02] Chrome: ======= CHR Profile: C:\Users\Pan Robótka\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Kaspersky Protection) - C:\Users\Pan Robótka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-02-02] CHR Extension: (Google Wallet) - C:\Users\Pan Robótka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-28] CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found] CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO) R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH) R3 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [887056 2014-07-10] (Disc Soft Ltd) R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [3169648 2015-01-07] (Binary Fortress Software) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [37448 2014-07-22] (CHENGDU YIWO Tech Development Co., Ltd) [File not signed] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation) R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [120128 2015-01-26] (Elex do Brasil cenzura!ções Ltda) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-11-17] (Electronic Arts) R2 pfsvc_1.10.0.8; C:\Program Files (x86)\PhraseFinder_1.10.0.8\Service\pfsvc.exe [278608 2015-01-21] (Phrase Finder) R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [965312 2014-10-08] (@ByELDI) [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AsrDrv101; C:\Windows\SysWOW64\Drivers\AsrDrv101.sys [22280 2014-10-13] (ASRock Incorporation) S3 AsrHidFilter; C:\Windows\System32\DRIVERS\AsrHidFilter.sys [20384 2013-04-29] (ASRock Inc.) R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.) R3 dtscsibus; C:\Windows\System32\DRIVERS\dtscsibus.sys [29696 2014-11-18] (Disc Soft Ltd) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-02] (Disc Soft Ltd) R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-26] (Intel Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] () R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [61000 2014-07-22] (CHENGDU YIWO Tech Development Co., Ltd) [File not signed] R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2014-07-22] () [File not signed] R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [18504 2014-07-22] (CHENGDU YIWO Tech Development Co., Ltd) [File not signed] R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [189000 2014-07-22] (CHENGDU YIWO Tech Development Co., Ltd) [File not signed] S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2015-01-20] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2014-10-13] (FNet Co., Ltd.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-30] (Intel Corporation) R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [249000 2015-01-26] (Elex do Brasil cenzura!ções Ltda) S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [45224 2015-01-26] (Elex do Brasil cenzura!ções Ltda) R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2015-01-26] (Elex do Brasil cenzura!ções Ltda) R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [42152 2015-01-26] (Elex do Brasil cenzura!ções Ltda) R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [93352 2015-01-26] (Elex do Brasil cenzura!ções Ltda) R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-01-16] (Elex do Brasil cenzura!ções Ltda) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2015-02-02] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2015-02-02] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO) R1 pfnfd_1_10_0_8; C:\Windows\System32\drivers\pfnfd_1_10_0_8.sys [58232 2015-01-21] (Phrase Finder) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2013-03-12] (Realtek Semiconductor Corporation ) R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2015-01-28] (Acronis International GmbH) R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [198432 2015-01-28] (Acronis International GmbH) R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2015-01-28] (Acronis International GmbH) S3 AsrKbMsHk; \??\C:\Windows\SysWOW64\Drivers\AsrKbMsHk.sys [X] S3 MSICDSetup; \??\H:\CDriver64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-04 22:55 - 2015-02-04 22:55 - 00063646 _____ () C:\Users\Pan Robótka\Downloads\Shortcut.txt 2015-02-04 22:40 - 2015-02-04 22:40 - 00000056 _____ () C:\Windows\setupact.log 2015-02-04 22:40 - 2015-02-04 22:40 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-04 22:39 - 2015-02-04 22:39 - 00000356 _____ () C:\Windows\PFRO.log 2015-02-04 22:36 - 2015-02-04 22:59 - 00027051 _____ () C:\Users\Pan Robótka\Downloads\FRST.txt 2015-02-04 22:36 - 2015-02-04 22:59 - 00000000 ____D () C:\FRST 2015-02-04 22:36 - 2015-02-04 22:55 - 00042417 _____ () C:\Users\Pan Robótka\Downloads\Addition.txt 2015-02-04 22:35 - 2015-02-04 22:35 - 02131968 _____ (Farbar) C:\Users\Pan Robótka\Downloads\FRST64.exe 2015-02-04 22:32 - 2015-02-04 22:43 - 00000284 _____ () C:\Windows\Tasks\SpeedUpMyPC Startup.job 2015-02-04 22:32 - 2015-02-04 22:40 - 00000290 _____ () C:\Windows\Tasks\SpeedUpMyPC Subscription.job 2015-02-04 22:32 - 2015-02-04 22:40 - 00000290 _____ () C:\Windows\Tasks\SpeedUpMyPC Maintenance.job 2015-02-04 22:32 - 2015-02-04 22:32 - 01123328 _____ (Farbar) C:\Users\Pan Robótka\Downloads\FRST.exe 2015-02-04 22:32 - 2015-02-04 22:32 - 00003234 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance 2015-02-04 22:32 - 2015-02-04 22:32 - 00002588 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Subscription 2015-02-04 22:32 - 2015-02-04 22:32 - 00002522 _____ () C:\Windows\System32\Tasks\SpeedUpMyPC Startup 2015-02-04 22:32 - 2015-02-04 22:32 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Uniblue 2015-02-04 22:32 - 2015-02-04 22:32 - 00000000 ____D () C:\Program Files (x86)\Uniblue 2015-02-04 22:27 - 2015-02-04 22:28 - 00456681 _____ () C:\Users\Pan Robótka\Downloads\setup.exe 2015-02-04 21:53 - 2015-02-04 21:53 - 00001902 _____ () C:\Users\Public\Desktop\YAC.lnk 2015-02-04 21:53 - 2015-02-04 21:53 - 00000000 ____D () C:\Windows\system32\log 2015-02-04 21:53 - 2015-02-04 21:53 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Elex-tech 2015-02-04 21:53 - 2015-02-04 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC 2015-02-04 21:53 - 2015-02-04 21:53 - 00000000 ____D () C:\Program Files (x86)\Elex-tech 2015-02-04 21:53 - 2015-01-26 08:39 - 00045224 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2015-02-04 21:53 - 2015-01-16 11:32 - 00052392 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys 2015-02-04 21:52 - 2015-02-04 21:52 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\eCyber 2015-02-04 21:51 - 2015-02-04 21:51 - 01999600 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\Pan Robótka\Downloads\yet_another_cleaner_sk_5585550.exe 2015-02-04 21:46 - 2015-02-04 21:46 - 02885600 _____ (AML SOFTWARE ) C:\Users\Pan Robótka\Downloads\regcleaner.exe 2015-02-04 21:32 - 2015-02-04 21:32 - 04146400 _____ (http://yourfile-downloader.com) C:\Users\Pan Robótka\Downloads\Spyhunter_Keygen_downloader.exe 2015-02-04 21:29 - 2015-02-04 21:29 - 00000000 ____D () C:\Program Files (x86)\PhraseFinder_1.10.0.8 2015-02-04 21:28 - 2015-02-04 21:28 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\WorldofTanks 2015-02-04 21:27 - 2015-02-04 21:27 - 00800320 _____ (Aff) C:\Users\Pan Robótka\Downloads\FlvPlayerSetup.exe 2015-02-04 21:16 - 2015-02-04 21:16 - 00000000 _____ () C:\autoexec.bat 2015-02-04 20:56 - 2015-02-04 20:56 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Simply Super Software 2015-02-04 20:54 - 2015-02-04 21:00 - 00000000 ____D () C:\ProgramData\TEMP 2015-02-04 20:54 - 2015-02-04 20:54 - 00000000 ____D () C:\Users\Pan Robótka\Documents\Simply Super Software 2015-02-04 20:54 - 2015-02-04 20:54 - 00000000 ____D () C:\ProgramData\Licenses 2015-02-04 20:53 - 2015-02-04 20:53 - 00000000 ____D () C:\ProgramData\Simply Super Software 2015-02-04 20:53 - 2015-02-04 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover 2015-02-04 20:53 - 2015-02-04 20:53 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover 2015-02-04 20:51 - 2015-02-04 20:53 - 31390952 _____ (Simply Super Software ) C:\Users\Pan Robótka\Downloads\trjsetup691.exe 2015-02-04 20:48 - 2015-02-04 20:48 - 01222144 _____ () C:\Users\Pan Robótka\Downloads\RSITx64.exe 2015-02-04 20:46 - 2015-02-04 20:46 - 00602112 _____ (OldTimer Tools) C:\Users\Pan Robótka\Downloads\OTL.exe 2015-02-04 20:32 - 2015-02-04 20:32 - 00058498 _____ () C:\Users\Pan Robótka\Documents\cc_20150204_203215.reg 2015-02-04 20:29 - 2015-02-04 20:29 - 00002784 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-02-04 20:29 - 2015-02-04 20:29 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-02-04 20:29 - 2015-02-04 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-02-04 20:29 - 2015-02-04 20:29 - 00000000 ____D () C:\Program Files\CCleaner 2015-02-04 20:28 - 2015-02-04 20:28 - 05325208 _____ (Piriform Ltd) C:\Users\Pan Robótka\Downloads\ccsetup502.exe 2015-02-04 20:06 - 2015-02-04 20:06 - 00000328 _____ () C:\Users\Pan Robótka\Downloads\Diablo.III.BETA.All.Areas.Crack.Fix.Keygen-DIABLO.nfo 2015-02-04 20:05 - 2015-02-04 20:06 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Pan Robótka\Downloads\mbam-setup-2.0.4.1028.exe 2015-02-04 18:11 - 2015-02-04 18:17 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\DivX 2015-02-04 18:03 - 2015-02-04 19:46 - 00000000 ____D () C:\Program Files (x86)\DivX 2015-02-04 17:37 - 2015-02-04 22:02 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\soundmng 2015-02-04 17:37 - 2015-02-04 19:45 - 00000000 ____D () C:\ProgramData\DivX 2015-02-04 17:37 - 2015-02-04 17:37 - 59606599 _____ () C:\Users\Pan Robótka\AppData\Roaming\launcher.exe 2015-02-04 17:37 - 2015-02-04 17:37 - 00933768 _____ (DivX, LLC) C:\Users\Pan Robótka\AppData\Roaming\divx.exe 2015-02-04 09:23 - 2015-02-04 09:23 - 00092672 _____ () C:\Users\Pan Robótka\Downloads\wniosek_p_styczen2015.xls 2015-02-04 09:12 - 2015-02-04 09:12 - 00000000 ____D () C:\Users\Pan Robótka\Documents\DisplayFusion Backups 2015-02-04 09:09 - 2015-02-04 09:10 - 13749560 _____ (Binary Fortress Software ) C:\Users\Pan Robótka\Downloads\DisplayFusionSetup-7.1.exe 2015-02-04 08:00 - 2015-02-04 22:42 - 00002986 _____ () C:\Windows\System32\Tasks\HDMISwitch 2015-02-03 16:27 - 2015-02-03 16:27 - 00112714 _____ () C:\Users\Pan Robótka\Downloads\Diablo 3 - Reaper of Souls 2014 [iso] [Multi9-PL] [ZoniX][Torrenty.org].torrent 2015-02-03 16:27 - 2015-02-03 16:27 - 00112714 _____ () C:\Users\Pan Robótka\Downloads\Diablo 3 - Reaper of Souls 2014 [iso] [Multi9-PL] [ZoniX][Torrenty.org](1).torrent 2015-02-03 13:32 - 2015-02-03 13:33 - 05034080 _____ () C:\Users\Pan Robótka\Downloads\Ygoow.rar 2015-02-03 12:05 - 2015-02-03 12:05 - 16472191 _____ () C:\Users\Pan Robótka\Downloads\DIABLO 3 EMULATOR SERWERA V2 + PATCHER SKIDROW.rar 2015-02-03 11:40 - 2015-02-03 11:49 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\MooExt 2015-02-03 11:39 - 2015-02-03 11:39 - 04267285 _____ () C:\Users\Pan Robótka\Downloads\Diablo.III.BETA.All.Areas.Crack.Fix.Keygen-DIABLO.rar 2015-02-03 07:29 - 2015-02-03 07:29 - 00000000 ____D () C:\Users\Pan Robótka\Documents\Diablo III 2015-02-02 19:08 - 2015-02-02 19:08 - 00001138 _____ () C:\Users\Public\Desktop\Diablo III.lnk 2015-02-02 19:08 - 2015-02-02 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III 2015-02-02 19:04 - 2015-02-03 13:29 - 00000000 ____D () C:\Program Files (x86)\Diablo III 2015-02-02 18:56 - 2015-02-02 18:56 - 00001950 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2015-02-02 18:55 - 2015-02-04 20:34 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\DAEMON Tools Lite 2015-02-02 18:55 - 2015-02-04 17:36 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2015-02-02 18:55 - 2015-02-02 18:56 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2015-02-02 18:55 - 2015-02-02 18:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2015-02-02 18:55 - 2015-02-02 18:55 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2015-02-02 18:53 - 2015-02-02 18:55 - 13429504 _____ (Disc Soft Ltd) C:\Users\Pan Robótka\Downloads\DTLite4491-0356.exe 2015-02-02 18:36 - 2015-02-04 19:32 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Battle.net 2015-02-02 18:36 - 2015-02-02 19:03 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Battle.net 2015-02-02 18:36 - 2015-02-02 18:36 - 00001144 _____ () C:\Users\Public\Desktop\Battle.net.lnk 2015-02-02 18:36 - 2015-02-02 18:36 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Blizzard Entertainment 2015-02-02 18:36 - 2015-02-02 18:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2015-02-02 18:36 - 2015-02-02 18:36 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment 2015-02-02 18:36 - 2015-02-02 18:36 - 00000000 ____D () C:\Program Files (x86)\Battle.net 2015-02-02 18:32 - 2015-02-02 18:32 - 00000000 ____D () C:\ProgramData\Battle.net 2015-02-02 17:48 - 2015-02-02 17:48 - 00262144 _____ () C:\Windows\system32\config\elam 2015-02-02 14:01 - 2015-02-02 14:01 - 05006144 _____ (Adobe Systems Inc.) C:\Users\Pan Robótka\Downloads\Shockwave_Installer_Slim(1).exe 2015-02-02 14:01 - 2015-02-02 14:01 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2015-02-02 14:00 - 2015-02-02 14:00 - 05006144 _____ (Adobe Systems Inc.) C:\Users\Pan Robótka\Downloads\Shockwave_Installer_Slim.exe 2015-02-02 13:21 - 2015-02-04 22:41 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2015-02-02 13:21 - 2015-02-02 13:34 - 00793800 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2015-02-02 13:21 - 2015-02-02 13:34 - 00141320 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2015-02-02 13:21 - 2015-02-02 13:21 - 00001147 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk 2015-02-02 13:21 - 2015-02-02 13:21 - 00000000 ____D () C:\Windows\ELAMBKUP 2015-02-02 13:21 - 2015-02-02 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2015-02-02 13:21 - 2015-02-02 13:21 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2015-02-02 13:21 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys 2015-02-02 13:21 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-02-02 10:21 - 2015-02-02 10:21 - 00002212 _____ () C:\Users\Public\Desktop\Google Earth.lnk 2015-02-02 10:21 - 2015-02-02 10:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth 2015-02-02 10:19 - 2015-02-02 10:19 - 00880784 _____ (Google Inc.) C:\Users\Pan Robótka\Downloads\googleupdatesetup.exe 2015-02-02 10:11 - 2015-02-02 10:11 - 00020676 _____ () C:\Users\Pan Robótka\Downloads\granica_robocza.shp 2015-02-02 09:19 - 2015-02-02 09:19 - 00002152 _____ () C:\Users\Public\Desktop\HP Officejet 6700.lnk 2015-02-02 09:19 - 2015-02-02 09:19 - 00001124 _____ () C:\Users\Public\Desktop\Zakup materiałów eksploatacyjnych - HP Officejet 6700.lnk 2015-02-02 09:19 - 2015-02-02 09:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2015-02-02 09:19 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5C12.dll 2015-02-02 09:18 - 2015-02-02 09:24 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\HP 2015-02-02 09:18 - 2015-02-02 09:18 - 00000057 _____ () C:\ProgramData\Ament.ini 2015-02-02 09:18 - 2015-02-02 09:18 - 00000000 ____D () C:\ProgramData\HP 2015-02-02 09:18 - 2015-02-02 09:18 - 00000000 ____D () C:\Program Files\HP 2015-02-02 09:18 - 2015-02-02 09:18 - 00000000 ____D () C:\Program Files (x86)\HP 2015-02-02 09:12 - 2015-02-02 09:14 - 30414544 _____ () C:\Users\Pan Robótka\Downloads\OJ6700_Basicx64_1315.exe 2015-02-02 08:58 - 2015-02-02 09:03 - 173707376 _____ (Kaspersky Lab) C:\Users\Pan Robótka\Downloads\kav15.0.0.463pl-pl.exe 2015-01-28 17:36 - 2015-01-28 17:36 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Macromedia 2015-01-28 17:35 - 2015-02-04 18:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-28 17:35 - 2015-02-04 09:06 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-01-28 17:35 - 2015-02-04 09:06 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-01-28 17:35 - 2015-01-28 17:35 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Mozilla 2015-01-28 17:34 - 2015-01-28 17:34 - 00243616 _____ () C:\Users\Pan Robótka\Downloads\Firefox Setup Stub 35.0.1.exe 2015-01-28 17:32 - 2015-01-28 17:32 - 18860616 _____ () C:\Users\Pan Robótka\Downloads\CommunicatorPlugin_420 (2).exe 2015-01-28 15:23 - 2015-01-28 15:39 - 00000000 ____D () C:\Users\Pan Robótka\Downloads\[BEST-TORRENTS.NET] The.Hobbit.Battle.Of.The.Five.Armies.2014.PLSUBBED.HQDVDScr.XViD.AC3.K12 [Aress] 2015-01-28 15:22 - 2015-01-28 15:22 - 00012167 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Hobbit- Bitwa Pięciu Armii - The Hobbit- The Battle of the Five Armies (2014) [HQDVDScr.XViD.AC3-K12] [Napisy PL].torrent 2015-01-28 15:14 - 2015-02-04 22:01 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-28 15:14 - 2015-01-29 22:01 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-28 15:14 - 2015-01-29 22:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-28 15:14 - 2015-01-29 22:01 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-28 14:47 - 2015-01-28 14:48 - 19615607 _____ () C:\Users\Pan Robótka\Downloads\STAWY_WYCIECZKA!a.swf 2015-01-28 13:32 - 2015-01-28 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint 2015-01-28 13:31 - 2015-01-28 13:31 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework 2015-01-28 13:07 - 2015-01-28 13:07 - 00003172 _____ () C:\Windows\System32\Tasks\{68A1D947-B5AB-408C-B0D9-1E8238893C0D} 2015-01-28 13:07 - 2015-01-28 13:07 - 00003172 _____ () C:\Windows\System32\Tasks\{158019D5-28E2-4771-82FF-A1B8AA5051F7} 2015-01-28 12:39 - 2015-01-28 12:40 - 00000000 ____D () C:\ProgramData\Acronis 2015-01-28 12:39 - 2015-01-28 12:39 - 01464096 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00269600 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\snapman.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00198432 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib_mounter.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00117024 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys 2015-01-28 12:39 - 2015-01-28 12:39 - 00001205 _____ () C:\Users\Public\Desktop\Acronis True Image 2014.lnk 2015-01-28 12:25 - 2015-01-28 12:32 - 276253520 _____ (Acronis) C:\Users\Pan Robótka\Downloads\atih_installer_hd_s_e.exe 2015-01-28 11:59 - 2015-01-28 11:59 - 02958491 _____ () C:\Users\Pan Robótka\Downloads\KMSpico v 10 Final.rar 2015-01-28 11:59 - 2015-01-28 11:59 - 00003376 _____ () C:\Windows\System32\Tasks\AutoPico Daily Restart 2015-01-28 11:59 - 2015-01-28 11:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico 2015-01-28 11:59 - 2015-01-28 11:59 - 00000000 ____D () C:\Program Files\KMSpico 2015-01-28 11:59 - 2010-12-06 03:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll 2015-01-28 11:56 - 2015-01-28 11:56 - 00586480 _____ () C:\Users\Pan Robótka\Downloads\KMSPico.exe 2015-01-28 11:52 - 2015-01-28 11:52 - 00586496 _____ () C:\Users\Pan Robótka\Downloads\KMSPico_10.0.3.exe 2015-01-28 11:48 - 2015-01-28 11:48 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\OpenOffice 2015-01-28 11:32 - 2015-01-28 11:32 - 00000000 ____D () C:\Users\Pan Robótka\Desktop\OpenOffice 4.1.1 (pl) Installation Files 2015-01-28 11:28 - 2015-01-28 11:32 - 131579802 _____ () C:\Users\Pan Robótka\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_pl.exe 2015-01-28 10:59 - 2015-01-28 11:02 - 97082336 _____ (CHENGDU YIWO Tech Development Co., Ltd ) C:\Users\Pan Robótka\Downloads\tb_free.exe 2015-01-28 10:30 - 2015-02-02 17:49 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\21467 2015-01-28 10:11 - 2015-01-28 10:11 - 00022536 _____ () C:\ProgramData\.windows.sys 2015-01-28 10:08 - 2015-02-04 22:02 - 00000000 ____D () C:\Program Files (x86)\f312f654-8257-4553-bfa5-06004664b3e2 2015-01-28 09:59 - 2015-01-28 09:59 - 02132992 _____ (AGORA S.A.) C:\Users\Pan Robótka\Downloads\Office_Key_Remover_Sciagnij.pl (1).exe 2015-01-28 09:58 - 2015-01-28 09:59 - 02132992 _____ (AGORA S.A.) C:\Users\Pan Robótka\Downloads\Office_Key_Remover_Sciagnij.pl.exe 2015-01-28 09:26 - 2015-01-28 09:48 - 631057181 _____ () C:\Users\Pan Robótka\Downloads\Microsoft.Office.2010.PL.rar 2015-01-28 09:18 - 2015-01-28 09:18 - 00025179 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Microsoft Office 2010 Professional Plus 32bit 64bit Aktywator [PL][rar].torrent 2015-01-27 22:23 - 2015-01-27 22:24 - 00103717 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Mathworks.Matlab.R2011a.UNIX.ISO-TBE [Eng].torrent 2015-01-27 21:58 - 2015-01-27 21:58 - 00081408 _____ () C:\Users\Pan Robótka\Downloads\Wyniki_Rzezniczek_2004_v4.xls 2015-01-27 11:07 - 2015-01-27 11:07 - 00001258 _____ () C:\Users\UpdatusUser\Desktop\DiskInternals Research.lnk 2015-01-27 11:07 - 2015-01-27 11:07 - 00001258 _____ () C:\Users\Pan Robótka\Desktop\DiskInternals Research.lnk 2015-01-27 11:07 - 2015-01-27 11:07 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals 2015-01-27 11:07 - 2015-01-27 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskInternals 2015-01-27 11:07 - 2015-01-27 11:07 - 00000000 ____D () C:\Program Files (x86)\DiskInternals 2015-01-27 11:06 - 2015-01-27 11:07 - 20730777 _____ (DiskInternals Research) C:\Users\Pan Robótka\Downloads\Linux_Reader.exe 2015-01-27 10:06 - 2015-01-27 10:06 - 00001384 _____ () C:\Users\Public\Desktop\EaseUS Partition Master 10.2.lnk 2015-01-27 10:06 - 2015-01-27 10:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 10.2 2015-01-27 10:06 - 2014-11-18 14:46 - 03384928 _____ () C:\Windows\system32\BootMan.exe 2015-01-27 10:06 - 2014-11-18 14:46 - 00021088 _____ () C:\Windows\SysWOW64\EuEpmGdi.dll 2015-01-27 10:06 - 2014-11-18 14:46 - 00017504 _____ () C:\Windows\system32\EuEpmGdi.dll 2015-01-27 10:05 - 2014-11-18 14:46 - 02502240 _____ () C:\Windows\SysWOW64\BootMan.exe 2015-01-27 10:05 - 2014-11-18 14:39 - 00018528 _____ () C:\Windows\system32\epmntdrv.sys 2015-01-27 10:05 - 2014-11-18 14:39 - 00014944 _____ () C:\Windows\SysWOW64\epmntdrv.sys 2015-01-27 10:05 - 2014-11-18 14:39 - 00010848 _____ () C:\Windows\system32\EuGdiDrv.sys 2015-01-27 10:05 - 2014-11-18 14:39 - 00010208 _____ () C:\Windows\SysWOW64\EuGdiDrv.sys 2015-01-27 10:05 - 2014-11-18 14:38 - 00101984 _____ () C:\Windows\system32\setupempdrvx64.exe 2015-01-27 10:05 - 2014-11-18 14:38 - 00088160 _____ () C:\Windows\SysWOW64\setupempdrv03.exe 2015-01-27 10:04 - 2015-01-27 10:05 - 30603720 _____ (EaseUS ) C:\Users\Pan Robótka\Downloads\epm.exe 2015-01-22 08:26 - 2015-02-04 22:42 - 00000000 ___RD () C:\Users\Pan Robótka\Dropbox 2015-01-22 08:26 - 2015-01-22 08:26 - 00001140 _____ () C:\Users\Pan Robótka\Desktop\Dropbox.lnk 2015-01-22 08:23 - 2015-01-22 08:23 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-01-22 08:21 - 2015-02-04 22:42 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Dropbox 2015-01-21 20:42 - 2015-01-21 20:42 - 00058232 _____ (Phrase Finder) C:\Windows\system32\Drivers\pfnfd_1_10_0_8.sys 2015-01-21 17:43 - 2015-01-21 17:43 - 00015104 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] The November Man -2014- [BRRip XviD AC3-SaM] [ENG].torrent 2015-01-20 10:03 - 2015-01-28 17:35 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Mozilla 2015-01-20 10:03 - 2015-01-20 10:03 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Thunderbird 2015-01-20 10:03 - 2015-01-20 10:03 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Thunderbird 2015-01-20 10:01 - 2015-02-04 18:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2015-01-20 10:01 - 2015-01-28 17:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-01-20 10:01 - 2015-01-20 10:01 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk 2015-01-20 10:01 - 2015-01-20 10:01 - 00002086 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2015-01-20 10:01 - 2015-01-20 10:01 - 00000000 ____D () C:\ProgramData\Mozilla 2015-01-19 22:18 - 2015-01-19 22:18 - 00054466 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Jo Nesbo - Czerwone Gardło - audiobook [PL][mp3@80].torrent 2015-01-15 22:30 - 2015-01-15 22:30 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\office6 2015-01-15 22:30 - 2015-01-15 22:30 - 00000000 ____D () C:\ProgramData\Kingsoft 2015-01-15 22:29 - 2015-01-28 13:08 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\kingsoft 2015-01-15 22:29 - 2015-01-28 13:08 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Kingsoft 2015-01-15 22:26 - 2015-01-15 22:29 - 63780912 _____ (Kingsoft Corp. Ltd.) C:\Users\Pan Robótka\Downloads\wps_office_pc.exe 2015-01-15 22:25 - 2015-01-15 22:09 - 18883257 _____ () C:\Users\Pan Robótka\Desktop\dyplomy 2014 BGPK NOWYz nazwiskami brak grafiki tła.pptx 2015-01-15 22:25 - 2015-01-15 22:08 - 00840951 _____ () C:\Users\Pan Robótka\Desktop\dyplomy 2014 BGPK NOWYz nazwiskami brak grafii7utyrujhgfjhrfdhki tła.pptx 2015-01-15 21:49 - 2015-01-15 21:49 - 01585152 _____ () C:\Users\Pan Robótka\Documents\Bez nazwy-3.indd 2015-01-15 12:19 - 2015-01-15 12:19 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\chc 2015-01-15 11:29 - 2015-01-15 11:29 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-01-15 11:29 - 2015-01-15 11:29 - 00001031 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk 2015-01-15 11:28 - 2015-01-15 11:43 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2015-01-15 10:32 - 2015-01-15 10:32 - 01581174 _____ () C:\Users\Pan Robótka\Downloads\Green-Leaf-Vector.ai 2015-01-15 10:10 - 2015-01-15 10:10 - 01114613 _____ () C:\Users\Pan Robótka\Downloads\golden-floral-wedding-invitation-template.zip 2015-01-14 20:14 - 2015-01-14 20:14 - 02815344 _____ () C:\Users\Pan Robótka\Downloads\SunburstFloralBackground (1).zip 2015-01-14 15:35 - 2015-01-14 15:35 - 00001030 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CC (64bit).lnk 2015-01-14 15:31 - 2015-01-15 08:32 - 01073152 _____ () C:\Users\Pan Robótka\Documents\zaproszenie1.indd 2015-01-14 15:03 - 2015-01-14 15:03 - 00000000 ____D () C:\Users\Pan Robótka\.android 2015-01-14 15:01 - 2015-01-14 15:01 - 02530174 _____ () C:\Users\Pan Robótka\Downloads\floral_ornaments_by_idealhut.zip 2015-01-14 14:57 - 2015-01-14 14:57 - 00001097 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Content Viewer.lnk 2015-01-14 14:54 - 2015-01-14 14:54 - 00514632 _____ () C:\Users\Pan Robótka\Downloads\AbstractTreeVintageVector.zip 2015-01-14 14:52 - 2015-01-14 14:53 - 02815344 _____ () C:\Users\Pan Robótka\Downloads\SunburstFloralBackground.zip 2015-01-14 14:49 - 2015-01-14 14:49 - 00001028 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2014.lnk 2015-01-14 14:27 - 2015-01-14 14:27 - 00610304 _____ () C:\Users\Pan Robótka\Documents\zaproszenie.indd 2015-01-14 14:21 - 2015-01-14 14:21 - 00000000 ____D () C:\Users\Pan Robótka\Documents\Adobe 2015-01-14 12:12 - 2015-01-15 11:53 - 00000000 ____D () C:\Users\Pan Robótka\Desktop\zaproszenie 2015-01-14 08:25 - 2015-01-15 10:10 - 00000034 _____ () C:\Users\Pan Robótka\AppData\Roaming\AdobeWLCMCache.dat 2015-01-14 08:25 - 2015-01-14 08:25 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\PDAppFlex 2015-01-14 08:24 - 2015-01-14 08:24 - 01402903 _____ () C:\Users\Pan Robótka\Downloads\creative-trees.zip 2015-01-14 00:19 - 2015-01-14 00:19 - 00001483 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CC 2014.lnk 2015-01-13 23:16 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-13 23:16 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-13 23:16 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-01-13 23:16 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-13 23:16 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-01-13 23:16 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-13 23:16 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-01-13 23:16 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-01-13 23:15 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-01-13 23:15 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-01-13 23:15 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-01-13 23:15 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-01-13 23:15 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-01-13 23:15 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-01-13 23:15 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-01-13 22:44 - 2015-01-13 22:44 - 00014308 _____ () C:\Users\Pan Robótka\Downloads\pencilpixels_bentobox_marker.zip 2015-01-13 22:44 - 2015-01-13 22:44 - 00000000 ___RD () C:\Users\Pan Robótka\Creative Cloud Files 2015-01-13 22:41 - 2015-01-13 22:41 - 00001309 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2015-01-13 22:41 - 2015-01-13 22:41 - 00001297 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk 2015-01-13 22:39 - 2015-01-13 22:39 - 03934394 _____ () C:\Users\Pan Robótka\Downloads\vector_tree_pack_by_onelttle1-d37ao54.abr 2015-01-13 22:36 - 2015-01-13 22:36 - 00672432 _____ (Adobe Systems Incorporated) C:\Users\Pan Robótka\Downloads\CreativeCloudSet-Up (1).exe 2015-01-13 22:27 - 2015-01-13 22:27 - 00672432 _____ (Adobe Systems Incorporated) C:\Users\Pan Robótka\Downloads\CreativeCloudSet-Up.exe 2015-01-13 22:26 - 2015-01-13 22:26 - 00000000 ____D () C:\Users\Public\Documents\Adobe 2015-01-13 22:26 - 2015-01-13 22:26 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2015-01-13 19:46 - 2015-01-14 12:28 - 00000000 ____D () C:\Users\Pan Robótka\Desktop\plakat 2015-01-13 17:58 - 2015-01-13 17:58 - 00003292 _____ () C:\Windows\System32\Tasks\{DAE11137-2726-4868-A285-5FDFAC00DCBE} 2015-01-13 17:49 - 2015-01-13 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK 2015-01-13 17:48 - 2014-04-08 09:42 - 00882792 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtl8192cu.sys 2015-01-13 17:48 - 2014-04-08 09:42 - 00007534 _____ () C:\Windows\system32\net8192cu.cat 2015-01-13 17:48 - 2013-03-12 20:49 - 00926824 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192cu.sys 2015-01-13 17:47 - 2015-01-13 17:47 - 00000000 ____D () C:\ProgramData\TP-LINK 2015-01-13 17:47 - 2015-01-13 17:39 - 10124457 _____ () C:\Users\Pan Robótka\Desktop\TL-WN822N_V3_130702.zip 2015-01-13 17:47 - 2015-01-13 17:38 - 26242523 _____ () C:\Users\Pan Robótka\Desktop\TL-WN822N_V3_Utility_140918.zip 2015-01-10 12:40 - 2015-02-04 20:34 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\TS3Client 2015-01-10 12:39 - 2015-01-10 12:39 - 00001162 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2015-01-10 12:39 - 2015-01-10 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2015-01-10 12:39 - 2015-01-10 12:39 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2015-01-10 12:38 - 2015-01-10 12:38 - 28115400 _____ (TeamSpeak Systems GmbH) C:\Users\Pan Robótka\Downloads\TeamSpeak3-Client-win32-3.0.16.exe 2015-01-10 11:07 - 2015-01-10 11:07 - 06272352 _____ () C:\Users\Pan Robótka\Downloads\XVM FULL 5.5.1.1 conf by DjVirusPL 0.9.5 v5.exe 2015-01-10 11:07 - 2015-01-10 11:07 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XVM FULL 5.5.1.1 conf by DjVirusPL 0.9.5 v5 2015-01-10 10:49 - 2015-01-10 10:54 - 419097524 _____ () C:\Users\Pan Robótka\Downloads\ModPack by DjVirusPL FULL 0.9.5 v2.exe 2015-01-09 08:27 - 2015-01-09 08:27 - 00000000 ____D () C:\ProgramData\Sun 2015-01-09 08:27 - 2015-01-09 08:27 - 00000000 ____D () C:\ProgramData\Oracle 2015-01-09 08:27 - 2015-01-09 08:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-01-09 08:27 - 2015-01-09 08:26 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2015-01-09 08:27 - 2015-01-09 08:26 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2015-01-09 08:27 - 2015-01-09 08:26 - 00176040 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2015-01-09 08:27 - 2015-01-09 08:26 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2015-01-09 08:26 - 2015-01-09 08:26 - 00000000 ____D () C:\Program Files (x86)\Java 2015-01-09 08:25 - 2015-01-09 08:26 - 31150504 _____ (Oracle Corporation) C:\Users\Pan Robótka\Desktop\jre-8u11-windows-i586.exe 2015-01-08 09:08 - 2015-01-08 09:08 - 00000000 ____D () C:\ProgramData\Steam 2015-01-08 09:08 - 2015-01-08 09:08 - 00000000 ____D () C:\ProgramData\Orbit 2015-01-08 08:30 - 2015-01-08 08:30 - 00001592 _____ () C:\Users\Pan Robótka\Desktop\Far Cry 4.lnk 2015-01-08 08:30 - 2015-01-08 08:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 4 2015-01-07 19:00 - 2015-01-07 19:00 - 00018130 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Głupi i głupszy bardziej - Dumb and Dumber To -2014- [720p.HDRip.x264.AAC][ENG][Napisy PL][AT-TEAM].torrent 2015-01-07 18:25 - 2015-01-07 18:25 - 00065384 _____ () C:\Users\Pan Robótka\Desktop\Sniper.Legacy.2014.DVDRip.XviD.MP3-RARBG-eng.srt 2015-01-07 18:25 - 2015-01-07 18:25 - 00028203 _____ () C:\Users\Pan Robótka\Downloads\sniper.legacy.(2014).pol.1cd.(5851578).zip 2015-01-07 14:56 - 2015-01-07 14:56 - 00071378 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Far Cry 4 -2014- [MULTI-PL] [REPACK R.G. Revenants ] [EXE].torrent 2015-01-07 13:10 - 2015-01-07 18:17 - 00000000 ____D () C:\Users\Pan Robótka\Downloads\American.Sniper.2014.DVDSCR.X264-PLAYNOW 2015-01-07 13:08 - 2015-01-07 13:08 - 00077468 _____ () C:\Users\Pan Robótka\Downloads\[www.tnt24.info] Snajper - American Sniper -2014- [DVDSCR] [x264-PLAYNOW] [ENG].torrent 2015-01-06 15:30 - 2015-01-06 15:30 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Wargaming.net 2015-01-06 12:15 - 2015-01-06 12:15 - 00086606 _____ () C:\Users\Pan Robótka\Downloads\The.Judge.2014.720p.WEB-D.1GB.MkvCage.com.txt 2015-01-06 12:14 - 2015-01-06 12:15 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\NapiProjekt 2015-01-06 12:14 - 2015-01-06 12:14 - 00001040 _____ () C:\Users\Pan Robótka\Desktop\NapiProjekt.lnk 2015-01-06 12:14 - 2015-01-06 12:14 - 00000000 ____D () C:\Program Files (x86)\NapiProjekt 2015-01-06 12:12 - 2015-01-06 12:13 - 09989013 _____ ( ) C:\Users\Pan Robótka\Downloads\NapiProjektBuild_2.2.0.2399(dobreprogramy.pl).exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-04 22:56 - 2009-07-14 05:45 - 00023904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-04 22:56 - 2009-07-14 05:45 - 00023904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-04 22:45 - 2014-10-13 09:30 - 02050903 _____ () C:\Windows\WindowsUpdate.log 2015-02-04 22:44 - 2014-10-13 12:40 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Adobe 2015-02-04 22:43 - 2014-11-20 21:21 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\CrashDumps 2015-02-04 22:40 - 2014-11-17 18:58 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-04 22:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-04 22:39 - 2014-10-13 10:46 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-04 22:36 - 2014-11-17 20:10 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\DisplayFusion 2015-02-04 22:04 - 2014-12-05 20:56 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\vlc 2015-02-04 22:04 - 2014-10-13 10:25 - 00000000 ____D () C:\Windows\Panther 2015-02-04 22:03 - 2014-11-17 18:58 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-04 22:02 - 2014-10-13 09:59 - 00000000 ____D () C:\Program Files (x86)\Adobe 2015-02-04 21:15 - 2014-10-13 09:37 - 00000000 ____D () C:\Users\Pan Robótka 2015-02-04 21:08 - 2014-11-23 18:40 - 00000000 ____D () C:\AdwCleaner 2015-02-04 20:44 - 2014-11-17 23:40 - 00000000 ____D () C:\Program Files (x86)\HTC 2015-02-04 20:34 - 2014-12-10 13:34 - 00000000 ____D () C:\Windows\Minidump 2015-02-04 20:34 - 2014-11-17 21:53 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\uTorrent 2015-02-04 19:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-02-04 09:12 - 2014-11-17 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DisplayFusion 2015-02-04 09:12 - 2014-11-17 20:03 - 00000000 ____D () C:\Program Files (x86)\DisplayFusion 2015-02-04 09:06 - 2014-11-17 18:59 - 00002261 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-02-04 09:06 - 2014-10-13 09:38 - 00001009 _____ () C:\Users\Pan Robótka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-03 11:53 - 2014-11-20 23:14 - 00378071 _____ () C:\Users\Pan Robótka\Downloads\download.zip 2015-02-02 18:59 - 2011-02-04 18:20 - 00738768 _____ () C:\Windows\system32\perfh015.dat 2015-02-02 18:59 - 2011-02-04 18:20 - 00154954 _____ () C:\Windows\system32\perfc015.dat 2015-02-02 18:59 - 2009-07-14 06:13 - 01665978 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-02 13:40 - 2014-11-20 20:23 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk 2015-02-02 13:40 - 2014-11-20 20:23 - 00000000 ____D () C:\ProgramData\Skype 2015-02-02 13:40 - 2014-11-20 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-02-02 10:21 - 2014-11-17 18:58 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Google 2015-02-02 10:21 - 2014-11-17 18:58 - 00000000 ____D () C:\Program Files (x86)\Google 2015-02-01 00:00 - 2014-11-20 20:23 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Skype 2015-01-28 17:39 - 2009-07-14 05:45 - 04958536 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-01-28 13:32 - 2014-11-17 20:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2015-01-28 13:32 - 2014-11-17 20:42 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-01-28 13:32 - 2014-10-13 09:51 - 00084048 _____ () C:\Users\Pan Robótka\AppData\Local\GDIPFONTCACHEV1.DAT 2015-01-28 13:00 - 2014-11-17 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-28 12:39 - 2014-10-13 13:34 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys 2015-01-28 12:39 - 2014-10-13 13:34 - 00116000 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys 2015-01-28 12:39 - 2014-10-13 13:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis 2015-01-28 12:15 - 2014-11-17 20:42 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Local\Microsoft Help 2015-01-27 10:05 - 2014-10-13 13:56 - 00000000 ____D () C:\Program Files (x86)\EaseUS 2015-01-20 13:34 - 2014-10-13 13:19 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\MAXON 2015-01-20 13:33 - 2014-10-13 13:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAXON 2015-01-20 13:25 - 2014-10-13 13:23 - 00000000 ____D () C:\ProgramData\Package Cache 2015-01-20 13:22 - 2014-10-13 13:22 - 00000000 ____D () C:\Program Files\MAXON 2015-01-20 08:47 - 2014-10-13 13:33 - 00032320 _____ (FNet Co., Ltd.) C:\Windows\system32\Drivers\FNETTBOH_305.SYS 2015-01-14 19:36 - 2014-10-13 09:59 - 00000000 ____D () C:\Users\Pan Robótka\AppData\Roaming\Adobe 2015-01-14 15:34 - 2014-10-13 12:48 - 00000000 ____D () C:\Program Files\Adobe 2015-01-14 15:34 - 2014-10-13 12:43 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-01-14 15:02 - 2014-10-13 12:49 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe 2015-01-13 22:41 - 2014-10-13 09:59 - 00000000 ____D () C:\ProgramData\Adobe 2015-01-13 17:59 - 2014-11-17 23:40 - 00000000 ____D () C:\Temp 2015-01-13 17:48 - 2014-10-13 09:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-10 22:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2015-01-08 09:08 - 2014-11-17 21:58 - 00000000 ____D () C:\Users\Pan Robótka\Documents\My Games 2015-01-08 08:30 - 2014-11-17 22:04 - 00000000 ____D () C:\Windows\SysWOW64\directx 2015-01-06 04:36 - 2010-11-21 04:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Files in the root of some directories ======= 2015-01-14 08:25 - 2015-01-15 10:10 - 0000034 _____ () C:\Users\Pan Robótka\AppData\Roaming\AdobeWLCMCache.dat 2015-02-04 17:37 - 2015-02-04 17:37 - 0933768 _____ (DivX, LLC) C:\Users\Pan Robótka\AppData\Roaming\divx.exe 2015-02-04 17:37 - 2015-02-04 17:37 - 59606599 _____ () C:\Users\Pan Robótka\AppData\Roaming\launcher.exe 2014-10-13 09:58 - 2014-10-13 09:58 - 0000003 _____ () C:\Users\Pan Robótka\AppData\Local\user_data.ini 2015-01-28 10:11 - 2015-01-28 10:11 - 0022536 _____ () C:\ProgramData\.windows.sys 2015-02-02 09:18 - 2015-02-02 09:18 - 0000057 _____ () C:\ProgramData\Ament.ini Some content of TEMP: ==================== C:\Users\Pan Robótka\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1g9n4j.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-04 16:26 ==================== End Of Log ============================

to jest log z frst

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2015 01 Ran by Pan Robótka at 2015-02-04 23:41:27 Running from C:\Users\Pan Robótka\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.) Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated) Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden Acronis True Image 2014 (HKLM-x32\...\{5858B1D6-8056-471C-8A29-6A1765BBC0BE}) (Version: 17.0.4515 - Acronis) Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated) Adobe Bridge CC (64 Bit) (HKLM-x32\...\{359F8007-6486-429C-A8C5-D67F6897C88C}) (Version: 6.0 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.1.1 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.1.0.070 - Adobe Systems Incorporated) Adobe InDesign CS6 (HKLM-x32\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.0 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.) Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated) Aktualizacje NVIDIA 4.11.9 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 4.11.9 - NVIDIA Corporation) ASRock HDMI Switch v1.0.10 (HKLM-x32\...\ASRock HDMI Switch_is1) (Version: 1.0.10 - ) ASRock Key Master v1.0.1 (HKLM-x32\...\ASRock Key Master_is1) (Version: v1.0.1 - ) ASRock SmartConnect v1.0.6 (HKLM\...\ASRock SmartConnect_is1) (Version: - ASRock Inc.) ASRock XFast RAM v2.0.28 (HKLM\...\ASRock XFast RAM_is1) (Version: - ASRock Inc.) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform) CINEMA 4D 16.011 (HKLM\...\MAXON8B6F11F9) (Version: 16.011 - MAXON Computer GmbH) CINEMA 4D Demo 15.057 (HKLM\...\MAXONE03ECA7E) (Version: 15.057 - MAXON Computer GmbH) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 2.4.0.0280 - Disc Soft Ltd) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) DiskInternals Linux Reader (HKLM-x32\...\DiskInternals Linux Reader) (Version: 1.9.2.0 - DiskInternals Research) DisplayFusion 7.1 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 7.1.0.0 - Binary Fortress Software) Dropbox (HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Dropbox) (Version: 3.0.5 - Dropbox, Inc.) EaseUS Partition Master 10.2 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) EaseUS Todo Backup 7.0 Beta (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 7.0 - CHENGDU YIWO Tech Development Co., Ltd) Elasto Mania (HKLM-x32\...\Elasto Mania) (Version: - ) Far Cry 4 version 1.6.0 (HKLM-x32\...\Far Cry 4_is1) (Version: 1.6.0 - ) Farming Simulator 15 (HKLM-x32\...\Farming Simulator 15_is1) (Version: - ) F-Stream Tuning v1.0.31 (HKLM-x32\...\F-Stream Tuning_is1) (Version: 1.0.31 - ) Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries) Garmin Training Center (HKLM-x32\...\{2A03B9F8-BE6D-43C6-A16A-B9998A194AF0}) (Version: 3.4.5 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.94 - Google Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden HP Officejet 6700 — podstawowe oprogramowanie urządzenia (HKLM\...\{DEC118EF-542C-4CCE-B32D-1B14B06CAD64}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{AA67D612-0BE5-44D6-9A91-592958F754A1}) (Version: 13.0.198 - Intel Corporation) Intel(R) Network Connections 18.2.63.0 (HKLM\...\PROSetDX) (Version: 18.2.63.0 - Intel) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation) Java 8 Update 11 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218011FF}) (Version: 8.0.110 - Oracle Corporation) Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab) Kaspersky Anti-Virus (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden K-Lite Codec Pack 10.8.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.5 - ) KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - ) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Mozilla Firefox 35.0.1 (x86 pl) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 pl)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla) Mozilla Thunderbird 31.4.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 31.4.0 (x86 pl)) (Version: 31.4.0 - Mozilla) NapiProjekt (2.2.0.2399) (HKLM-x32\...\NapiProjekt_is1) (Version: - ) NVIDIA Oprogramowanie systemu PhysX 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation) NVIDIA Sterownik 3D Vision 320.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.63 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.24.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.24.2 - NVIDIA Corporation) NVIDIA Sterownik graficzny 320.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.63 - NVIDIA Corporation) NVIDIA Sterownik kontrolera 3D Vision 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.5.1.571 - Electronic Arts, Inc.) Panel sterowania NVIDIA 320.63 (Version: 320.63 - NVIDIA Corporation) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Phrase Finder 1.10.0.8 (HKLM-x32\...\PhraseFinder_1.10.0.8) (Version: 1.10.0.8 - Phrase Finder) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.) Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.) SportTracks 3.1 (HKLM-x32\...\{99895EF0-B290-4B21-B1FE-FB00E1B5D195}) (Version: 3.1.4814 - Zone Five Software) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer) TP-LINK TL-WN821N(C)_TL-WN822N_TL-WN823N Driver (HKLM-x32\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK) Trojan Remover 6.9.1 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.1 - Simply Super Software) Update Service YourFileDownloader (HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Update Service YourFileDownloader) (Version: 2.15.06 - http://www.yourfile-downloader.com.com) <==== ATTENTION VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin) WinRAR 5.11 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) XFast LAN v6.61 (HKLM\...\XFast LAN) (Version: 6.61 - cFos Software GmbH, Bonn) XFastUSB (HKLM-x32\...\XFastUSB) (Version: 3.02.31 - ASRock Inc.) XVM FULL 5.5.1.1 conf by DjVirusPL 0.9.5 v5 (HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\XVM FULL 5.5.1.1 conf by DjVirusPL 0.9.5 v5) (Version: - ) YAC(Yet Another Cleaner!) (HKLM-x32\...\iSafe) (Version: - ELEX DO BRASIL cenzura!ÇÕES LTDA) <==== ATTENTION ZBrush 4R6 (HKLM-x32\...\ZBrush 4R6 4R6) (Version: 4R6 - Pixologic) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1058429136-942143012-1941375278-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 04-02-2015 20:43:43 Removed IPTInstaller 04-02-2015 22:31:39 Uniblue SpeedUpMyPC installation ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2015-02-03 12:26 - 00000893 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0088B087-56C8-4851-A353-F47B13B764E1} - System32\Tasks\{158019D5-28E2-4771-82FF-A1B8AA5051F7} => pcalua.exe -a "C:\Users\Pan Robótka\AppData\Local\Kingsoft\WPS Office\9.1.0.4759\utility\uninst.exe" Task: {1A5BA9B2-CD2B-45D4-BB53-F4EAEE8DD5D8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd) Task: {3EACF237-7188-4CCE-B3C5-427FA44E3AE1} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION Task: {46E87186-56C6-47A9-B958-D1AFB996A7DC} - System32\Tasks\HDMISwitch => C:\Program Files (x86)\ASRock Utility\HDMISwitch\Bin\HDMISwitch.exe [2013-04-30] () <==== ATTENTION Task: {4D4144E9-2AB8-43D8-9F00-BC74B1DC88D2} - System32\Tasks\{68A1D947-B5AB-408C-B0D9-1E8238893C0D} => pcalua.exe -a "C:\Users\Pan Robótka\AppData\Local\Kingsoft\WPS Office\9.1.0.4759\utility\uninst.exe" Task: {5C545789-F3BC-44EE-A346-744EA66F0B9F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-29] (Adobe Systems Incorporated) Task: {70ADAF91-C7BA-4E74-B86F-71FC603ED96A} - System32\Tasks\AdobeAAMUpdater-1.0-Jacob-Pan Robótka => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated) Task: {7BAF08B9-6467-4A40-A156-5B6D29F29E88} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-17] (Google Inc.) Task: {7FCFF776-85E4-4634-9C82-99846E4D0088} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-17] (Google Inc.) Task: {AFAF1589-4D8E-46C7-BF2C-7E4ACDB3626C} - \Update Service YourFileDownloader No Task File <==== ATTENTION Task: {C0C8B3DF-D6CE-4CE3-87B2-F37881D3EDFF} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION Task: {CF368EC2-AEFF-4A36-B5A7-26EEC32B6698} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2014-10-08] (@ByELDI) Task: {E1212C0F-374E-40C4-B01B-15FA089117A0} - System32\Tasks\SpeedUpMyPC Subscription => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION Task: {F229152E-3D96-4DB7-9951-D6177220E402} - System32\Tasks\{DAE11137-2726-4868-A285-5FDFAC00DCBE} => pcalua.exe -a "C:\Users\Pan Robótka\Desktop\Desktop\TL-WN822N_V3_Utility_140918\Setup.exe" -d "C:\Users\Pan Robótka\Desktop\Desktop\TL-WN822N_V3_Utility_140918" Task: {FBA4C75D-C1B7-466A-B21F-D323D88E7137} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION Task: C:\Windows\Tasks\SpeedUpMyPC Subscription.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============== 2014-10-13 10:46 - 2013-07-10 13:05 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-12-19 15:57 - 2014-12-19 15:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2014-10-13 09:57 - 2013-04-30 21:49 - 01841416 _____ () C:\Program Files (x86)\ASRock Utility\HDMISwitch\Bin\HDMISwitch.exe 2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1045.dll 2014-12-19 15:57 - 2014-12-19 15:57 - 05979808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2011-03-17 00:07 - 2011-03-17 00:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2015-02-04 21:53 - 2015-01-26 08:33 - 00065696 _____ () C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll 2015-02-04 21:53 - 2015-01-26 08:33 - 00185672 _____ () C:\Program Files (x86)\Elex-tech\YAC\libpng.dll 2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\kpcengine.2.3.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00098888 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00031304 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckTool.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 01296456 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00061000 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00017480 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00088648 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00106056 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00075848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00030280 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00068168 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00158280 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00276040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00072264 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00139848 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00037448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00293960 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSize.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00580168 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00468040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00192584 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00255560 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00145992 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00076872 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00207944 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00024648 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00020552 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00032328 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00034888 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00064072 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00022600 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00115784 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00193096 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00135752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00037960 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00135752 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00020040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00043080 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll 2014-10-13 13:56 - 2014-07-22 09:43 - 00096840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBFireWall.dll 2015-01-22 08:23 - 2015-01-08 21:44 - 00750080 _____ () C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-02-04 22:42 - 2015-02-04 22:42 - 00043008 _____ () c:\Users\Pan Robótka\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1g9n4j.dll 2015-01-22 08:23 - 2015-01-08 21:44 - 00047616 _____ () C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\libEGL.dll 2015-01-22 08:23 - 2015-01-08 21:44 - 00863744 _____ () C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2015-01-22 08:23 - 2015-01-08 21:44 - 00200704 _____ () C:\Users\Pan Robótka\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll 2013-11-22 13:03 - 2013-11-22 13:03 - 00036672 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll 2013-11-22 13:03 - 2013-11-22 13:03 - 00028024 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll 2013-11-22 13:06 - 2013-11-22 13:06 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll 2015-01-07 21:27 - 2015-01-07 21:27 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll 2015-01-28 17:35 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-04-20 01:42 - 2014-04-20 01:42 - 00468672 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll 2015-01-28 15:13 - 2015-01-28 15:13 - 16844976 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Registry Areas ===================== (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1058429136-942143012-1941375278-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Pan Robótka\AppData\Local\DisplayFusion\Wallpaper_2 ATTENTION: Missing Desktop Wallpaper Registry entry. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-1058429136-942143012-1941375278-500 - Administrator - Disabled) Gość (S-1-5-21-1058429136-942143012-1941375278-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1058429136-942143012-1941375278-1003 - Limited - Enabled) Pan Robótka (S-1-5-21-1058429136-942143012-1941375278-1000 - Administrator - Enabled) => C:\Users\Pan Robótka UpdatusUser (S-1-5-21-1058429136-942143012-1941375278-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Kontroler PCI Simple Communications Description: Kontroler PCI Simple Communications Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Kontroler Uniwersalnej magistrali szeregowej (USB) Description: Kontroler Uniwersalnej magistrali szeregowej (USB) Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (02/04/2015 11:32:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: speedupmypc.exe, wersja: 6.0.6.1, sygnatura czasowa: 0x49180193 Nazwa modułu powodującego błąd: libcef.dll, wersja: 1.1453.1273.0, sygnatura czasowa: 0x51afcc89 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x000ed4d0 Identyfikator procesu powodującego błąd: 0x1c0c Godzina uruchomienia aplikacji powodującej błąd: 0xspeedupmypc.exe0 Ścieżka aplikacji powodującej błąd: speedupmypc.exe1 Ścieżka modułu powodującego błąd: speedupmypc.exe2 Identyfikator raportu: speedupmypc.exe3 Error: (02/04/2015 10:41:34 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/04/2015 10:40:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: speedupmypc.exe, wersja: 6.0.6.1, sygnatura czasowa: 0x49180193 Nazwa modułu powodującego błąd: libcef.dll, wersja: 1.1453.1273.0, sygnatura czasowa: 0x51afcc89 Kod wyjątku: 0x80000003 Przesunięcie błędu: 0x000ed4d0 Identyfikator procesu powodującego błąd: 0xb50 Godzina uruchomienia aplikacji powodującej błąd: 0xspeedupmypc.exe0 Ścieżka aplikacji powodującej błąd: speedupmypc.exe1 Ścieżka modułu powodującego błąd: speedupmypc.exe2 Identyfikator raportu: speedupmypc.exe3 Error: (02/04/2015 09:43:46 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/04/2015 09:33:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nazwa aplikacji powodującej błąd: Spyhunter_Keygen_downloader.exe, wersja: 1.0.509.1, sygnatura czasowa: 0x54c2d14d Nazwa modułu powodującego błąd: ntdll.dll, wersja: 6.1.7601.18247, sygnatura czasowa: 0x521ea8e7 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00038e19 Identyfikator procesu powodującego błąd: 0x1344 Godzina uruchomienia aplikacji powodującej błąd: 0xSpyhunter_Keygen_downloader.exe0 Ścieżka aplikacji powodującej błąd: Spyhunter_Keygen_downloader.exe1 Ścieżka modułu powodującego błąd: Spyhunter_Keygen_downloader.exe2 Identyfikator raportu: Spyhunter_Keygen_downloader.exe3 Error: (02/04/2015 09:20:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Program SpyHunter4.exe w wersji 4.18.9.4384 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 1e88 Godzina rozpoczęcia: 01d040b7631b0a8b Godzina zakończenia: 6 Ścieżka aplikacji: C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe Identyfikator raportu: 3f61ca48-acab-11e4-b727-bc5ff4f1122a Error: (02/04/2015 08:43:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez Usługi kryptograficzne nie powiodło się. Details: AddWin32ServiceFiles: Unable to back up image of service mail update Service since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. . Error: (02/04/2015 08:09:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (02/04/2015 08:09:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Nie można wygenerować kontekstu aktywacji dla „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1”. Błąd w pliku manifestu lub w pliku zasad „C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2” w wierszu C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Wersja składnika wymagana przez aplikację powoduje konflikt z inną wersją składnika, która jest już aktywna. Składniki powodujące konflikt: Składnik 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Składnik 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (02/04/2015 07:48:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (02/04/2015 10:39:35 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 22:38:14 na ‎2015-‎02-‎04 było nieoczekiwane. Error: (02/04/2015 09:43:11 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Nieoczekiwane niepowodzenie. Kod błędu: D@01010004 Error: (02/04/2015 09:43:10 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Nieoczekiwane niepowodzenie. Kod błędu: D@01010004 Error: (02/04/2015 09:42:17 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 21:40:34 na ‎2015-‎02-‎04 było nieoczekiwane. Error: (02/04/2015 07:46:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi mail update Service z powodu następującego błędu: %%2 Error: (02/04/2015 07:46:49 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 19:45:10 na ‎2015-‎02-‎04 było nieoczekiwane. Error: (02/04/2015 07:36:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi mail update Service z powodu następującego błędu: %%2 Error: (02/04/2015 07:34:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa EaseUS Agent Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/04/2015 07:34:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) PROSet Monitoring Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error: (02/04/2015 07:34:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Usługa Intel(R) Rapid Storage Technology niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Microsoft Office Sessions: ========================= Error: (02/04/2015 11:32:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: speedupmypc.exe6.0.6.149180193libcef.dll1.1453.1273.051afcc8980000003000ed4d01c0c01d040ca640f486fC:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exeC:\Program Files (x86)\Uniblue\SpeedUpMyPC\libcef.dlla28be033-acbd-11e4-9524-bc5ff4f1122a Error: (02/04/2015 10:41:34 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/04/2015 10:40:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: speedupmypc.exe6.0.6.149180193libcef.dll1.1453.1273.051afcc8980000003000ed4d0b5001d040c3338a68a3C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exeC:\Program Files (x86)\Uniblue\SpeedUpMyPC\libcef.dll7e01dbf0-acb6-11e4-9524-bc5ff4f1122a Error: (02/04/2015 09:43:46 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (02/04/2015 09:33:07 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Spyhunter_Keygen_downloader.exe1.0.509.154c2d14dntdll.dll6.1.7601.18247521ea8e7c000000500038e19134401d040b9b3a7865eC:\Users\Pan Robótka\Downloads\Spyhunter_Keygen_downloader.exeC:\Windows\SysWOW64\ntdll.dll068fc5ce-acad-11e4-b727-bc5ff4f1122a Error: (02/04/2015 09:20:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: SpyHunter4.exe4.18.9.43841e8801d040b7631b0a8b6C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe3f61ca48-acab-11e4-b727-bc5ff4f1122a Error: (02/04/2015 08:43:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Details: AddWin32ServiceFiles: Unable to back up image of service mail update Service since QueryServiceConfig API failed System Error: Nie można odnaleźć określonego pliku. Error: (02/04/2015 08:09:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pan Robótka\Downloads\SoftonicDownloader_dla_sporttracks.exe Error: (02/04/2015 08:09:43 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Pan Robótka\Downloads\SoftonicDownloader_for_java-runtime-environment.exe Error: (02/04/2015 07:48:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2015-02-04 16:27:56.291 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-02-04 16:27:56.290 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-02-04 16:27:56.287 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-02-04 16:27:56.284 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-02-04 16:27:56.282 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-02-04 16:27:56.280 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-4330 CPU @ 3.50GHz Percentage of memory in use: 37% Total physical RAM: 8108.62 MB Available physical RAM: 5088.52 MB Total Pagefile: 16215.42 MB Available Pagefile: 12564.75 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:148.69 GB) (Free:54.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:151.65 GB) (Free:9.59 GB) NTFS Drive e: () (Fixed) (Total:196.8 GB) (Free:115.33 GB) NTFS Drive f: () (Fixed) (Total:225.19 GB) (Free:111.65 GB) NTFS Drive g: () (Fixed) (Total:209.17 GB) (Free:95.05 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CAA4CAA4) Partition 1: (Active) - (Size=148.7 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=782.8 GB) - (Type=OF Extended) ==================== End Of Log ============================

a tu aditional

prosilbym aby w skrypcie uwzglednic usuniecie tego drugiego uzytkownika ktory sie niewiadomo skąd pojawil czyli updatusus

dzieki wielkie:)

**Posty:** 4765 · przez **ordynat** 05 Lut 2015, 01:22

Otwórz Notatnik i wklej w nim:

C:\Program Files (x86)\f312f654-8257-4553-bfa5-06004664b3e2
C:\Users\Pan Robótka\AppData\Roaming\Elex-tech
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
C:\Program Files (x86)\Elex-tech
C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
C:\Windows\system32\Drivers\iSafeNetFilter.sys
C:\Users\Pan Robótka\AppData\Roaming\eCyber
C:\Users\Public\Desktop\YAC.lnk
S3 AsrKbMsHk; \??\C:\Windows\SysWOW64\Drivers\AsrKbMsHk.sys [X]
S3 MSICDSetup; \??\H:\CDriver64.sys [X]
R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [249000 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [45224 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
R1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [99496 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [42152 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
R1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [93352 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-01-16] (Elex do Brasil cenzura!ções Ltda)
R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [120128 2015-01-26] (Elex do Brasil cenzura!ções Ltda)
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/deta ... ojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/deta ... ojhbllhbho [Not Found]
HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [Fatal1tySTU] => [X]
HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [ASRockHDMISwitch] => [X]
HKU\S-1-5-21-1058429136-942143012-1941375278-1000\...\Run: [AdobeBridge] => [X]
Task: C:\Windows\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\Windows\Tasks\SpeedUpMyPC Subscription.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: {AFAF1589-4D8E-46C7-BF2C-7E4ACDB3626C} - \Update Service YourFileDownloader No Task File <==== ATTENTION
Task: {C0C8B3DF-D6CE-4CE3-87B2-F37881D3EDFF} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION
Task: {E1212C0F-374E-40C4-B01B-15FA089117A0} - System32\Tasks\SpeedUpMyPC Subscription => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION
Task: {3EACF237-7188-4CCE-B3C5-427FA44E3AE1} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2015-01-27] (Uniblue Systems Limited) <==== ATTENTION
Task: {46E87186-56C6-47A9-B958-D1AFB996A7DC} - System32\Tasks\HDMISwitch => C:\Program Files (x86)\ASRock Utility\HDMISwitch\Bin\HDMISwitch.exe [2013-04-30] () <==== ATTENTION
EmptyTemp:

Plik zapisz pod nazwą [color="#483D8B"]fixlist.txt[/color] i umieść obok FRST. Uruchom FRST i kliknij przycisk Fix.

prosilbym aby w skrypcie uwzglednic usuniecie tego drugiego uzytkownika ktory sie niewiadomo skąd pojawil czyli updatusus

tego nie ruszaj.

**Posty:** 2 · przez **4from3n** 05 Lut 2015, 09:17

Dzięki wielkie:)
Człowiek jednak się uczy całe życie
Możecie mi powiedzieć o co chodzi z tym użytkownikiem dlaczego mam to zostawiać??

Pozdrawiam J

**Posty:** 4765 · przez **ordynat** 05 Lut 2015, 12:19

Jeśli dobrze pamiętam, to jest to od karty graficznej NVIDIA