Windows 8 x64. jakie programy mam odpalić?
Aktualizacje na programosy.pl:
DBF Viewer • Camtasia Studio • GetFLV • MediaInfo • EverNote • reaConverter Lite • Visual Studio Code • Chromium • Kaspersky Rescue Disk
-
- Ogłoszenie:
Wirusy, reklamy?
22 posty(ów) • Strona 1 z 2 • 1, 2
Wirusy, reklamy?
przez ToServeAndProtect 27 Maj 2014, 13:06
Windows 8 x64. jakie programy mam odpalić?
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
Wirusy, reklamy?
przez NieWiem 27 Maj 2014, 13:10
Musisz wyłączyć program AV na czas trwania tego skanowania.
Pobierz ZOEK.
Uruchom jako administrator.
W oknie programu wklej następujący skrypt:
Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.
Pobierz ZOEK.
Uruchom jako administrator.
W oknie programu wklej następujący skrypt:
- Kod: Zaznacz wszystko
autoclean;
process;
systemspecs;
startupall;
services-list;
filescrm;
firefoxlook;
chromelook;
skipfix-iedefaults;
installedprogs;
uninstall-list;
installer-list;
Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 27 Maj 2014, 13:44
- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Weronika (administrator) on VERONKA on 27-05-2014 13:39:14
Running from C:\Users\Weronika\Desktop
Platform: Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spotify Ltd) C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-14] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-14] (AVAST Software)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-25] (Electronic Arts)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [Spotify Web Helper] => C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\MountPoints2: {aae5adb2-01eb-11e2-be68-806e6f6e6963} - "D:\Autorun.exe"
AppInit_DLLs: c:\program files (x86)\optimizer pro\OptProCrash_x64.dll => c:\program files (x86)\optimizer pro\OptProCrash_x64.dll [4139848 2013-11-24] ()
AppInit_DLLs-x32: c:\program files (x86)\optimizer pro\optprocrash.dll => c:\program files (x86)\optimizer pro\optprocrash.dll [4337992 2013-10-29] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
SearchScopes: HKCU - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
BHO: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.x64.dll ()
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.x64.dll ()
BHO: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.x64.dll ()
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.x64.dll ()
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.x64.dll ()
BHO: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.x64.dll ()
BHO-x32: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.dll ()
BHO-x32: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.dll ()
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.dll ()
BHO-x32: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.dll ()
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 10.0.0.110 192.168.2.254
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Weronika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Widget context - C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2013-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
Chrome:
=======
CHR HomePage: hxxp://samsung13.msn.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Dysk Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-05]
CHR Extension: (YouTube) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-05]
CHR Extension: (Szukaj w Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-05]
CHR Extension: (Grepolis Report Converter) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eediamimojgbnjfaalcnlonenfdcogop [2013-03-21]
CHR Extension: (HTmlConnveeertoor) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiijmmddgdmclcjkfolhhlhonpopfajh [2014-01-31]
CHR Extension: (avast! Online Security) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-24]
CHR Extension: (Google Wallet) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11]
CHR Extension: (Gmail) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-05]
CHR Extension: (topBUyer) - C:\ProgramData\oghbfgafiangccphdfgjlggbgdplanme [2014-01-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-14]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 70e6ca8c; c:\program files (x86)\optimizer pro\optprocrashSvc.dll [190616 2013-11-24] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-14] (AVAST Software)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-14] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-14] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-14] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-14] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-24] (Disc Soft Ltd)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-27 13:39 - 2014-05-27 13:39 - 00016336 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-27 13:39 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:35 - 2014-05-27 13:35 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-27 13:16 - 2014-05-27 13:19 - 00020796 _____ () C:\zoek-results.log
2014-05-27 13:15 - 2014-05-27 13:17 - 00000499 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:11 - 2014-05-27 13:12 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 15:58 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-05-25 15:36 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-05-25 15:36 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-05-25 15:36 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-05-25 15:36 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-05-24 21:42 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-05-24 21:42 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-24 21:42 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-24 21:42 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-05-24 21:41 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-24 21:41 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-24 21:40 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-24 21:39 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-24 21:39 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-24 21:39 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-24 21:39 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-24 21:39 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-24 21:39 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-24 21:39 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-05-24 21:39 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-24 21:39 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-24 21:39 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-24 21:39 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-24 21:39 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-24 21:39 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-24 21:39 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-05-24 21:38 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-05-24 21:28 - 2014-05-24 21:28 - 00000000 ____D () C:\ProgramData\TiciTaaCOOuepon
2014-05-24 21:09 - 2014-05-24 21:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 18:15 - 2014-05-24 18:16 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 18:08 - 2014-05-27 13:34 - 00001504 _____ () C:\windows\PFRO.log
2014-05-24 16:52 - 2014-05-24 16:53 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-24 11:51 - 2014-05-24 17:59 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 11:47 - 2014-05-24 20:48 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 11:46 - 2014-05-24 21:06 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-23 13:21 - 2014-05-23 13:28 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-23 03:13 - 2014-05-24 21:19 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-21 18:07 - 2014-05-24 20:48 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-06 17:43 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-05-06 17:43 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-05-06 17:43 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
==================== One Month Modified Files and Folders =======
2014-05-27 13:39 - 2014-05-27 13:39 - 00016336 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-27 13:39 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-27 13:39 - 2012-09-18 10:53 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:38 - 2013-07-13 20:03 - 00000000 ____D () C:\Users\Weronika\Desktop\mp3
2014-05-27 13:36 - 2012-12-21 14:09 - 00000000 ____D () C:\ProgramData\Origin
2014-05-27 13:35 - 2014-05-27 13:35 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-27 13:35 - 2012-12-21 19:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-27 13:34 - 2014-05-24 18:08 - 00001504 _____ () C:\windows\PFRO.log
2014-05-27 13:34 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-27 13:25 - 2012-09-18 10:04 - 02076102 _____ () C:\windows\WindowsUpdate.log
2014-05-27 13:19 - 2014-05-27 13:16 - 00020796 _____ () C:\zoek-results.log
2014-05-27 13:17 - 2014-05-27 13:15 - 00000499 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:12 - 2014-05-27 13:11 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 13:00 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-05-27 12:58 - 2012-07-26 09:28 - 00848230 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-27 00:40 - 2012-07-26 07:26 - 00524288 ___SH () C:\windows\system32\config\BBI
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 14:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-05-25 13:35 - 2012-12-18 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1001512420-2673596773-960679196-1001
2014-05-24 22:18 - 2013-03-05 19:26 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 22:16 - 2013-11-24 14:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-24 22:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-05-24 22:11 - 2013-08-19 08:21 - 00000000 ____D () C:\windows\system32\MRT
2014-05-24 22:07 - 2012-12-19 19:26 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-24 22:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-05-24 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-05-24 21:30 - 2014-04-01 18:59 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-24 21:28 - 2014-05-24 21:28 - 00000000 ____D () C:\ProgramData\TiciTaaCOOuepon
2014-05-24 21:28 - 2014-01-05 18:08 - 00000000 ____D () C:\ProgramData\5438c2da273dec11
2014-05-24 21:26 - 2014-02-15 17:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-24 21:26 - 2012-12-18 22:10 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Mozilla
2014-05-24 21:26 - 2012-12-18 21:56 - 00000000 ____D () C:\Users\Weronika\AppData\Local\CrashDumps
2014-05-24 21:19 - 2014-05-23 03:13 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-24 21:19 - 2013-03-05 19:26 - 00003720 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-24 21:11 - 2014-05-24 21:09 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 21:09 - 2012-12-18 21:53 - 00000000 ____D () C:\Users\Weronika
2014-05-24 21:06 - 2014-05-24 11:46 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-24 21:05 - 2012-07-26 07:26 - 00000269 _____ () C:\windows\win.ini
2014-05-24 21:04 - 2013-02-15 21:09 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Spotify
2014-05-24 21:04 - 2012-12-19 20:21 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\uTorrent
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-05-24 21:02 - 2012-07-26 07:38 - 00000000 ____D () C:\windows\system32\Sysprep
2014-05-24 20:48 - 2014-05-24 11:47 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 20:48 - 2014-05-21 18:07 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-24 20:46 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\registration
2014-05-24 20:38 - 2012-12-21 14:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-24 20:38 - 2012-12-18 22:50 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Google
2014-05-24 20:35 - 2012-12-18 22:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 20:12 - 2012-07-26 09:21 - 00028256 _____ () C:\windows\setupact.log
2014-05-24 18:16 - 2014-05-24 18:15 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 17:59 - 2014-05-24 11:51 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 17:49 - 2013-02-03 02:44 - 00000000 ____D () C:\windows\Minidump
2014-05-24 16:53 - 2014-05-24 16:52 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-23 13:28 - 2014-05-23 13:21 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-10 20:52 - 2012-09-18 10:57 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-08 20:27 - 2012-12-21 19:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-06 07:14 - 2014-05-24 21:41 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 07:14 - 2014-05-24 21:41 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:40 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:39 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:37 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:26 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-03 12:01 - 2012-12-18 21:57 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Atheros
2014-05-01 22:37 - 2014-05-27 12:53 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:37 - 2014-05-27 12:53 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-01 19:24 - 2012-12-18 21:58 - 00000000 ____D () C:\Users\Weronika\Documents\Bluetooth Folder
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Weronika\AppData\Local\Temp\7za.exe
C:\Users\Weronika\AppData\Local\Temp\hijackthis.exe
C:\Users\Weronika\AppData\Local\Temp\NirCmd.exe
C:\Users\Weronika\AppData\Local\Temp\PEVZ.EXE
C:\Users\Weronika\AppData\Local\Temp\remove.exe
C:\Users\Weronika\AppData\Local\Temp\sed.exe
C:\Users\Weronika\AppData\Local\Temp\shortcut.exe
C:\Users\Weronika\AppData\Local\Temp\swreg.exe
C:\Users\Weronika\AppData\Local\Temp\swxcacls.exe
C:\Users\Weronika\AppData\Local\Temp\wget.exe
C:\Users\Weronika\AppData\Local\Temp\zoek-delete.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-24 21:39] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-25 13:39
==================== End Of Log ============================
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-27 13:41:19
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AMD Accelerated Video Transcoding (Version: 12.5.100.20808 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8C6A4815-2E50-7B6E-9159-6608871EB5BF}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2008 - Avast Software)
Bundled software uninstaller (HKLM-x32\...\bi_uninstaller) (Version: - ) <==== ATTENTION
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Help Desk (HKLM\...\{D93F0B49-12AA-4AE6-8349-0ECB13B9532F}) (Version: 1.0.5 - Samsung Electronics CO., LTD.)
HTmlConnveeertoor (HKLM-x32\...\{98275A18-3FCB-AD3A-81AC-E29858C2ED53}) (Version: - HtmlConveerrtoor)
KiingCooupon (HKLM-x32\...\{5C28578D-D0F1-699F-01B0-CC0653A28C11}) (Version: - KingCaoupon) <==== ATTENTION
Lollipop (HKCU\...\lollipop_12142229) (Version: - Lollipop Network, S.L.) <==== ATTENTION
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: - PC Utilities Software Limited) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Qtrax Player (HKCU\...\3852854008.portal.qtrax.com) (Version: - portal.qtrax.com)
Qtrax Player (HKLM-x32\...\{89505A66-35F0-4401-B3AD-D077051F8698}) (Version: 01.001.0001 - Qtrax)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.209 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.6.5 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
saVera box (HKLM-x32\...\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}) (Version: - saver bOxu) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Spotify (HKCU\...\Spotify) (Version: 0.9.4.169.gc0399df6 - Spotify AB)
Support Center (HKLM\...\{AC0273F1-68A3-42CF-B487-C594B0A92F8D}) (Version: 2.0.12 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.3 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.3 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
The Sims™ 3 Nowoczesny apartament Akcesoria (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Zwierzaki (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
TiciTaaCOOuepon (HKLM-x32\...\{E370F69F-ED3F-925F-31FC-14D1329A713B}) (Version: - TeicTaCooupon) <==== ATTENTION
topBUyer (HKLM-x32\...\{FE139F4C-CE5B-121A-8A2D-191FA2226094}) (Version: - topbuyer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUS_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUS_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.1.0.16357 - Blizzard Entertainment)
==================== Restore Points =========================
08-05-2014 18:29:41 Installed DirectX
15-05-2014 16:13:45 Windows Update
24-05-2014 08:17:09 Scheduled Checkpoint
24-05-2014 18:29:49 Restore Operation
27-05-2014 11:16:36 zoek.exe restore point
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2FB2DFD8-5DD0-4002-B596-95CDEDA94AEB} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-09-17] (SEC)
Task: {31013E43-B89F-41AB-9F4A-DE48D4F412E9} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware)
Task: {59FE14C6-F040-4577-9CB3-C9B5F22E8244} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {8E92F223-BD22-40E2-BFCE-BFEC32E21EC6} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {93488060-F62D-460B-BF37-8DCD0B24FB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {969EAAF3-E7ED-4040-A6D4-3C906E1ADAF5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-14] (AVAST Software)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C92B5874-C4C0-47DE-B0A7-70272F3D3FC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {CCFD1D87-CFBD-449A-9876-1FE01D3A61AA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2014-02-13] (Microsoft Corporation)
Task: {E4F9C621-7840-4C8E-A2B5-12024A9D7565} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {E5A559DC-C5C1-4418-B480-B4C8F632217E} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F8689B18-9FF6-48F1-866F-645BF5564B64} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2012-09-14 05:42 - 2012-09-14 05:42 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2014-05-27 12:57 - 2014-05-27 10:10 - 02255872 _____ () C:\Program Files\AVAST Software\Avast\defs\14052700\algo.dll
2013-11-24 14:23 - 2013-11-24 14:23 - 00190616 _____ () c:\program files (x86)\optimizer pro\optprocrashSvc.dll
2013-11-24 14:23 - 2013-10-29 12:20 - 04337992 _____ () c:\program files (x86)\optimizer pro\optprocrash.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00962560 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00024064 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00025088 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00217088 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00261632 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00019968 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00302592 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2012-09-18 10:59 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-12-14 03:00 - 2013-12-14 03:00 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ae4
Start Time: 01cf780914a50c77
Termination Time: 533
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id: b9e59c77-e3fc-11e3-becc-50b7c35021ee
Faulting package full name:
Faulting package-relative application ID:
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1788) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\windows\system32\SRU\SRU02052.log.
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x1708
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x254
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WWAHost.exe, version: 6.2.9200.16420, time stamp: 0x505a9152
Faulting module name: WinStoreUI.dll, version: 6.2.9200.16897, time stamp: 0x5351f34b
Exception code: 0xc0000005
Fault offset: 0x000000000008471b
Faulting process id: 0x17c8
Faulting application start time: 0xWWAHost.exe0
Faulting application path: WWAHost.exe1
Faulting module path: WWAHost.exe2
Report Id: WWAHost.exe3
Faulting package full name: WWAHost.exe4
Faulting package-relative application ID: WWAHost.exe5
System errors:
=============
Error: (05/27/2014 01:34:04 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 01:01:34 PM) (Source: DCOM) (EventID: 10010) (User: veronka)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (05/27/2014 00:53:07 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:18:00 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:14:54 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x8007045b: Security Update for Internet Explorer Flash Player for Windows 8 for X64-based Systems (KB2957151).
Error: (05/24/2014 10:14:54 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x8007045b: Security Update for Windows 8 for x64-based Systems (KB2926765).
Microsoft Office Sessions:
=========================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.16537ae401cf780914a50c77533C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb9e59c77-e3fc-11e3-becc-50b7c35021ee
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1788SRUJet: C:\windows\system32\SRU\SRU02052.log-1811 (0xfffff8ed)
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea70170801cf778607f7b717C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll45ca5969-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea7025401cf7785ef918f8eC:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll2d4c62c4-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WWAHost.exe6.2.9200.16420505a9152WinStoreUI.dll6.2.9200.168975351f34bc0000005000000000008471b17c801cf7785d51fb939C:\Windows\System32\WWAHost.exeC:\windows\winstore\WinStoreUI.dll1eec4b23-e379-11e3-becb-50b7c35021eewinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
==================== Memory info ===========================
Percentage of memory in use: 41%
Total physical RAM: 3547.03 MB
Available physical RAM: 2076.32 MB
Total Pagefile: 5339.03 MB
Available Pagefile: 3609.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:675.29 GB) (Free:551.43 GB) NTFS
Drive d: (Sims3SP01) (CDROM) (Total:4.52 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
==================== End Of Log ============================
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 27 Maj 2014, 14:26
Musisz wyłączyć program AV na czas trwania tego skanowania.
Uruchom ponownie ZOEK jako administrator.
W oknie programu wklej następujący skrypt:
Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.
Uruchom ponownie ZOEK jako administrator.
W oknie programu wklej następujący skrypt:
- Kod: Zaznacz wszystko
c:\program files (x86)\optimizer pro;fs
{05A68890-0C73-5796-45EF-123994919BF5};c
C:\ProgramData\HTmlConnveeertoor;fs
{7752F663-B4E0-73C1-9146-7533E714C8D0};c
C:\ProgramData\KiingCooupon;fs
{7F671060-21C4-AEEE-C7EC-6FAACC8F1F40};c
C:\ProgramData\saVera box;fs
{B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19};c
C:\ProgramData\topBUyer;fs
{D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87};c
C:\ProgramData\TiciTaaCOOuepon;fs
{F66099AF-6552-48A4-F66C-89A94FD3AA56};c
C:\ProgramData\easytOshop;fs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows];r
"AppInit_DLLs"="";r
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows];r64
"AppInit_DLLs"="";r64
C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384};fs
{ec8030f7-c20a-464f-9b0e-13a3a9e97384};c
fiijmmddgdmclcjkfolhhlhonpopfajh;chr
C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiijmmddgdmclcjkfolhhlhonpopfajh;fs
C:\ProgramData\oghbfgafiangccphdfgjlggbgdplanme;fs
oghbfgafiangccphdfgjlggbgdplanme;chr
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google];r
70e6ca8c;s
C:\Program Files (x86)\webget;fs
C:\ProgramData\LuckkyCoupoN;fs
C:\ProgramData\5438c2da273dec11;fs
C:\ProgramData\MakeMarkerFile.exe;f
C:\Users\EasySurvey\EasySurvey.exe;f
winlogon.exe;z
Bundled software uninstaller;u
HTmlConnveeertoor;u
{98275A18-3FCB-AD3A-81AC-E29858C2ED53};c
KiingCooupon;u
{5C28578D-D0F1-699F-01B0-CC0653A28C11};c
Lollipop;u
Optimizer Pro v3.2;u
saVera box;u
{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96};c
TiciTaaCOOuepon;u
{E370F69F-ED3F-925F-31FC-14D1329A713B};c
topBUyer;u
{FE139F4C-CE5B-121A-8A2D-191FA2226094};c
ffdefaults;
chrdefaults;
autoclean;
process;
systemspecs;
startupall;
services-list;
filescrm;
firefoxlook;
chromelook;
iedefaults;
installedprogs;
Upewnij się, że opcja Scan All Users jest zaznaczona.
Wciśnij Run Script i poczekaj na wynikowy raport. Przeklej go.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 09:08
skrypt się zwalił, całą noc robił "remove from installer" i nie zrobił
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 09:17
ZOEK sobie zaczyna ze mnie robić jaja i nie podoba mi się to 
Pawełku, generujemy nowe raporty z FRST z zaznaczoną opcją addition.
Pawełku, generujemy nowe raporty z FRST z zaznaczoną opcją addition.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 09:26
- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Weronika (administrator) on VERONKA on 28-05-2014 09:22:13
Running from C:\Users\Weronika\Desktop
Platform: Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spotify Ltd) C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
() C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16683_none_62280e15510f8e79\TiWorker.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-14] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-14] (AVAST Software)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-25] (Electronic Arts)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [Spotify Web Helper] => C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
AppInit_DLLs: c:\program files (x86)\optimizer pro\OptProCrash_x64.dll => c:\program files (x86)\optimizer pro\OptProCrash_x64.dll [4139848 2013-11-24] ()
AppInit_DLLs-x32: c:\program files (x86)\optimizer pro\optprocrash.dll => c:\program files (x86)\optimizer pro\optprocrash.dll [4337992 2013-10-29] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
SearchScopes: HKCU - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
BHO: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.x64.dll ()
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.x64.dll ()
BHO: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.x64.dll ()
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.x64.dll ()
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.x64.dll ()
BHO: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.x64.dll ()
BHO-x32: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.dll ()
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.dll ()
BHO-x32: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.dll ()
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.dll ()
BHO-x32: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.dll ()
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 10.0.0.110 192.168.2.254
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Weronika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Widget context - C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2013-12-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
Chrome:
=======
CHR HomePage: hxxp://samsung13.msn.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Dysk Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-05]
CHR Extension: (YouTube) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-05]
CHR Extension: (Szukaj w Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-05]
CHR Extension: (Grepolis Report Converter) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eediamimojgbnjfaalcnlonenfdcogop [2013-03-21]
CHR Extension: (HTmlConnveeertoor) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiijmmddgdmclcjkfolhhlhonpopfajh [2014-01-31]
CHR Extension: (avast! Online Security) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-24]
CHR Extension: (Google Wallet) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11]
CHR Extension: (Gmail) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-05]
CHR Extension: (topBUyer) - C:\ProgramData\oghbfgafiangccphdfgjlggbgdplanme [2014-01-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-14]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 70e6ca8c; c:\program files (x86)\optimizer pro\optprocrashSvc.dll [190616 2013-11-24] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-14] (AVAST Software)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-14] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-14] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-14] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-14] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-24] (Disc Soft Ltd)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-28 09:22 - 2014-05-28 09:22 - 00015738 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 09:21 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner.exe
2014-05-28 09:08 - 2014-05-28 09:08 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:19 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:41 - 2014-05-27 13:42 - 00039275 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-27 13:39 - 2014-05-28 09:22 - 00000000 ____D () C:\FRST
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:15 - 2014-05-27 14:35 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:11 - 2014-05-27 13:12 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 15:58 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-05-25 15:36 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-05-25 15:36 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-05-25 15:36 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-05-25 15:36 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-05-24 21:42 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-05-24 21:42 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-24 21:42 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-24 21:42 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-05-24 21:41 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-24 21:41 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-24 21:40 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-24 21:39 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-24 21:39 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-24 21:39 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-24 21:39 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-24 21:39 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-24 21:39 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-24 21:39 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-05-24 21:39 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-24 21:39 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-24 21:39 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-24 21:39 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-24 21:39 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-24 21:39 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-24 21:39 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-05-24 21:38 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-05-24 21:28 - 2014-05-24 21:28 - 00000000 ____D () C:\ProgramData\TiciTaaCOOuepon
2014-05-24 21:09 - 2014-05-24 21:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 18:15 - 2014-05-24 18:16 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 18:08 - 2014-05-28 09:06 - 00001834 _____ () C:\windows\PFRO.log
2014-05-24 16:52 - 2014-05-24 16:53 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-24 11:51 - 2014-05-24 17:59 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 11:47 - 2014-05-24 20:48 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 11:46 - 2014-05-24 21:06 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-23 13:21 - 2014-05-23 13:28 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-23 03:13 - 2014-05-24 21:19 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-21 18:07 - 2014-05-24 20:48 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-06 17:43 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-05-06 17:43 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-05-06 17:43 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
==================== One Month Modified Files and Folders =======
2014-05-28 09:22 - 2014-05-28 09:22 - 00015738 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 09:22 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-28 09:22 - 2013-07-13 20:03 - 00000000 ____D () C:\Users\Weronika\Desktop\mp3
2014-05-28 09:21 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner.exe
2014-05-28 09:19 - 2012-09-18 10:04 - 01159558 _____ () C:\windows\WindowsUpdate.log
2014-05-28 09:11 - 2012-07-26 09:28 - 00848230 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-28 09:09 - 2012-09-18 10:53 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-28 09:08 - 2014-05-28 09:08 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 09:08 - 2012-12-21 19:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-28 09:08 - 2012-12-21 14:09 - 00000000 ____D () C:\ProgramData\Origin
2014-05-28 09:07 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-28 09:06 - 2014-05-24 18:08 - 00001834 _____ () C:\windows\PFRO.log
2014-05-28 09:02 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:15 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:42 - 2014-05-27 13:41 - 00039275 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:19 - 2014-05-27 14:35 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:12 - 2014-05-27 13:11 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-27 00:40 - 2012-07-26 07:26 - 00524288 ___SH () C:\windows\system32\config\BBI
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 14:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-05-25 13:35 - 2012-12-18 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1001512420-2673596773-960679196-1001
2014-05-24 22:18 - 2013-03-05 19:26 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 22:16 - 2013-11-24 14:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-24 22:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-05-24 22:11 - 2013-08-19 08:21 - 00000000 ____D () C:\windows\system32\MRT
2014-05-24 22:07 - 2012-12-19 19:26 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-24 22:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-05-24 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-05-24 21:30 - 2014-04-01 18:59 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-24 21:28 - 2014-05-24 21:28 - 00000000 ____D () C:\ProgramData\TiciTaaCOOuepon
2014-05-24 21:28 - 2014-01-05 18:08 - 00000000 ____D () C:\ProgramData\5438c2da273dec11
2014-05-24 21:26 - 2014-02-15 17:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-24 21:26 - 2012-12-18 22:10 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Mozilla
2014-05-24 21:26 - 2012-12-18 21:56 - 00000000 ____D () C:\Users\Weronika\AppData\Local\CrashDumps
2014-05-24 21:19 - 2014-05-23 03:13 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-24 21:19 - 2013-03-05 19:26 - 00003720 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-24 21:11 - 2014-05-24 21:09 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 21:09 - 2012-12-18 21:53 - 00000000 ____D () C:\Users\Weronika
2014-05-24 21:06 - 2014-05-24 11:46 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-24 21:05 - 2012-07-26 07:26 - 00000269 _____ () C:\windows\win.ini
2014-05-24 21:04 - 2013-02-15 21:09 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Spotify
2014-05-24 21:04 - 2012-12-19 20:21 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\uTorrent
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-05-24 21:02 - 2012-07-26 07:38 - 00000000 ____D () C:\windows\system32\Sysprep
2014-05-24 20:48 - 2014-05-24 11:47 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 20:48 - 2014-05-21 18:07 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-24 20:46 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\registration
2014-05-24 20:38 - 2012-12-21 14:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-24 20:38 - 2012-12-18 22:50 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Google
2014-05-24 20:35 - 2012-12-18 22:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 20:12 - 2012-07-26 09:21 - 00028256 _____ () C:\windows\setupact.log
2014-05-24 18:16 - 2014-05-24 18:15 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 17:59 - 2014-05-24 11:51 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 17:49 - 2013-02-03 02:44 - 00000000 ____D () C:\windows\Minidump
2014-05-24 16:53 - 2014-05-24 16:52 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-23 13:28 - 2014-05-23 13:21 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-10 20:52 - 2012-09-18 10:57 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-08 20:27 - 2012-12-21 19:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-06 07:14 - 2014-05-24 21:41 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 07:14 - 2014-05-24 21:41 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:40 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:39 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:37 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:26 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-03 12:01 - 2012-12-18 21:57 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Atheros
2014-05-01 22:37 - 2014-05-27 12:53 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:37 - 2014-05-27 12:53 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-01 19:24 - 2012-12-18 21:58 - 00000000 ____D () C:\Users\Weronika\Documents\Bluetooth Folder
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Weronika\AppData\Local\Temp\7za.exe
C:\Users\Weronika\AppData\Local\Temp\hijackthis.exe
C:\Users\Weronika\AppData\Local\Temp\NirCmd.exe
C:\Users\Weronika\AppData\Local\Temp\PEVZ.EXE
C:\Users\Weronika\AppData\Local\Temp\remove.exe
C:\Users\Weronika\AppData\Local\Temp\sed.exe
C:\Users\Weronika\AppData\Local\Temp\shortcut.exe
C:\Users\Weronika\AppData\Local\Temp\swreg.exe
C:\Users\Weronika\AppData\Local\Temp\swxcacls.exe
C:\Users\Weronika\AppData\Local\Temp\wget.exe
C:\Users\Weronika\AppData\Local\Temp\zoek-delete.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-24 21:39] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-25 13:39
==================== End Of Log ============================
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 09:24:26
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AMD Accelerated Video Transcoding (Version: 12.5.100.20808 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8C6A4815-2E50-7B6E-9159-6608871EB5BF}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2008 - Avast Software)
Bundled software uninstaller (HKLM-x32\...\bi_uninstaller) (Version: - ) <==== ATTENTION
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Help Desk (HKLM\...\{D93F0B49-12AA-4AE6-8349-0ECB13B9532F}) (Version: 1.0.5 - Samsung Electronics CO., LTD.)
HTmlConnveeertoor (HKLM-x32\...\{98275A18-3FCB-AD3A-81AC-E29858C2ED53}) (Version: - HtmlConveerrtoor)
KiingCooupon (HKLM-x32\...\{5C28578D-D0F1-699F-01B0-CC0653A28C11}) (Version: - KingCaoupon) <==== ATTENTION
Lollipop (HKCU\...\lollipop_12142229) (Version: - Lollipop Network, S.L.) <==== ATTENTION
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: - PC Utilities Software Limited) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Qtrax Player (HKCU\...\3852854008.portal.qtrax.com) (Version: - portal.qtrax.com)
Qtrax Player (HKLM-x32\...\{89505A66-35F0-4401-B3AD-D077051F8698}) (Version: 01.001.0001 - Qtrax)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.209 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.6.5 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
saVera box (HKLM-x32\...\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}) (Version: - saver bOxu) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Spotify (HKCU\...\Spotify) (Version: 0.9.4.169.gc0399df6 - Spotify AB)
Support Center (HKLM\...\{AC0273F1-68A3-42CF-B487-C594B0A92F8D}) (Version: 2.0.12 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.3 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.3 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
The Sims™ 3 Nowoczesny apartament Akcesoria (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Zwierzaki (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
TiciTaaCOOuepon (HKLM-x32\...\{E370F69F-ED3F-925F-31FC-14D1329A713B}) (Version: - TeicTaCooupon) <==== ATTENTION
topBUyer (HKLM-x32\...\{FE139F4C-CE5B-121A-8A2D-191FA2226094}) (Version: - topbuyer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUS_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUS_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.1.0.16357 - Blizzard Entertainment)
==================== Restore Points =========================
08-05-2014 18:29:41 Installed DirectX
15-05-2014 16:13:45 Windows Update
24-05-2014 08:17:09 Scheduled Checkpoint
24-05-2014 18:29:49 Restore Operation
27-05-2014 11:16:36 zoek.exe restore point
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2FB2DFD8-5DD0-4002-B596-95CDEDA94AEB} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-09-17] (SEC)
Task: {31013E43-B89F-41AB-9F4A-DE48D4F412E9} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware)
Task: {59FE14C6-F040-4577-9CB3-C9B5F22E8244} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {8E92F223-BD22-40E2-BFCE-BFEC32E21EC6} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {93488060-F62D-460B-BF37-8DCD0B24FB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {969EAAF3-E7ED-4040-A6D4-3C906E1ADAF5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-14] (AVAST Software)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C92B5874-C4C0-47DE-B0A7-70272F3D3FC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {CCFD1D87-CFBD-449A-9876-1FE01D3A61AA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2014-02-13] (Microsoft Corporation)
Task: {E4F9C621-7840-4C8E-A2B5-12024A9D7565} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {E5A559DC-C5C1-4418-B480-B4C8F632217E} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F8689B18-9FF6-48F1-866F-645BF5564B64} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2012-09-14 05:42 - 2012-09-14 05:42 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-09-14 12:18 - 2012-09-14 12:18 - 04238968 _____ () C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
2014-05-27 12:57 - 2014-05-27 10:10 - 02255872 _____ () C:\Program Files\AVAST Software\Avast\defs\14052700\algo.dll
2014-05-28 09:07 - 2014-05-27 22:00 - 02256384 _____ () C:\Program Files\AVAST Software\Avast\defs\14052701\algo.dll
2013-11-24 14:23 - 2013-11-24 14:23 - 00190616 _____ () c:\program files (x86)\optimizer pro\optprocrashSvc.dll
2013-11-24 14:23 - 2013-10-29 12:20 - 04337992 _____ () c:\program files (x86)\optimizer pro\optprocrash.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00962560 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00024064 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00025088 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00217088 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00261632 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00019968 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00302592 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2012-09-18 10:59 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-12-14 03:00 - 2013-12-14 03:00 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ae4
Start Time: 01cf780914a50c77
Termination Time: 533
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id: b9e59c77-e3fc-11e3-becc-50b7c35021ee
Faulting package full name:
Faulting package-relative application ID:
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1788) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\windows\system32\SRU\SRU02052.log.
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x1708
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x254
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WWAHost.exe, version: 6.2.9200.16420, time stamp: 0x505a9152
Faulting module name: WinStoreUI.dll, version: 6.2.9200.16897, time stamp: 0x5351f34b
Exception code: 0xc0000005
Fault offset: 0x000000000008471b
Faulting process id: 0x17c8
Faulting application start time: 0xWWAHost.exe0
Faulting application path: WWAHost.exe1
Faulting module path: WWAHost.exe2
Report Id: WWAHost.exe3
Faulting package full name: WWAHost.exe4
Faulting package-relative application ID: WWAHost.exe5
System errors:
=============
Error: (05/28/2014 09:06:54 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 03:59:45 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.0.0.232.
The computer with the IP address 10.0.0.120 did not allow the name to be claimed by
this computer.
Error: (05/27/2014 01:34:04 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 01:01:34 PM) (Source: DCOM) (EventID: 10010) (User: veronka)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (05/27/2014 00:53:07 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:18:00 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Microsoft Office Sessions:
=========================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.16537ae401cf780914a50c77533C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb9e59c77-e3fc-11e3-becc-50b7c35021ee
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1788SRUJet: C:\windows\system32\SRU\SRU02052.log-1811 (0xfffff8ed)
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea70170801cf778607f7b717C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll45ca5969-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea7025401cf7785ef918f8eC:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll2d4c62c4-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WWAHost.exe6.2.9200.16420505a9152WinStoreUI.dll6.2.9200.168975351f34bc0000005000000000008471b17c801cf7785d51fb939C:\Windows\System32\WWAHost.exeC:\windows\winstore\WinStoreUI.dll1eec4b23-e379-11e3-becb-50b7c35021eewinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
==================== Memory info ===========================
Percentage of memory in use: 39%
Total physical RAM: 3547.03 MB
Available physical RAM: 2159.5 MB
Total Pagefile: 5339.03 MB
Available Pagefile: 3864.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:675.29 GB) (Free:551.34 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 10:00
Pobierz załączony plik i umieść go obok FRST.
Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.
Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.
fixlist.txt- (3.66 KiB) Ściągnięto 84 razy
Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.
Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 10:09
Coś tam variable cannot access.....
oraz log
oraz log
- Kod: Zaznacz wszystko
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 10:08:14 Run:1
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
AppInit_DLLs: c:\program files (x86)\optimizer pro\OptProCrash_x64.dll => c:\program files (x86)\optimizer pro\OptProCrash_x64.dll [4139848 2013-11-24] ()
AppInit_DLLs-x32: c:\program files (x86)\optimizer pro\optprocrash.dll => c:\program files (x86)\optimizer pro\optprocrash.dll [4337992 2013-10-29] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
SearchScopes: HKCU - {625B6FF5-2585-45E6-8F06-E3C999953B57} URL =
BHO: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.x64.dll ()
C:\ProgramData\HTmlConnveeertoor
BHO: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.x64.dll ()
BHO: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.x64.dll ()
C:\ProgramData\KiingCooupon
C:\ProgramData\saVera box
BHO: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.x64.dll ()
C:\ProgramData\topBUyer
BHO: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.x64.dll ()
BHO: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.x64.dll ()
BHO-x32: HTmlConnveeertoor - {05A68890-0C73-5796-45EF-123994919BF5} - C:\ProgramData\HTmlConnveeertoor\cIdzaU1wxC.dll ()
C:\ProgramData\TiciTaaCOOuepon
C:\ProgramData\easytOshop
BHO-x32: KiingCooupon - {7752F663-B4E0-73C1-9146-7533E714C8D0} - C:\ProgramData\KiingCooupon\RvFSFdFb.dll ()
BHO-x32: saVera box - {7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} - C:\ProgramData\saVera box\eRyH1jB.dll ()
BHO-x32: topBUyer - {B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} - C:\ProgramData\topBUyer\p.dll ()
BHO-x32: TiciTaaCOOuepon - {D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} - C:\ProgramData\TiciTaaCOOuepon\QlznocXJf.dll ()
BHO-x32: easytOshop - {F66099AF-6552-48A4-F66C-89A94FD3AA56} - C:\ProgramData\easytOshop\fl8UurT1.dll ()
FF Extension: Widget context - C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi [2013-12-15]
C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi
C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiijmmddgdmclcjkfolhhlhonpopfajh
C:\ProgramData\oghbfgafiangccphdfgjlggbgdplanme
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
c:\program files (x86)\optimizer pro
R2 70e6ca8c; c:\program files (x86)\optimizer pro\optprocrashSvc.dll [190616 2013-11-24] ()
C:\Program Files (x86)\webget
C:\ProgramData\LuckkyCoupoN
Folder: C:\windows\ToastData
Folder: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
Folder: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
Folder: C:\ProgramData\5438c2da273dec11
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
AlternateDataStreams: C:\ProgramData\Temp:373E1720
*****************
"c:\program files (x86)\optimizer pro\OptProCrash_x64.dll" => Value Data not found.
"c:\program files (x86)\optimizer pro\optprocrash.dll" => Value Data not found.
C:\windows\system32\GroupPolicy\Machine => Moved successfully.
C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key deleted successfully.
HKCR\CLSID\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key deleted successfully.
HKCR\CLSID\{625B6FF5-2585-45E6-8F06-E3C999953B57} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05A68890-0C73-5796-45EF-123994919BF5} => Key deleted successfully.
HKCR\CLSID\{05A68890-0C73-5796-45EF-123994919BF5} => Key deleted successfully.
C:\ProgramData\HTmlConnveeertoor => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7752F663-B4E0-73C1-9146-7533E714C8D0} => Key deleted successfully.
HKCR\CLSID\{7752F663-B4E0-73C1-9146-7533E714C8D0} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} => Key deleted successfully.
HKCR\CLSID\{7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} => Key deleted successfully.
C:\ProgramData\KiingCooupon => Moved successfully.
C:\ProgramData\saVera box => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} => Key deleted successfully.
HKCR\CLSID\{B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} => Key deleted successfully.
C:\ProgramData\topBUyer => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} => Key deleted successfully.
HKCR\CLSID\{D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F66099AF-6552-48A4-F66C-89A94FD3AA56} => Key deleted successfully.
HKCR\CLSID\{F66099AF-6552-48A4-F66C-89A94FD3AA56} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05A68890-0C73-5796-45EF-123994919BF5} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{05A68890-0C73-5796-45EF-123994919BF5} => Key deleted successfully.
C:\ProgramData\TiciTaaCOOuepon => Moved successfully.
C:\ProgramData\easytOshop => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7752F663-B4E0-73C1-9146-7533E714C8D0} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{7752F663-B4E0-73C1-9146-7533E714C8D0} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{7F671060-21C4-AEEE-C7EC-6FAACC8F1F40} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{B34CD354-D6FE-1BCB-28E4-0FB2F0CA8D19} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{D6E23F5B-3932-1EB2-D9DD-A3639D5B6C87} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F66099AF-6552-48A4-F66C-89A94FD3AA56} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{F66099AF-6552-48A4-F66C-89A94FD3AA56} => Key deleted successfully.
C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi => Moved successfully.
"C:\Users\Weronika\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{140A2D0E-85CC-4ed3-9BA5-8FA35DA7FABA}.xpi" => File/Directory not found.
C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiijmmddgdmclcjkfolhhlhonpopfajh => Moved successfully.
C:\ProgramData\oghbfgafiangccphdfgjlggbgdplanme => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
"c:\program files (x86)\optimizer pro" directory move:
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 10:20
Nie Wiem napisał(a):Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 10:24
- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Weronika (administrator) on VERONKA on 28-05-2014 10:20:59
Running from C:\Users\Weronika\Desktop
Platform: Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
a
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spotify Ltd) C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
() C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-14] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-14] (AVAST Software)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-25] (Electronic Arts)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [Spotify Web Helper] => C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
AppInit_DLLs: c:\program files (x86)\optimizer pro\OptProCrash_x64.dll => c:\program files (x86)\optimizer pro\OptProCrash_x64.dll [4139848 2013-11-24] ()
AppInit_DLLs-x32: c:\program files (x86)\optimizer pro\optprocrash.dll => c:\program files (x86)\optimizer pro\optprocrash.dll [4337992 2013-10-29] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 10.0.0.110 192.168.2.254
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Weronika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
Chrome:
=======
CHR HomePage: hxxp://samsung13.msn.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Dysk Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-05]
CHR Extension: (YouTube) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-05]
CHR Extension: (Szukaj w Google) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-05]
CHR Extension: (Grepolis Report Converter) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\eediamimojgbnjfaalcnlonenfdcogop [2013-03-21]
CHR Extension: (avast! Online Security) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-24]
CHR Extension: (Google Wallet) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11]
CHR Extension: (Gmail) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-14]
==================== Services (Whitelisted) =================
R2 70e6ca8c; c:\program files (x86)\optimizer pro\optprocrashSvc.dll [190616 2013-11-24] ()
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-14] (AVAST Software)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-14] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-14] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-14] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-14] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-24] (Disc Soft Ltd)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-28 10:20 - 2014-05-28 10:21 - 00013515 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 10:07 - 2014-05-28 10:07 - 00003743 _____ () C:\Users\Weronika\Desktop\fixlist.txt
2014-05-28 09:21 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner.exe
2014-05-28 09:08 - 2014-05-28 09:08 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:19 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:39 - 2014-05-28 10:20 - 00000000 ____D () C:\FRST
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:15 - 2014-05-27 14:35 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:11 - 2014-05-27 13:12 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 15:58 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-05-25 15:36 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-05-25 15:36 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-05-25 15:36 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-05-25 15:36 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-05-24 21:42 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-05-24 21:42 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-24 21:42 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-24 21:42 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-05-24 21:41 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-24 21:41 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-24 21:40 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-24 21:39 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-24 21:39 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-24 21:39 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-24 21:39 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-24 21:39 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-24 21:39 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-24 21:39 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-05-24 21:39 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-24 21:39 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-24 21:39 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-24 21:39 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-24 21:39 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-24 21:39 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-24 21:39 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-05-24 21:38 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-05-24 21:09 - 2014-05-24 21:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 18:15 - 2014-05-24 18:16 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 18:08 - 2014-05-28 09:06 - 00001834 _____ () C:\windows\PFRO.log
2014-05-24 16:52 - 2014-05-24 16:53 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-24 11:51 - 2014-05-24 17:59 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 11:47 - 2014-05-24 20:48 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 11:46 - 2014-05-24 21:06 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-23 13:21 - 2014-05-23 13:28 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-23 03:13 - 2014-05-24 21:19 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-21 18:07 - 2014-05-24 20:48 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-06 17:43 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-05-06 17:43 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-05-06 17:43 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
==================== One Month Modified Files and Folders =======
2014-05-28 10:21 - 2014-05-28 10:20 - 00013515 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 10:20 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-28 10:08 - 2012-07-26 10:12 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-05-28 10:07 - 2014-05-28 10:07 - 00003743 _____ () C:\Users\Weronika\Desktop\fixlist.txt
2014-05-28 10:07 - 2013-07-13 20:03 - 00000000 ____D () C:\Users\Weronika\Desktop\mp3
2014-05-28 10:00 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-05-28 09:51 - 2012-07-26 09:28 - 00848230 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-28 09:21 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner.exe
2014-05-28 09:19 - 2012-09-18 10:04 - 01159558 _____ () C:\windows\WindowsUpdate.log
2014-05-28 09:09 - 2012-09-18 10:53 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-28 09:08 - 2014-05-28 09:08 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 09:08 - 2012-12-21 19:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-28 09:08 - 2012-12-21 14:09 - 00000000 ____D () C:\ProgramData\Origin
2014-05-28 09:07 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-28 09:06 - 2014-05-24 18:08 - 00001834 _____ () C:\windows\PFRO.log
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:15 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:19 - 2014-05-27 14:35 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:12 - 2014-05-27 13:11 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-27 00:40 - 2012-07-26 07:26 - 00524288 ___SH () C:\windows\system32\config\BBI
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 14:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-05-25 13:35 - 2012-12-18 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1001512420-2673596773-960679196-1001
2014-05-24 22:18 - 2013-03-05 19:26 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 22:16 - 2013-11-24 14:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-24 22:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-05-24 22:11 - 2013-08-19 08:21 - 00000000 ____D () C:\windows\system32\MRT
2014-05-24 22:07 - 2012-12-19 19:26 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-24 22:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-05-24 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-05-24 21:30 - 2014-04-01 18:59 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-24 21:28 - 2014-01-05 18:08 - 00000000 ____D () C:\ProgramData\5438c2da273dec11
2014-05-24 21:26 - 2014-02-15 17:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-24 21:26 - 2012-12-18 22:10 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Mozilla
2014-05-24 21:26 - 2012-12-18 21:56 - 00000000 ____D () C:\Users\Weronika\AppData\Local\CrashDumps
2014-05-24 21:19 - 2014-05-23 03:13 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-24 21:19 - 2013-03-05 19:26 - 00003720 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-24 21:11 - 2014-05-24 21:09 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 21:09 - 2012-12-18 21:53 - 00000000 ____D () C:\Users\Weronika
2014-05-24 21:06 - 2014-05-24 11:46 - 00000000 ____D () C:\Program Files (x86)\webget
2014-05-24 21:05 - 2012-07-26 07:26 - 00000269 _____ () C:\windows\win.ini
2014-05-24 21:04 - 2013-02-15 21:09 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Spotify
2014-05-24 21:04 - 2012-12-19 20:21 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\uTorrent
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-05-24 21:02 - 2012-07-26 07:38 - 00000000 ____D () C:\windows\system32\Sysprep
2014-05-24 20:48 - 2014-05-24 11:47 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 20:48 - 2014-05-21 18:07 - 00000000 ____D () C:\ProgramData\LuckkyCoupoN
2014-05-24 20:46 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\registration
2014-05-24 20:38 - 2012-12-21 14:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-24 20:38 - 2012-12-18 22:50 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Google
2014-05-24 20:35 - 2012-12-18 22:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 20:12 - 2012-07-26 09:21 - 00028256 _____ () C:\windows\setupact.log
2014-05-24 18:16 - 2014-05-24 18:15 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 17:59 - 2014-05-24 11:51 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 17:49 - 2013-02-03 02:44 - 00000000 ____D () C:\windows\Minidump
2014-05-24 16:53 - 2014-05-24 16:52 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-23 13:28 - 2014-05-23 13:21 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-10 20:52 - 2012-09-18 10:57 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-08 20:27 - 2012-12-21 19:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-06 07:14 - 2014-05-24 21:41 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 07:14 - 2014-05-24 21:41 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:40 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:39 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:37 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:26 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-03 12:01 - 2012-12-18 21:57 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Atheros
2014-05-01 22:37 - 2014-05-27 12:53 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:37 - 2014-05-27 12:53 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-01 19:24 - 2012-12-18 21:58 - 00000000 ____D () C:\Users\Weronika\Documents\Bluetooth Folder
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Weronika\AppData\Local\Temp\7za.exe
C:\Users\Weronika\AppData\Local\Temp\hijackthis.exe
C:\Users\Weronika\AppData\Local\Temp\NirCmd.exe
C:\Users\Weronika\AppData\Local\Temp\PEVZ.EXE
C:\Users\Weronika\AppData\Local\Temp\remove.exe
C:\Users\Weronika\AppData\Local\Temp\sed.exe
C:\Users\Weronika\AppData\Local\Temp\shortcut.exe
C:\Users\Weronika\AppData\Local\Temp\swreg.exe
C:\Users\Weronika\AppData\Local\Temp\swxcacls.exe
C:\Users\Weronika\AppData\Local\Temp\wget.exe
C:\Users\Weronika\AppData\Local\Temp\zoek-delete.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-24 21:39] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-25 13:39
==================== End Of Log ============================
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 10:22:40
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AMD Accelerated Video Transcoding (Version: 12.5.100.20808 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8C6A4815-2E50-7B6E-9159-6608871EB5BF}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2008 - Avast Software)
Bundled software uninstaller (HKLM-x32\...\bi_uninstaller) (Version: - ) <==== ATTENTION
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Help Desk (HKLM\...\{D93F0B49-12AA-4AE6-8349-0ECB13B9532F}) (Version: 1.0.5 - Samsung Electronics CO., LTD.)
HTmlConnveeertoor (HKLM-x32\...\{98275A18-3FCB-AD3A-81AC-E29858C2ED53}) (Version: - HtmlConveerrtoor)
KiingCooupon (HKLM-x32\...\{5C28578D-D0F1-699F-01B0-CC0653A28C11}) (Version: - KingCaoupon) <==== ATTENTION
Lollipop (HKCU\...\lollipop_12142229) (Version: - Lollipop Network, S.L.) <==== ATTENTION
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: - PC Utilities Software Limited) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Qtrax Player (HKCU\...\3852854008.portal.qtrax.com) (Version: - portal.qtrax.com)
Qtrax Player (HKLM-x32\...\{89505A66-35F0-4401-B3AD-D077051F8698}) (Version: 01.001.0001 - Qtrax)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.209 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.6.5 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
saVera box (HKLM-x32\...\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}) (Version: - saver bOxu) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Spotify (HKCU\...\Spotify) (Version: 0.9.4.169.gc0399df6 - Spotify AB)
Support Center (HKLM\...\{AC0273F1-68A3-42CF-B487-C594B0A92F8D}) (Version: 2.0.12 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.3 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.3 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
The Sims™ 3 Nowoczesny apartament Akcesoria (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Zwierzaki (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
TiciTaaCOOuepon (HKLM-x32\...\{E370F69F-ED3F-925F-31FC-14D1329A713B}) (Version: - TeicTaCooupon) <==== ATTENTION
topBUyer (HKLM-x32\...\{FE139F4C-CE5B-121A-8A2D-191FA2226094}) (Version: - topbuyer)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUS_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUS_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.1.0.16357 - Blizzard Entertainment)
==================== Restore Points =========================
08-05-2014 18:29:41 Installed DirectX
15-05-2014 16:13:45 Windows Update
24-05-2014 08:17:09 Scheduled Checkpoint
24-05-2014 18:29:49 Restore Operation
27-05-2014 11:16:36 zoek.exe restore point
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2FB2DFD8-5DD0-4002-B596-95CDEDA94AEB} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-09-17] (SEC)
Task: {31013E43-B89F-41AB-9F4A-DE48D4F412E9} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware)
Task: {59FE14C6-F040-4577-9CB3-C9B5F22E8244} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {8E92F223-BD22-40E2-BFCE-BFEC32E21EC6} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {93488060-F62D-460B-BF37-8DCD0B24FB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {969EAAF3-E7ED-4040-A6D4-3C906E1ADAF5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-14] (AVAST Software)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C92B5874-C4C0-47DE-B0A7-70272F3D3FC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {CCFD1D87-CFBD-449A-9876-1FE01D3A61AA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2014-02-13] (Microsoft Corporation)
Task: {E4F9C621-7840-4C8E-A2B5-12024A9D7565} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {E5A559DC-C5C1-4418-B480-B4C8F632217E} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F8689B18-9FF6-48F1-866F-645BF5564B64} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2012-09-14 05:42 - 2012-09-14 05:42 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-09-14 12:18 - 2012-09-14 12:18 - 04238968 _____ () C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
2014-05-27 12:57 - 2014-05-27 10:10 - 02255872 _____ () C:\Program Files\AVAST Software\Avast\defs\14052700\algo.dll
2014-05-28 09:07 - 2014-05-27 22:00 - 02256384 _____ () C:\Program Files\AVAST Software\Avast\defs\14052701\algo.dll
2013-11-24 14:23 - 2013-11-24 14:23 - 00190616 _____ () c:\program files (x86)\optimizer pro\optprocrashSvc.dll
2013-11-24 14:23 - 2013-10-29 12:20 - 04337992 _____ () c:\program files (x86)\optimizer pro\optprocrash.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00962560 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00024064 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00025088 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00217088 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00261632 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00019968 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00302592 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2014-04-25 01:13 - 2014-04-25 01:13 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2012-09-18 10:59 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-12-14 03:00 - 2013-12-14 03:00 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2013-12-06 19:29 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 19:29 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 19:29 - 2013-12-04 04:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ae4
Start Time: 01cf780914a50c77
Termination Time: 533
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id: b9e59c77-e3fc-11e3-becc-50b7c35021ee
Faulting package full name:
Faulting package-relative application ID:
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1788) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\windows\system32\SRU\SRU02052.log.
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x1708
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x254
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WWAHost.exe, version: 6.2.9200.16420, time stamp: 0x505a9152
Faulting module name: WinStoreUI.dll, version: 6.2.9200.16897, time stamp: 0x5351f34b
Exception code: 0xc0000005
Fault offset: 0x000000000008471b
Faulting process id: 0x17c8
Faulting application start time: 0xWWAHost.exe0
Faulting application path: WWAHost.exe1
Faulting module path: WWAHost.exe2
Report Id: WWAHost.exe3
Faulting package full name: WWAHost.exe4
Faulting package-relative application ID: WWAHost.exe5
System errors:
=============
Error: (05/28/2014 09:06:54 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 03:59:45 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.0.0.232.
The computer with the IP address 10.0.0.120 did not allow the name to be claimed by
this computer.
Error: (05/27/2014 01:34:04 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 01:01:34 PM) (Source: DCOM) (EventID: 10010) (User: veronka)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (05/27/2014 00:53:07 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:18:00 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Microsoft Office Sessions:
=========================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.16537ae401cf780914a50c77533C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb9e59c77-e3fc-11e3-becc-50b7c35021ee
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1788SRUJet: C:\windows\system32\SRU\SRU02052.log-1811 (0xfffff8ed)
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea70170801cf778607f7b717C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll45ca5969-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea7025401cf7785ef918f8eC:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll2d4c62c4-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WWAHost.exe6.2.9200.16420505a9152WinStoreUI.dll6.2.9200.168975351f34bc0000005000000000008471b17c801cf7785d51fb939C:\Windows\System32\WWAHost.exeC:\windows\winstore\WinStoreUI.dll1eec4b23-e379-11e3-becb-50b7c35021eewinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
==================== Memory info ===========================
Percentage of memory in use: 29%
Total physical RAM: 3547.03 MB
Available physical RAM: 2518.05 MB
Total Pagefile: 5339.03 MB
Available Pagefile: 3774.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:675.29 GB) (Free:551.34 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 11:13
Pawełku, musimy kafara wyciągnąć.
Przepraszam, żę tyle to trwało, ale musiałem przetestować czy to w ogóle da radę tą metodą. I tak dalej nie mam pewności, ale już moja w tym głowa, żeby sobie poradzić jakimiś sposobami.
Pobierz BlitzBlank. Pobierz także załączony plik ze skryptem. Wreszcie pobierz plik AppInit.zip i wypakuj go - jego zawartość ma być na dysku C:\ (ścieżka C:\AppInit.reg).
Uruchom jako Administrator.
Przejdź do zakładki z napisem Script i wklej tam zawrtość skryptu.
Kliknij Execute Now. Powinno automatycznie zresetować kompa.
Mogą się pojawić błędy przy starcie Windowsa - jeśli tak, to daj mi znać.
Przepraszam, żę tyle to trwało, ale musiałem przetestować czy to w ogóle da radę tą metodą. I tak dalej nie mam pewności, ale już moja w tym głowa, żeby sobie poradzić jakimiś sposobami.
AppInit.reg.zip- (248 Bajty) Ściągnięto 73 razy
- BlitzBlankScript.txt
- (390 Bajty) Ściągnięto 78 razy
Pobierz BlitzBlank. Pobierz także załączony plik ze skryptem. Wreszcie pobierz plik AppInit.zip i wypakuj go - jego zawartość ma być na dysku C:\ (ścieżka C:\AppInit.reg).
Uruchom jako Administrator.
Przejdź do zakładki z napisem Script i wklej tam zawrtość skryptu.
Kliknij Execute Now. Powinno automatycznie zresetować kompa.
Mogą się pojawić błędy przy starcie Windowsa - jeśli tak, to daj mi znać.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 11:30
Syntax error in line 2, invalid folder path
- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Weronika (administrator) on VERONKA on 28-05-2014 11:26:18
Running from C:\Users\Weronika\Desktop
Platform: Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Spotify Ltd) C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
() C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Emsi Software GmbH) C:\Users\Weronika\Desktop\BlitzBlank.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-14] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-14] (AVAST Software)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-25] (Electronic Arts)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [Spotify Web Helper] => C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 10.0.0.110 192.168.2.254
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Weronika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Google Wallet) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-14]
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-14] (AVAST Software)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-14] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-14] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-14] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-14] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-24] (Disc Soft Ltd)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-28 11:26 - 2014-05-28 11:26 - 00011832 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 11:25 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner - Copy.exe
2014-05-28 11:22 - 2014-05-28 11:23 - 00000000 ____D () C:\Users\Weronika\Desktop\AppInit.reg
2014-05-28 11:22 - 2014-05-28 11:08 - 00000235 _____ () C:\AppInit.reg
2014-05-28 11:20 - 2014-05-28 11:21 - 01153912 _____ (Emsi Software GmbH) C:\Users\Weronika\Desktop\BlitzBlank.exe
2014-05-28 11:20 - 2014-05-28 11:20 - 00000390 _____ () C:\Users\Weronika\Desktop\BlitzBlankScript.txt
2014-05-28 11:20 - 2014-05-28 11:20 - 00000248 _____ () C:\Users\Weronika\Desktop\AppInit.reg.zip
2014-05-28 11:18 - 2014-05-28 11:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-05-28 11:18 - 2014-05-28 11:18 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 11:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-05-28 10:22 - 2014-05-28 10:23 - 00039399 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-28 10:07 - 2014-05-28 10:07 - 00003743 _____ () C:\Users\Weronika\Desktop\fixlist.txt
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:19 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:39 - 2014-05-28 11:26 - 00000000 ____D () C:\FRST
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:15 - 2014-05-27 14:35 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:11 - 2014-05-27 13:12 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 15:58 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-05-25 15:36 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-05-25 15:36 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-05-25 15:36 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-05-25 15:36 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-05-24 21:42 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-05-24 21:42 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-24 21:42 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-24 21:42 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-05-24 21:41 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-24 21:41 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-24 21:40 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-24 21:39 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-24 21:39 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-24 21:39 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-24 21:39 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-24 21:39 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-24 21:39 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-24 21:39 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-05-24 21:39 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-24 21:39 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-24 21:39 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-24 21:39 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-24 21:39 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-24 21:39 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-24 21:39 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-05-24 21:38 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-05-24 21:09 - 2014-05-24 21:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 18:15 - 2014-05-24 18:16 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 18:08 - 2014-05-28 11:17 - 00002474 _____ () C:\windows\PFRO.log
2014-05-24 16:52 - 2014-05-24 16:53 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-24 11:51 - 2014-05-24 17:59 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 11:47 - 2014-05-24 20:48 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-23 13:21 - 2014-05-23 13:28 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-23 03:13 - 2014-05-24 21:19 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-06 17:43 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-05-06 17:43 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-05-06 17:43 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
==================== One Month Modified Files and Folders =======
2014-05-28 11:26 - 2014-05-28 11:26 - 00011832 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 11:26 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-28 11:23 - 2014-05-28 11:22 - 00000000 ____D () C:\Users\Weronika\Desktop\AppInit.reg
2014-05-28 11:22 - 2013-07-13 20:03 - 00000000 ____D () C:\Users\Weronika\Desktop\mp3
2014-05-28 11:22 - 2012-07-26 09:28 - 00848230 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-28 11:21 - 2014-05-28 11:20 - 01153912 _____ (Emsi Software GmbH) C:\Users\Weronika\Desktop\BlitzBlank.exe
2014-05-28 11:20 - 2014-05-28 11:20 - 00000390 _____ () C:\Users\Weronika\Desktop\BlitzBlankScript.txt
2014-05-28 11:20 - 2014-05-28 11:20 - 00000248 _____ () C:\Users\Weronika\Desktop\AppInit.reg.zip
2014-05-28 11:20 - 2012-09-18 10:53 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-28 11:19 - 2012-12-21 14:09 - 00000000 ____D () C:\ProgramData\Origin
2014-05-28 11:18 - 2014-05-28 11:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-05-28 11:18 - 2014-05-28 11:18 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 11:18 - 2012-12-21 19:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-28 11:17 - 2014-05-24 18:08 - 00002474 _____ () C:\windows\PFRO.log
2014-05-28 11:17 - 2013-03-05 01:41 - 00001068 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-28 11:17 - 2013-03-05 01:41 - 00001064 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-28 11:17 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-28 11:13 - 2012-12-18 21:53 - 00000000 ____D () C:\Users\Weronika
2014-05-28 11:08 - 2014-05-28 11:22 - 00000235 _____ () C:\AppInit.reg
2014-05-28 11:00 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-05-28 10:29 - 2013-03-05 01:42 - 00002201 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-28 10:26 - 2013-03-05 01:41 - 00004042 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-28 10:26 - 2013-03-05 01:41 - 00003806 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-28 10:23 - 2014-05-28 10:22 - 00039399 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-28 10:08 - 2012-07-26 10:12 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-05-28 10:07 - 2014-05-28 10:07 - 00003743 _____ () C:\Users\Weronika\Desktop\fixlist.txt
2014-05-28 09:21 - 2014-05-28 11:25 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner - Copy.exe
2014-05-28 09:19 - 2012-09-18 10:04 - 01159558 _____ () C:\windows\WindowsUpdate.log
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:15 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:19 - 2014-05-27 14:35 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:12 - 2014-05-27 13:11 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-27 00:40 - 2012-07-26 07:26 - 00524288 ___SH () C:\windows\system32\config\BBI
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 14:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-05-25 13:35 - 2012-12-18 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1001512420-2673596773-960679196-1001
2014-05-24 22:18 - 2013-03-05 19:26 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 22:16 - 2013-11-24 14:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-24 22:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-05-24 22:11 - 2013-08-19 08:21 - 00000000 ____D () C:\windows\system32\MRT
2014-05-24 22:07 - 2012-12-19 19:26 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-24 22:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-05-24 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-05-24 21:30 - 2014-04-01 18:59 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-24 21:28 - 2014-01-05 18:08 - 00000000 ____D () C:\ProgramData\5438c2da273dec11
2014-05-24 21:26 - 2014-02-15 17:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-24 21:26 - 2012-12-18 22:10 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Mozilla
2014-05-24 21:26 - 2012-12-18 21:56 - 00000000 ____D () C:\Users\Weronika\AppData\Local\CrashDumps
2014-05-24 21:19 - 2014-05-23 03:13 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-24 21:19 - 2013-03-05 19:26 - 00003720 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-24 21:11 - 2014-05-24 21:09 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 21:05 - 2012-07-26 07:26 - 00000269 _____ () C:\windows\win.ini
2014-05-24 21:04 - 2013-02-15 21:09 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Spotify
2014-05-24 21:04 - 2012-12-19 20:21 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\uTorrent
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-05-24 21:02 - 2012-07-26 07:38 - 00000000 ____D () C:\windows\system32\Sysprep
2014-05-24 20:48 - 2014-05-24 11:47 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 20:46 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\registration
2014-05-24 20:38 - 2012-12-21 14:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-24 20:38 - 2012-12-18 22:50 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Google
2014-05-24 20:35 - 2012-12-18 22:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 20:12 - 2012-07-26 09:21 - 00028256 _____ () C:\windows\setupact.log
2014-05-24 18:16 - 2014-05-24 18:15 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 17:59 - 2014-05-24 11:51 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 17:49 - 2013-02-03 02:44 - 00000000 ____D () C:\windows\Minidump
2014-05-24 16:53 - 2014-05-24 16:52 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-23 13:28 - 2014-05-23 13:21 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-10 20:52 - 2012-09-18 10:57 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-08 20:27 - 2012-12-21 19:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-06 07:14 - 2014-05-24 21:41 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 07:14 - 2014-05-24 21:41 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:40 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:39 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:37 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:26 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-03 12:01 - 2012-12-18 21:57 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Atheros
2014-05-01 22:37 - 2014-05-27 12:53 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:37 - 2014-05-27 12:53 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-01 19:24 - 2012-12-18 21:58 - 00000000 ____D () C:\Users\Weronika\Documents\Bluetooth Folder
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Weronika\AppData\Local\Temp\7za.exe
C:\Users\Weronika\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Weronika\AppData\Local\Temp\hijackthis.exe
C:\Users\Weronika\AppData\Local\Temp\NirCmd.exe
C:\Users\Weronika\AppData\Local\Temp\PEVZ.EXE
C:\Users\Weronika\AppData\Local\Temp\remove.exe
C:\Users\Weronika\AppData\Local\Temp\sed.exe
C:\Users\Weronika\AppData\Local\Temp\shortcut.exe
C:\Users\Weronika\AppData\Local\Temp\swreg.exe
C:\Users\Weronika\AppData\Local\Temp\swxcacls.exe
C:\Users\Weronika\AppData\Local\Temp\wget.exe
C:\Users\Weronika\AppData\Local\Temp\zoek-delete.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-24 21:39] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-25 13:39
==================== End Of Log ============================
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 11:28:19
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AMD Accelerated Video Transcoding (Version: 12.5.100.20808 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8C6A4815-2E50-7B6E-9159-6608871EB5BF}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2008 - Avast Software)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Help Desk (HKLM\...\{D93F0B49-12AA-4AE6-8349-0ECB13B9532F}) (Version: 1.0.5 - Samsung Electronics CO., LTD.)
HTmlConnveeertoor (HKLM-x32\...\{98275A18-3FCB-AD3A-81AC-E29858C2ED53}) (Version: - HtmlConveerrtoor)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Qtrax Player (HKCU\...\3852854008.portal.qtrax.com) (Version: - portal.qtrax.com)
Qtrax Player (HKLM-x32\...\{89505A66-35F0-4401-B3AD-D077051F8698}) (Version: 01.001.0001 - Qtrax)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.209 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.6.5 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Spotify (HKCU\...\Spotify) (Version: 0.9.4.169.gc0399df6 - Spotify AB)
Support Center (HKLM\...\{AC0273F1-68A3-42CF-B487-C594B0A92F8D}) (Version: 2.0.12 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.3 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.3 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
The Sims™ 3 Nowoczesny apartament Akcesoria (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Zwierzaki (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUS_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUS_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.1.0.16357 - Blizzard Entertainment)
==================== Restore Points =========================
08-05-2014 18:29:41 Installed DirectX
15-05-2014 16:13:45 Windows Update
24-05-2014 08:17:09 Scheduled Checkpoint
24-05-2014 18:29:49 Restore Operation
27-05-2014 11:16:36 zoek.exe restore point
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2FB2DFD8-5DD0-4002-B596-95CDEDA94AEB} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-09-17] (SEC)
Task: {31013E43-B89F-41AB-9F4A-DE48D4F412E9} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware)
Task: {59FE14C6-F040-4577-9CB3-C9B5F22E8244} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {8E92F223-BD22-40E2-BFCE-BFEC32E21EC6} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {93488060-F62D-460B-BF37-8DCD0B24FB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {969EAAF3-E7ED-4040-A6D4-3C906E1ADAF5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-14] (AVAST Software)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C92B5874-C4C0-47DE-B0A7-70272F3D3FC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {CCFD1D87-CFBD-449A-9876-1FE01D3A61AA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} - \QtraxPlayer No Task File <==== ATTENTION
Task: {E4F9C621-7840-4C8E-A2B5-12024A9D7565} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {E5A559DC-C5C1-4418-B480-B4C8F632217E} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F8689B18-9FF6-48F1-866F-645BF5564B64} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2012-09-14 05:42 - 2012-09-14 05:42 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-09-14 12:18 - 2012-09-14 12:18 - 04238968 _____ () C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
2014-05-28 09:07 - 2014-05-27 22:00 - 02256384 _____ () C:\Program Files\AVAST Software\Avast\defs\14052701\algo.dll
2014-05-28 11:18 - 2014-05-28 10:37 - 02259456 _____ () C:\Program Files\AVAST Software\Avast\defs\14052800\algo.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2012-09-18 10:59 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-12-14 03:00 - 2013-12-14 03:00 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2014-05-28 10:29 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ae4
Start Time: 01cf780914a50c77
Termination Time: 533
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id: b9e59c77-e3fc-11e3-becc-50b7c35021ee
Faulting package full name:
Faulting package-relative application ID:
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1788) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\windows\system32\SRU\SRU02052.log.
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x1708
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x254
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WWAHost.exe, version: 6.2.9200.16420, time stamp: 0x505a9152
Faulting module name: WinStoreUI.dll, version: 6.2.9200.16897, time stamp: 0x5351f34b
Exception code: 0xc0000005
Fault offset: 0x000000000008471b
Faulting process id: 0x17c8
Faulting application start time: 0xWWAHost.exe0
Faulting application path: WWAHost.exe1
Faulting module path: WWAHost.exe2
Report Id: WWAHost.exe3
Faulting package full name: WWAHost.exe4
Faulting package-relative application ID: WWAHost.exe5
System errors:
=============
Error: (05/28/2014 11:17:14 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/28/2014 09:06:54 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 03:59:45 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.0.0.232.
The computer with the IP address 10.0.0.120 did not allow the name to be claimed by
this computer.
Error: (05/27/2014 01:34:04 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 01:01:34 PM) (Source: DCOM) (EventID: 10010) (User: veronka)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (05/27/2014 00:53:07 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Microsoft Office Sessions:
=========================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.16537ae401cf780914a50c77533C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb9e59c77-e3fc-11e3-becc-50b7c35021ee
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1788SRUJet: C:\windows\system32\SRU\SRU02052.log-1811 (0xfffff8ed)
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea70170801cf778607f7b717C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll45ca5969-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea7025401cf7785ef918f8eC:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll2d4c62c4-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WWAHost.exe6.2.9200.16420505a9152WinStoreUI.dll6.2.9200.168975351f34bc0000005000000000008471b17c801cf7785d51fb939C:\Windows\System32\WWAHost.exeC:\windows\winstore\WinStoreUI.dll1eec4b23-e379-11e3-becb-50b7c35021eewinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 3547.03 MB
Available physical RAM: 2410.07 MB
Total Pagefile: 5339.03 MB
Available Pagefile: 4074.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:675.29 GB) (Free:551.15 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 11:43
Pluć się pluje, ale usunął 
Pobierz załączony plik i umieść go obok FRST.
Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.
Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.
Pobierz załączony plik i umieść go obok FRST.
- fixlist.txt
- (423 Bajty) Ściągnięto 99 razy
Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.
Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 11:51
- Kod: Zaznacz wszystko
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 11:48:31 Run:2
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Users\Weronika\Desktop\AppInit.reg
C:\AppInit.reg
C:\Users\Weronika\Desktop\BlitzBlank.exe
C:\Users\Weronika\Desktop\BlitzBlankScript.txt
C:\Users\Weronika\Desktop\AppInit.reg.zip
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey
C:\Users\Weronika\AppData\Local\Temp\wget.exe
Task: {E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} - \QtraxPlayer No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:373E1720
*****************
C:\Users\Weronika\Desktop\AppInit.reg => Moved successfully.
C:\AppInit.reg => Moved successfully.
C:\Users\Weronika\Desktop\BlitzBlank.exe => Moved successfully.
C:\Users\Weronika\Desktop\BlitzBlankScript.txt => Moved successfully.
C:\Users\Weronika\Desktop\AppInit.reg.zip => Moved successfully.
C:\ProgramData\MakeMarkerFile.exe => Moved successfully.
C:\Users\EasySurvey => Moved successfully.
C:\Users\Weronika\AppData\Local\Temp\wget.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4DA0E9C-2D11-46E5-95D2-2452D9C3B9E3} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\QtraxPlayer => Key deleted successfully.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
==== End of Fixlog ====
Nowe:
- Kod: Zaznacz wszystko
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Weronika (administrator) on VERONKA on 28-05-2014 11:48:47
Running from C:\Users\Weronika\Desktop
Platform: Windows 8 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Spotify Ltd) C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
() C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [764544 2012-09-14] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-14] (AVAST Software)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-04-25] (Electronic Arts)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [Spotify Web Helper] => C:\Users\Weronika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-09-24] (Spotify Ltd)
HKU\S-1-5-21-1001512420-2673596773-960679196-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.2 10.0.0.110 192.168.2.254
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Weronika\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-11]
Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (Google Wallet) - C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-11]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-14]
==================== Services (Whitelisted) =================
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-14] (AVAST Software)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-09-05] (Samsung Electronics CO., LTD.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-22] (AppEx Networks Corporation)
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-14] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-14] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-14] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-14] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-14] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-09-14] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-11-24] (Disc Soft Ltd)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-28 11:48 - 2014-05-28 11:49 - 00011831 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 11:28 - 2014-05-28 11:29 - 00037438 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-28 11:25 - 2014-05-28 09:21 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner - Copy.exe
2014-05-28 11:18 - 2014-05-28 11:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-05-28 11:18 - 2014-05-28 11:18 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 11:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:19 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:39 - 2014-05-28 11:48 - 00000000 ____D () C:\FRST
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:15 - 2014-05-27 14:35 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:11 - 2014-05-27 13:12 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-27 12:53 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 15:58 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_26.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_25.dll
2014-05-25 15:58 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_25.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_24.dll
2014-05-25 15:58 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_24.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-05-25 15:36 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\windows\system32\gpedit.dll
2014-05-25 15:36 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpedit.dll
2014-05-25 15:36 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-05-25 15:36 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2014-05-25 15:36 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2014-05-25 15:36 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\IPMIDrv.sys
2014-05-24 21:42 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdBoot.sys
2014-05-24 21:42 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2014-05-24 21:42 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2014-05-24 21:42 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdFilter.sys
2014-05-24 21:41 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-24 21:41 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-24 21:40 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-24 21:39 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-24 21:39 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-24 21:39 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-24 21:39 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2014-05-24 21:39 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe
2014-05-24 21:39 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\windows\system32\usercpl.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-05-24 21:39 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\windows\system32\lsm.dll
2014-05-24 21:39 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\windows\SysWOW64\usercpl.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-05-24 21:39 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-05-24 21:39 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-05-24 21:39 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\workerdd.dll
2014-05-24 21:39 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2014-05-24 21:39 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2014-05-24 21:39 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\windows\SysWOW64\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2014-05-24 21:39 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\windows\system32\objsel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\windows\system32\dimsroam.dll
2014-05-24 21:39 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2014-05-24 21:39 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2014-05-24 21:39 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-05-24 21:39 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2014-05-24 21:38 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-05-24 21:09 - 2014-05-24 21:11 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 18:15 - 2014-05-24 18:16 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 18:08 - 2014-05-28 11:17 - 00002474 _____ () C:\windows\PFRO.log
2014-05-24 16:52 - 2014-05-24 16:53 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-24 11:51 - 2014-05-24 17:59 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 11:47 - 2014-05-24 20:48 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-23 13:21 - 2014-05-23 13:28 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-23 03:13 - 2014-05-24 21:19 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-06 17:43 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2014-05-06 17:43 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2014-05-06 17:43 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2014-05-06 17:43 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
==================== One Month Modified Files and Folders =======
2014-05-28 11:49 - 2014-05-28 11:48 - 00011831 _____ () C:\Users\Weronika\Desktop\FRST.txt
2014-05-28 11:48 - 2014-05-27 13:39 - 00000000 ____D () C:\FRST
2014-05-28 11:48 - 2013-07-13 20:03 - 00000000 ____D () C:\Users\Weronika\Desktop\mp3
2014-05-28 11:32 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-05-28 11:29 - 2014-05-28 11:28 - 00037438 _____ () C:\Users\Weronika\Desktop\Addition.txt
2014-05-28 11:22 - 2012-07-26 09:28 - 00848230 _____ () C:\windows\system32\PerfStringBackup.INI
2014-05-28 11:20 - 2012-09-18 10:53 - 00000000 ____D () C:\ProgramData\WinClon
2014-05-28 11:19 - 2012-12-21 14:09 - 00000000 ____D () C:\ProgramData\Origin
2014-05-28 11:18 - 2014-05-28 11:18 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-05-28 11:18 - 2014-05-28 11:18 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-28 11:18 - 2012-12-21 19:35 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-28 11:17 - 2014-05-24 18:08 - 00002474 _____ () C:\windows\PFRO.log
2014-05-28 11:17 - 2013-03-05 01:41 - 00001068 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-28 11:17 - 2013-03-05 01:41 - 00001064 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-28 11:17 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-05-28 11:13 - 2012-12-18 21:53 - 00000000 ____D () C:\Users\Weronika
2014-05-28 10:29 - 2013-03-05 01:42 - 00002201 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-28 10:26 - 2013-03-05 01:41 - 00004042 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-28 10:26 - 2013-03-05 01:41 - 00003806 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-28 10:08 - 2012-07-26 10:12 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-05-28 09:21 - 2014-05-28 11:25 - 01327971 _____ () C:\Users\Weronika\Desktop\AdwCleaner - Copy.exe
2014-05-28 09:19 - 2012-09-18 10:04 - 01159558 _____ () C:\windows\WindowsUpdate.log
2014-05-27 14:35 - 2014-05-27 14:35 - 00000353 _____ () C:\zoek-results.log
2014-05-27 14:35 - 2014-05-27 13:15 - 00000460 _____ () C:\runcheck.txt
2014-05-27 13:38 - 2014-05-27 13:38 - 02066944 _____ (Farbar) C:\Users\Weronika\Desktop\FRST64.exe
2014-05-27 13:19 - 2014-05-27 14:35 - 00020796 _____ () C:\zoek-results2014-05-27-111908.log
2014-05-27 13:13 - 2014-05-27 13:13 - 00000000 ____D () C:\zoek_backup
2014-05-27 13:12 - 2014-05-27 13:11 - 01285120 _____ () C:\Users\Weronika\Desktop\zoek.exe
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-27 12:54 - 2012-12-18 21:57 - 00000000 ___RD () C:\Users\Weronika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-27 00:40 - 2012-07-26 07:26 - 00524288 ___SH () C:\windows\system32\config\BBI
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\windows\ToastData
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-27 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-25 15:58 - 2014-05-25 15:58 - 00000398 _____ () C:\windows\DirectX.log
2014-05-25 14:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-05-25 13:35 - 2012-12-18 22:04 - 00003598 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1001512420-2673596773-960679196-1001
2014-05-24 22:18 - 2013-03-05 19:26 - 00000830 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 22:16 - 2013-11-24 14:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-24 22:16 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\SecureBootUpdates
2014-05-24 22:11 - 2013-08-19 08:21 - 00000000 ____D () C:\windows\system32\MRT
2014-05-24 22:07 - 2012-12-19 19:26 - 93223848 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-05-24 22:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-05-24 21:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-05-24 21:30 - 2014-04-01 18:59 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-05-24 21:28 - 2014-01-05 18:08 - 00000000 ____D () C:\ProgramData\5438c2da273dec11
2014-05-24 21:26 - 2014-02-15 17:45 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-24 21:26 - 2012-12-18 22:10 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Mozilla
2014-05-24 21:26 - 2012-12-18 21:56 - 00000000 ____D () C:\Users\Weronika\AppData\Local\CrashDumps
2014-05-24 21:19 - 2014-05-23 03:13 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Adobe
2014-05-24 21:19 - 2013-03-05 19:26 - 00003720 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-05-24 21:11 - 2014-05-24 21:09 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-24 21:09 - 2014-05-24 21:09 - 00001976 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-05-24 21:05 - 2012-07-26 07:26 - 00000269 _____ () C:\windows\win.ini
2014-05-24 21:04 - 2013-02-15 21:09 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Spotify
2014-05-24 21:04 - 2012-12-19 20:21 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\uTorrent
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-24 21:04 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\WinStore
2014-05-24 21:02 - 2012-07-26 07:38 - 00000000 ____D () C:\windows\system32\Sysprep
2014-05-24 20:48 - 2014-05-24 11:47 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\PhotoScape
2014-05-24 20:46 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\registration
2014-05-24 20:38 - 2012-12-21 14:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-24 20:38 - 2012-12-18 22:50 - 00000000 ____D () C:\Users\Weronika\AppData\Local\Google
2014-05-24 20:35 - 2012-12-18 22:51 - 00000000 ____D () C:\Program Files (x86)\Google
2014-05-24 20:12 - 2012-07-26 09:21 - 00028256 _____ () C:\windows\setupact.log
2014-05-24 18:16 - 2014-05-24 18:15 - 00037446 _____ () C:\Users\Weronika\Downloads\index.gz
2014-05-24 17:59 - 2014-05-24 11:51 - 00000000 ____D () C:\Users\Weronika\Desktop\Originals
2014-05-24 17:49 - 2013-02-03 02:44 - 00000000 ____D () C:\windows\Minidump
2014-05-24 16:53 - 2014-05-24 16:52 - 00000674 _____ () C:\Users\Weronika\Downloads\download
2014-05-23 13:28 - 2014-05-23 13:21 - 84353270 _____ () C:\Users\Weronika\Downloads\World of Warcraft - The Burning Crusade.rar
2014-05-23 11:36 - 2014-05-23 11:36 - 00663105 _____ () C:\Users\Weronika\Downloads\[_HellGround.net_]_WoW_Burning_Crusade_2.4.3_full.rar.torrent
2014-05-10 20:52 - 2012-09-18 10:57 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-08 20:27 - 2012-12-21 19:37 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-06 07:14 - 2014-05-24 21:41 - 19274752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-05-06 07:14 - 2014-05-24 21:41 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:40 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-05-06 05:48 - 2014-05-24 21:39 - 14367232 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-05-06 05:37 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-05-06 05:26 - 2014-05-24 21:39 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-05-03 12:01 - 2012-12-18 21:57 - 00000000 ____D () C:\Users\Weronika\AppData\Roaming\Atheros
2014-05-01 22:37 - 2014-05-27 12:53 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:37 - 2014-05-27 12:53 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-01 19:24 - 2012-12-18 21:58 - 00000000 ____D () C:\Users\Weronika\Documents\Bluetooth Folder
2014-04-29 00:17 - 2014-04-29 00:17 - 00019274 _____ () C:\Users\Weronika\Downloads\CommunityWalk_877454.kml
Some content of TEMP:
====================
C:\Users\Weronika\AppData\Local\Temp\7za.exe
C:\Users\Weronika\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Weronika\AppData\Local\Temp\hijackthis.exe
C:\Users\Weronika\AppData\Local\Temp\NirCmd.exe
C:\Users\Weronika\AppData\Local\Temp\PEVZ.EXE
C:\Users\Weronika\AppData\Local\Temp\remove.exe
C:\Users\Weronika\AppData\Local\Temp\sed.exe
C:\Users\Weronika\AppData\Local\Temp\shortcut.exe
C:\Users\Weronika\AppData\Local\Temp\swreg.exe
C:\Users\Weronika\AppData\Local\Temp\swxcacls.exe
C:\Users\Weronika\AppData\Local\Temp\zoek-delete.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-24 21:39] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-25 13:39
==================== End Of Log ============================
- Kod: Zaznacz wszystko
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Weronika at 2014-05-28 11:50:18
Running from C:\Users\Weronika\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.2.3.28705 - BitTorrent Inc.)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.3) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.3 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Allshare Play Link (HKLM-x32\...\{91786428-D4AA-476D-8AF9-A63FFAC2901F}) (Version: 1.0.0 - Samsung)
AMD Accelerated Video Transcoding (Version: 12.5.100.20808 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8C6A4815-2E50-7B6E-9159-6608871EB5BF}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2008 - Avast Software)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0808.1023.16666 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0808.1024.16666 - Advanced Micro Devices, Inc.) Hidden
Colin McRae Rally 2 (HKLM-x32\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version: - )
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.1912 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4421.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft)
Galeria fotografii (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Help Desk (HKLM\...\{D93F0B49-12AA-4AE6-8349-0ECB13B9532F}) (Version: 1.0.5 - Samsung Electronics CO., LTD.)
HTmlConnveeertoor (HKLM-x32\...\{98275A18-3FCB-AD3A-81AC-E29858C2ED53}) (Version: - HtmlConveerrtoor)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
NapiProjekt (2.1.0.2287) (HKLM-x32\...\NapiProjekt_is1) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.3_is1) (Version: 13.3.0.1584 - FranmoSoftware - Maciej Opaliński)
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Opera Stable 21.0.1432.67 (HKLM-x32\...\Opera 21.0.1432.67) (Version: 21.0.1432.67 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.0.14.2148 - Electronic Arts, Inc.)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Qtrax Player (HKCU\...\3852854008.portal.qtrax.com) (Version: - portal.qtrax.com)
Qtrax Player (HKLM-x32\...\{89505A66-35F0-4401-B3AD-D077051F8698}) (Version: 01.001.0001 - Qtrax)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.209 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.6.5 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.45 - Samsung Electronics CO., LTD.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Settings (HKLM-x32\...\{52E5DE60-C96B-42CC-9A37-FE04725940AE}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
Spotify (HKCU\...\Spotify) (Version: 0.9.4.169.gc0399df6 - Spotify AB)
Support Center (HKLM\...\{AC0273F1-68A3-42CF-B487-C594B0A92F8D}) (Version: 2.0.12 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.3 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.11.3 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
The Sims™ 3 Nowoczesny apartament Akcesoria (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.13.1 - Electronic Arts)
The Sims™ 3 Zwierzaki (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.PROPLUS_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.PROPLUS_{1B21CC3B-3FE0-4386-B29E-6EF68C45FD9E}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
User Guide (HKLM-x32\...\{66172F70-0BDE-4BAB-A973-E2E4EF501F6D}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass (07/27/2012 20.57.1.735) (HKLM\...\9F04C462DAB591BDCCE784F77E4D4F1736010B92) (Version: 07/27/2012 20.57.1.735 - Samsung Electronics Co. Ltd.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinRAR 5.00 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: 5.1.0.16357 - Blizzard Entertainment)
==================== Restore Points =========================
08-05-2014 18:29:41 Installed DirectX
15-05-2014 16:13:45 Windows Update
24-05-2014 08:17:09 Scheduled Checkpoint
24-05-2014 18:29:49 Restore Operation
27-05-2014 11:16:36 zoek.exe restore point
==================== Hosts content: ==========================
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2FB2DFD8-5DD0-4002-B596-95CDEDA94AEB} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-09-17] (SEC)
Task: {31013E43-B89F-41AB-9F4A-DE48D4F412E9} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe [2013-06-14] (FranmoSoftware)
Task: {59FE14C6-F040-4577-9CB3-C9B5F22E8244} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-24] (Synaptics Incorporated)
Task: {8E92F223-BD22-40E2-BFCE-BFEC32E21EC6} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-09-05] (Samsung Electronics CO., LTD.)
Task: {93488060-F62D-460B-BF37-8DCD0B24FB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {969EAAF3-E7ED-4040-A6D4-3C906E1ADAF5} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-14] (AVAST Software)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C92B5874-C4C0-47DE-B0A7-70272F3D3FC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-05] (Google Inc.)
Task: {CCFD1D87-CFBD-449A-9876-1FE01D3A61AA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {E4F9C621-7840-4C8E-A2B5-12024A9D7565} - System32\Tasks\WLANStartup => C:\Program Files (x86)\Samsung\Easy Settings\WLANStartup.exe
Task: {E5A559DC-C5C1-4418-B480-B4C8F632217E} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F8689B18-9FF6-48F1-866F-645BF5564B64} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2012-09-05 09:50 - 2012-09-05 09:50 - 00085112 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2012-09-14 05:42 - 2012-09-14 05:42 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-09-14 12:18 - 2012-09-14 12:18 - 04238968 _____ () C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
2014-05-28 09:07 - 2014-05-27 22:00 - 02256384 _____ () C:\Program Files\AVAST Software\Avast\defs\14052701\algo.dll
2014-05-28 11:18 - 2014-05-28 10:37 - 02259456 _____ () C:\Program Files\AVAST Software\Avast\defs\14052800\algo.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00103544 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 01012856 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-09-05 09:50 - 2012-09-05 09:50 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2012-09-18 10:59 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 04:34 - 2012-06-08 04:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-12-14 03:00 - 2013-12-14 03:00 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\office.odf
2014-05-28 10:29 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-28 10:29 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program IEXPLORE.EXE version 10.0.9200.16537 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ae4
Start Time: 01cf780914a50c77
Termination Time: 533
Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Report Id: b9e59c77-e3fc-11e3-becc-50b7c35021ee
Faulting package full name:
Faulting package-relative application ID:
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (1788) SRUJet: Error -1811 (0xfffff8ed) occurred while opening logfile C:\windows\system32\SRU\SRU02052.log.
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x1708
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Launcher.exe_Opera Internet Browser, version: 20.0.1387.91, time stamp: 0x533be90f
Faulting module name: launcher_lib.dll, version: 0.0.0.0, time stamp: 0x533be90b
Exception code: 0x80000003
Fault offset: 0x0000ea70
Faulting process id: 0x254
Faulting application start time: 0xLauncher.exe_Opera Internet Browser0
Faulting application path: Launcher.exe_Opera Internet Browser1
Faulting module path: Launcher.exe_Opera Internet Browser2
Report Id: Launcher.exe_Opera Internet Browser3
Faulting package full name: Launcher.exe_Opera Internet Browser4
Faulting package-relative application ID: Launcher.exe_Opera Internet Browser5
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WWAHost.exe, version: 6.2.9200.16420, time stamp: 0x505a9152
Faulting module name: WinStoreUI.dll, version: 6.2.9200.16897, time stamp: 0x5351f34b
Exception code: 0xc0000005
Fault offset: 0x000000000008471b
Faulting process id: 0x17c8
Faulting application start time: 0xWWAHost.exe0
Faulting application path: WWAHost.exe1
Faulting module path: WWAHost.exe2
Report Id: WWAHost.exe3
Faulting package full name: WWAHost.exe4
Faulting package-relative application ID: WWAHost.exe5
System errors:
=============
Error: (05/28/2014 11:17:14 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/28/2014 09:06:54 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 03:59:45 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.0.0.232.
The computer with the IP address 10.0.0.120 did not allow the name to be claimed by
this computer.
Error: (05/27/2014 01:34:04 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/27/2014 01:01:34 PM) (Source: DCOM) (EventID: 10010) (User: veronka)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}
Error: (05/27/2014 00:53:07 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT AUTHORITY)
Description: 0xc000014d0
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Error: (05/24/2014 10:20:04 PM) (Source: DCOM) (EventID: 10001) (User: veronka)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaUnavailableUnavailable
Microsoft Office Sessions:
=========================
Error: (05/27/2014 01:27:16 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (05/25/2014 01:07:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: IEXPLORE.EXE10.0.9200.16537ae401cf780914a50c77533C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEb9e59c77-e3fc-11e3-becc-50b7c35021ee
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:20:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: veronka)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2147024865
Error: (05/24/2014 10:00:00 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost1788SRUJet: C:\windows\system32\SRU\SRU02052.log-1811 (0xfffff8ed)
Error: (05/24/2014 09:26:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea70170801cf778607f7b717C:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll45ca5969-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Launcher.exe_Opera Internet Browser20.0.1387.91533be90flauncher_lib.dll0.0.0.0533be90b800000030000ea7025401cf7785ef918f8eC:\Program Files (x86)\Opera\Launcher.exeC:\Program Files (x86)\Opera\20.0.1387.91\launcher_lib.dll2d4c62c4-e379-11e3-becb-50b7c35021ee
Error: (05/24/2014 09:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WWAHost.exe6.2.9200.16420505a9152WinStoreUI.dll6.2.9200.168975351f34bc0000005000000000008471b17c801cf7785d51fb939C:\Windows\System32\WWAHost.exeC:\windows\winstore\WinStoreUI.dll1eec4b23-e379-11e3-becb-50b7c35021eewinstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store
==================== Memory info ===========================
Percentage of memory in use: 32%
Total physical RAM: 3547.03 MB
Available physical RAM: 2384.08 MB
Total Pagefile: 5339.03 MB
Available Pagefile: 4010.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:675.29 GB) (Free:551.14 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 11:58
Pobierz i zainstaluj Malwarebytes' Anti-Malware.
Podczas instalacji odznacz opcję "free pro-version trial" czy jakoś tak.
Uaktualnij i przeprowadź skanowanie.
Załącz wynikowy raport.
Podczas instalacji odznacz opcję "free pro-version trial" czy jakoś tak.
Uaktualnij i przeprowadź skanowanie.
Załącz wynikowy raport.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 12:54
- Kod: Zaznacz wszystko
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 2014-05-28
Scan Time: 12:19:16
Logfile: mbam.txt
Administrator: No
Version: 2.00.2.1012
Malware Database: v2014.05.28.04
Rootkit Database: v2014.05.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 8
CPU: x64
File System: NTFS
User: Weronika
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 268296
Time Elapsed: 24 min, 39 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 5
PUP.Optional.SweetIM, C:\Users\Weronika\Downloads\SweetIMSetup.exe, Quarantined, [b113dc7ac8b3e155fb92b6c7877d27d9],
PUP.Optional.OpenCandy, C:\Users\Weronika\Downloads\DTLite4461-0327(dobreprogramy.pl).exe, Quarantined, [497bcc8accaff244b349592446be3fc1],
PUP.Optional.InstallCore, C:\Users\Weronika\Downloads\Odkurzacz(12322).exe, Quarantined, [8242cb8bf982ef47ef8bda2cf60b6a96],
PUP.Optional.ShoppingGate.A, C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTPS_INST.SHOPPINGATE.INFO_0.LOCALSTORAGE, Quarantined, [c400c591bcbf3df94b940b83cd35b54b],
PUP.Optional.ShoppingGate.A, C:\Users\Weronika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTPS_INST.SHOPPINGATE.INFO_0.LOCALSTORAGE-JOURNAL, Quarantined, [9430e76fdba0de58eff0e6a89d65ec14],
Physical Sectors: 0
(No malicious items detected)
(end)
| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 13:05
No i będzie tyle. Czy mamy jeszcze jakieś problemy? Napadające reklamy?
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
Wirusy, reklamy?
przez ToServeAndProtect 28 Maj 2014, 13:17
a usunąć wszystko ? takie dopieszczenie?
? takie dopieszczenie?| MSI X470 GAMING PLUS | AMD Ryzen 7 2700 | Kingston HyperX DDR4 Fury Black 16GB | PNY GeForce GTX 1080 XLR8 8GB GDDR5X | AOC Q3279VWFD8 31.5" + IIYAMA ProLite E2407HDS 24" |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
| SSD Samsung 860 Evo 512GB + SSD Samsung 830 128GB + SSHD Seagate 2TB + WD Caviar Blue 650GB + WD Caviar Green 1TB | Powered by Supremo FM2 Gold 750W |
-
ToServeAndProtect - »ekspert
- Posty: 14516
- Dołączenie: 12 Maj 2006, 16:36
- Miejscowość: Warszawa
- Pochwały: 461
-
Wirusy, reklamy?
przez NieWiem 28 Maj 2014, 13:21
Teraz będziem usuwać.
Pobierz DelFix na pulpit.
Uruchom jako administrator.
Zaznacz opcje:
Delfix powinien posprzątać po wszystkim.
Pobierz DelFix na pulpit.
Uruchom jako administrator.
Zaznacz opcje:
- Remove disinfection tools
- Create registry backup
- Purge system restore
Delfix powinien posprzątać po wszystkim.
1. Pomocy udzielam wyłącznie na licencji beerware!
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
2. Jeśli nie odpowiadam od razu w temacie, to znaczy że mam życie poza internetem. Uszanuj mój dobrowolnie poświęcony czas i nie oczekuj wszystkiego natychmiast. Jeśli nie odpowiadam przez 48 godzin, przyślij PW.
STOP ++> trollom, dzieciom neostrady, emo, Forestom, kotożercom i nienawiści [ nie dotyczy wymienionych wcześniej ]
-
NieWiem - ~user
- Posty: 2183
- Dołączenie: 19 Cze 2009, 17:01
- Miejscowość: Okolice Okolic
- Pochwały: 171
-
22 posty(ów) • Strona 1 z 2 • 1, 2
Kto jest na forum
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 9 gości