W przeglądarce wyskakują teraz niechciane okienka z reklamami.
Adw Cleaner nie pomógł. Malware bytes też nie. Ściągnąłem FRTS, zrobiłem i skana i na tym moja wiedza się kończy. Pomoże mi ktoś?
Wklejam loga:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-01-2015 01
Ran by Marcin (administrator) on IDEA-PC on 14-01-2015 23:52:26
Running from C:\Users\Marcin\Downloads
Loaded Profiles: UpdatusUser & Marcin & (Available profiles: UpdatusUser & Marcin & dvoorek & Gość)
Platform: Windows 8 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-
farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Broadcom Corporation.) C:\WINDOWS\System32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Conexant Systems Inc.) C:\WINDOWS\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\SystemAgent\SystemAgentService.exe
() C:\WINDOWS\Runservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Tor\tor.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps
\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe
(Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_257.exe
(Microsoft Corporation) C:\WINDOWS\System32\Taskmgr.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file
will not be moved.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems,
Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
[887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-
08-27] (Synaptics)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
[17080376 2012-11-10] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-11-
10] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [508656
2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27]
(CyberLink)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe
[217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03
-28] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-10-31]
(AVAST Software)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27]
(CyberLink Corp.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [85600 2013-12-13] (Nullsoft,
Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software
GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary
Utilities 5\StartupManager.exe [37152 2014-09-01] (Glarysoft Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files
(x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\...\Run: [CCleaner Monitoring] => C:\Program Files
\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\...\MountPoints2: {87c766d8-98ea-11e4-bfb5-b888e39930d7} -
"F:\WMMA3_Retail.exe"
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run:
[GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [37152 2014-09-01] (Glarysoft
Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON
Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner
Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2:
{87c766d8-98ea-11e4-bfb5-b888e39930d7} - "F:\WMMA3_Retail.exe"
HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2:
{1960346e-2b0b-11e2-be69-806e6f6e6963} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL E:
\autorun.exe
HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce:
[FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_246_Plugin.exe -update plugin
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org
3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST
Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files
(x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files
(x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files
(x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files
(x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start
Pages = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002\Software\Microsoft\Internet Explorer
\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml?
n=77DE8857&p2=^HJ^xdm073^YY^pl&ptb=C8543D0C-C117-4F94-92F7-608C336BAB15&si=pconverter
HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software
\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft
\Internet Explorer\Main,Start Page = http://lenovo13.msn.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft
\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft
\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft
\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
URLSearchHook: [S-1-5-21-1564744225-1490472537-3518179741-1001] ATTENTION ==> Default URLSearchHook is
missing.
URLSearchHook: [S-1-5-21-1564744225-1490472537-3518179741-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0]
ATTENTION ==> Default URLSearchHook is missing.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-
E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-
E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-
E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1002 -> {1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL
=
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
{1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
DefaultScope {1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
{1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?
p2=^HJ^xdm073^YY^pl&si=pconverter&ptb=C8543D0C-C117-4F94-92F7-
608C336BAB15&ind=2013040815&n=77fc90af&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
DefaultScope {1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL =
SearchScopes: HKU\S-1-5-21-1564744225-1490472537-3518179741-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 ->
{1E3AE9F0-4BD6-4BDC-BF4E-8F4E70337F02} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office
15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software
\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files
\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software
\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root
\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\8pqasvot.default
FF SearchEngineOrder.1: Ask Search
FF Homepage: hxxp://www.kacik.pro/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel
(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight
\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root
\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1564744225-1490472537-3518179741-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:
\Users\Marcin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1564744225-1490472537-3518179741-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0:
@unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Marcin\AppData\LocalLow\Unity\WebPlayer\loader
\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Firefox365scorescom - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\8pqasvot.default
\Extensions\Firefox@365scores.com [2015-01-14]
FF Extension: Search Experiment - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\8pqasvot.default
\Extensions\fx-searchtest@mozilla.org.xpi [2014-07-02]
FF Extension: Adblock Plus - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\8pqasvot.default
\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-07]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-09-12]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash
\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application
\31.0.1650.57\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll No
File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
No File
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL
(Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Marcin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity
Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No
File
CHR Profile: C:\Users\Marcin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (fpkonlbialedjgeegikdallckpnliboc) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data
\Default\Extensions\fpkonlbialedjgeegikdallckpnliboc [2015-01-14]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Marcin\AppData\Local\Google\Chrome\User Data
\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast
\WebRep\Chrome\aswWebRepChrome.crx [2014-10-22]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be
moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-22] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-10-22] (Avast
Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-25] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12]
(Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720
2012-06-25] (Intel Corporation)
R2 Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [579400 2013-02-08]
(LENOVO INCORPORATED.)
R2 LicCtrlService; C:\WINDOWS\runservice.exe [2560 2013-10-06] () [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21]
(Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21]
(Malwarebytes Corporation)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-04] () [File not signed] <==== ATTENTION
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16032 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be
moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-22] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-10-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-10-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-10-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-10-22] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-25] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6824520 2012-07-10] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-04-30] (DT Soft Ltd)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20672 2014-09-02] (Glarysoft Ltd)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-01-09] (Duplex Secure Ltd.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [270728 2014-10-22] (Avast
Software)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
U3 aed0zfnu; C:\Windows\System32\Drivers\aed0zfnu.sys [0 ] (Intel Corporation) <==== ATTENTION (zero size
file/folder)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be
listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-14 22:58 - 2015-01-14 22:58 - 00000929 _____ () C:\Users\Marcin\Downloads\Addition.txt
2015-01-14 22:57 - 2015-01-14 23:52 - 00025303 _____ () C:\Users\Marcin\Downloads\FRST.txt
2015-01-14 22:57 - 2015-01-14 23:52 - 00000000 ____D () C:\FRST
2015-01-14 22:56 - 2015-01-14 22:57 - 02125312 _____ (Farbar) C:\Users\Marcin\Downloads\FRST64.exe
2015-01-14 22:50 - 2015-01-14 22:50 - 00010202 _____ () C:\Users\Marcin\Documents\cc_20150114_225033.reg
2015-01-14 20:38 - 2015-01-14 22:00 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers
\MBAMSwissArmy.sys
2015-01-14 20:37 - 2015-01-14 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Malwarebytes Anti-Malware
2015-01-14 20:37 - 2015-01-14 20:37 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-14 20:37 - 2015-01-14 20:37 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-01-14 20:37 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers
\mbamchameleon.sys
2015-01-14 20:37 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers
\mwac.sys
2015-01-14 20:37 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers
\mbam.sys
2015-01-14 20:35 - 2015-01-14 20:36 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Marcin\Downloads
\mbam-setup-2.0.4.1028.exe
2015-01-14 16:27 - 2015-01-14 16:27 - 00000000 ____D () C:\Users\Marcin\AppData\Local\PDF24
2015-01-14 16:26 - 2015-01-14 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\PDF24
2015-01-14 16:26 - 2015-01-14 16:26 - 00000000 ____D () C:\Program Files (x86)\PDF24
2015-01-14 16:22 - 2015-01-14 16:22 - 16342352 _____ (Geek Software GmbH ) C:\Users\Marcin\Downloads\pdf24-
creator-6.9.2.exe
2015-01-14 11:57 - 2015-01-14 11:57 - 00690483 _____ () C:\Users\Marcin\Documents\271348.odt
2015-01-14 11:46 - 2015-01-14 16:32 - 00000000 ____D () C:\Users\Marcin\Desktop\DC
2015-01-13 20:47 - 2014-11-15 07:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-01-13 20:47 - 2014-11-15 06:13 - 03286016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 01623552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS
\system32\WUSettingsProvider.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-01-13 20:47 - 2014-11-15 06:13 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-01-13 20:47 - 2014-11-15 06:12 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS
\system32\storewuauth.dll
2015-01-13 20:47 - 2014-11-15 04:54 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-01-13 20:47 - 2014-11-15 04:53 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-01-13 20:47 - 2014-11-15 04:53 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-01-13 20:47 - 2014-11-15 04:53 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-01-13 20:46 - 2014-11-27 03:40 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-01-13 20:46 - 2014-11-27 02:28 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-01-13 20:46 - 2014-11-05 07:40 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-01-13 20:46 - 2014-11-05 07:39 - 01024512 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-01-13 20:46 - 2014-11-01 07:28 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-01-13 20:46 - 2014-10-29 15:21 - 00499008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
\vhdmp.sys
2015-01-13 20:46 - 2014-10-27 23:10 - 00390841 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-01-13 20:44 - 2014-12-19 07:48 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-13 20:44 - 2014-12-19 05:35 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers
\mrxdav.sys
2015-01-13 20:44 - 2014-12-11 08:35 - 06973248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-01-13 20:44 - 2014-12-11 07:51 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-13 20:44 - 2014-12-06 08:53 - 00458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-13 20:44 - 2014-12-06 08:53 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS
\system32\WerFaultSecure.exe
2015-01-13 20:44 - 2014-12-06 08:52 - 00384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-13 20:44 - 2014-12-06 08:52 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-13 20:44 - 2014-12-06 08:52 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-13 20:44 - 2014-12-06 08:51 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-13 20:44 - 2014-12-06 08:51 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-13 20:44 - 2014-12-06 08:50 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-13 20:44 - 2014-12-06 07:10 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-13 20:44 - 2014-12-06 07:10 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS
\SysWOW64\WerFaultSecure.exe
2015-01-13 20:44 - 2014-12-06 07:09 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-13 20:44 - 2014-12-06 07:09 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2015-01-11 17:40 - 2015-01-14 00:28 - 00000000 _____ () C:\Users\Marcin\Desktop\Cegielski.txt
2015-01-11 15:16 - 2015-01-14 23:37 - 00015803 _____ () C:\Users\Marcin\Desktop\KSW.ods
2015-01-11 00:23 - 2015-01-11 00:23 - 00000000 _____ () C:\Users\Marcin\Desktop\ksw.txt
2015-01-10 21:00 - 2015-01-10 21:00 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows
\Start Menu\Programs\WMMA3
2015-01-10 21:00 - 1998-06-23 23:00 - 00244024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsFlxGrd.ocx
2015-01-10 20:58 - 2015-01-10 21:19 - 00000000 ____D () C:\Program Files\WMMA3
2015-01-10 20:42 - 2015-01-10 20:42 - 00298250 _____ () C:\Users\Marcin\Documents\cc_20150110_204209.reg
2015-01-10 20:42 - 2015-01-10 20:42 - 00005626 _____ () C:\Users\Marcin\Documents\cc_20150110_204241.reg
2015-01-10 20:35 - 2015-01-10 20:35 - 00002774 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-01-10 20:35 - 2015-01-10 20:35 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-10 20:34 - 2015-01-10 20:34 - 05317104 _____ (Piriform Ltd) C:\Users\Marcin\Downloads\ccsetup501.exe
2015-01-10 19:53 - 2015-01-10 20:01 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\PCFix
2015-01-10 18:57 - 2015-01-10 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Boxen! Die Championship Simulation
2015-01-10 18:56 - 2015-01-10 19:00 - 00000000 ____D () C:\Program Files (x86)\Boxen Die Championship
Simulation
2015-01-10 18:47 - 2006-08-15 20:11 - 00000000 ____D () C:\Users\Marcin\Downloads
\Title.Bout.Championship.Boxing.2-FASiSO
2015-01-10 18:45 - 2015-01-10 18:45 - 02191360 _____ () C:\Users\Marcin\Downloads
\adwcleaner_4.107_www.INSTALKI.pl.exe
2015-01-10 18:14 - 2015-01-10 21:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\WMMA3
2015-01-10 18:12 - 2015-01-10 18:12 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2015-01-10 17:59 - 2015-01-10 18:00 - 79142721 _____ () C:\Users\Marcin\Downloads\Modern Warriors 17.7z
2015-01-10 17:56 - 2015-01-10 17:59 - 115925987 _____ () C:\Users\Marcin\Downloads
\Title.Bout.Championship.Boxing.2-FASiSO.rar
2015-01-10 17:48 - 2015-01-10 17:56 - 257275872 _____ () C:\Users\Marcin\Downloads\World of Mixed Martial Arts
(2010) -cpy.bin
2015-01-09 21:13 - 2012-06-22 18:49 - 00000000 ____D () C:\Users\Marcin\Downloads\SS3
2015-01-09 21:11 - 2015-01-09 21:12 - 26099916 _____ () C:\Users\Marcin\Downloads\SwordsAndSandals3.rar
2015-01-09 19:22 - 2015-01-09 21:15 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\fizzy
2015-01-09 19:12 - 2015-01-09 19:13 - 33820845 _____ (3RDSense) C:\Users\Marcin\Downloads\swords-sandals-3-
solo-ultratus.exe
2015-01-09 15:06 - 2015-01-09 15:06 - 00000000 ____D () C:\Users\Public\CyberLink
2015-01-09 14:50 - 2015-01-09 14:50 - 00386680 _____ (Duplex Secure Ltd.) C:\WINDOWS\system32\Drivers\sptd.sys
2015-01-09 14:19 - 2015-01-10 17:59 - 00000000 ____D () C:\Users\Marcin\Desktop\Muzyka
2015-01-07 09:54 - 2015-01-07 15:22 - 00002378 _____ () C:\Users\Marcin\Desktop\TOP10 Ameryka.txt
2015-01-02 12:46 - 2015-01-03 17:28 - 00000689 _____ () C:\Users\Marcin\Desktop\sponsorzy.txt
2014-12-30 21:45 - 2014-12-30 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Winamp
2014-12-30 21:44 - 2015-01-03 11:47 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Winamp
2014-12-30 21:44 - 2014-12-30 21:45 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-12-30 21:42 - 2014-12-30 21:43 - 17163336 _____ (Nullsoft, Inc.) C:\Users\Marcin\Downloads
\winamp5666_full_all.exe
2014-12-29 14:08 - 2014-12-30 13:04 - 00000043 _____ () C:\Users\Marcin\Desktop\muzyka relaksacyjna.txt
2014-12-29 13:22 - 2015-01-14 20:03 - 00005921 _____ () C:\Users\Marcin\Desktop\zaSYPAny.txt
2014-12-24 15:48 - 2014-12-24 23:54 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Skype
2014-12-24 15:48 - 2014-12-24 15:48 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Skype
2014-12-24 15:47 - 2014-12-24 15:48 - 00000000 ____D () C:\ProgramData\Skype
2014-12-24 15:47 - 2014-12-24 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Skype
2014-12-24 15:47 - 2014-12-24 15:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-24 15:46 - 2014-12-24 15:47 - 44841568 _____ (Skype Technologies S.A.) C:\Users\Marcin\Downloads
\SkypeSetupFull.exe
2014-12-24 08:32 - 2014-12-24 18:53 - 00002671 _____ () C:\Users\Marcin\Desktop\wigilia.txt
2014-12-21 11:58 - 2014-12-21 11:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\OpenTTD
2014-12-21 11:57 - 2014-12-21 11:58 - 00000000 ____D () C:\Program Files (x86)\OpenTTD
2014-12-21 11:55 - 2014-12-21 11:56 - 07781026 _____ (OpenTTD Developers) C:\Users\Marcin\Downloads\openttd-
1.4.4-windows-win64(1).exe
2014-12-19 12:55 - 2014-12-23 10:56 - 00001527 _____ () C:\Users\Marcin\Desktop\Kącikowa kasa.txt
2014-12-18 21:20 - 2015-01-05 14:00 - 00005470 _____ () C:\Users\Marcin\Desktop\trójkącik.txt
2014-12-17 13:38 - 2014-12-17 13:38 - 00325338 _____ () C:\Users\Marcin\Downloads
\wydatkowanie_oraz_rozliczanie_wsparcia_pomostowego.zip
2014-12-17 10:47 - 2014-12-17 12:41 - 00004945 _____ () C:\Users\Marcin\Desktop\GW tekst.txt
2014-12-17 10:40 - 2014-12-17 12:41 - 00015662 _____ () C:\Users\Marcin\Desktop\GW.txt
2014-12-17 10:12 - 2014-12-09 08:12 - 00590816 _____ (Microsoft Corporation) C:\WINDOWS
\system32\AutoUpdate.exe
2014-12-17 10:12 - 2014-12-09 08:12 - 00467408 _____ (Microsoft Corporation) C:\WINDOWS
\system32\NotificationUI.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-14 23:35 - 2014-02-14 00:17 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-14 23:02 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-01-14 22:47 - 2013-07-16 21:14 - 00000000 ____D () C:\Users\Marcin\Desktop\programy
2015-01-14 21:25 - 2014-04-07 11:15 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\PhotoScape
2015-01-14 21:24 - 2013-10-06 22:29 - 00002985 ___SH () C:\WINDOWS\SysWOW64\mmf.sys
2015-01-14 21:17 - 2013-04-11 11:48 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache
Files-S-1-5-21-1564744225-1490472537-3518179741-1002
2015-01-14 21:16 - 2014-09-24 19:11 - 00004983 _____ () C:\Users\Marcin\Desktop\wrzuć.txt
2015-01-14 21:12 - 2014-05-28 22:08 - 00000348 _____ () C:\WINDOWS\Tasks\GlaryInitialize 5.job
2015-01-14 21:12 - 2014-05-28 22:07 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2015-01-14 21:11 - 2012-07-26 08:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-14 21:10 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\SchCache
2015-01-14 21:10 - 2012-07-26 06:26 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-14 20:31 - 2014-08-07 09:19 - 00000637 _____ () C:\Users\Marcin\Desktop\notatki.txt
2015-01-14 20:19 - 2013-09-12 10:40 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-01-14 20:12 - 2013-09-12 10:20 - 00000000 ____D () C:\AdwCleaner
2015-01-14 20:11 - 2014-12-11 10:35 - 00000000 ____D () C:\Users\Marcin\Desktop\PIG - kontrola
2015-01-14 20:11 - 2014-08-26 17:09 - 00000000 ____D () C:\Users\Marcin\Desktop\piłka nożna
2015-01-14 20:11 - 2014-07-22 19:28 - 00000000 ____D () C:\Users\Marcin\Desktop\kacik
2015-01-14 20:11 - 2013-07-16 21:13 - 00000000 ____D () C:\Users\Marcin\Desktop\gry
2015-01-14 17:29 - 2014-04-07 11:20 - 00000000 ____D () C:\Users\Marcin\Desktop\Originals
2015-01-14 17:26 - 2013-06-18 21:10 - 07773184 ___SH () C:\Users\Marcin\Desktop\Thumbs.db
2015-01-14 11:46 - 2014-10-23 12:32 - 00000000 ____D () C:\Users\Marcin\Desktop\księgowa
2015-01-14 09:49 - 2013-04-30 12:41 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\DAEMON Tools Lite
2015-01-14 09:39 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\rescache
2015-01-13 22:06 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-13 22:03 - 2013-08-27 15:07 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-13 21:58 - 2013-04-11 10:21 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-13 20:35 - 2014-02-14 00:17 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-01-12 20:15 - 2014-08-21 08:30 - 00000000 ____D () C:\Users\Marcin\Desktop\walecznie
2015-01-12 20:14 - 2014-11-12 14:14 - 00000215 _____ () C:\Users\Marcin\Desktop\kalendarium.txt
2015-01-12 09:24 - 2012-11-10 17:45 - 08618154 _____ () C:\WINDOWS\system32\perfh015.dat
2015-01-12 09:24 - 2012-11-10 17:45 - 02687162 _____ () C:\WINDOWS\system32\perfc015.dat
2015-01-12 09:24 - 2012-07-26 08:28 - 00005434 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-11 19:38 - 2014-10-30 08:34 - 00000270 _____ () C:\Users\Marcin\Desktop\fuzje.txt
2015-01-10 20:37 - 2013-04-18 16:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-10 20:01 - 2013-04-08 10:16 - 00000000 ___RD () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows
\Start Menu\Programs\System Tools
2015-01-10 18:40 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-10 18:34 - 2013-10-06 22:12 - 00048640 _____ () C:\WINDOWS\mmfs.dll
2015-01-10 17:58 - 2014-11-25 16:12 - 00000000 ____D () C:\Users\Marcin\Desktop\skoki
2015-01-10 16:47 - 2014-04-07 11:17 - 00009216 ____H () C:\Users\Marcin\Desktop\photothumb.db
2015-01-09 19:22 - 2013-04-11 11:39 - 00000000 ____D () C:\Users\Marcin\AppData\Local\VirtualStore
2015-01-09 12:33 - 2014-12-09 21:10 - 00000000 ____D () C:\Users\Marcin\Documents\OpenTTD
2015-01-08 14:25 - 2014-08-26 17:15 - 00000000 ____D () C:\Users\Marcin\Desktop\siatkówka
2015-01-06 00:28 - 2014-12-11 10:15 - 00714176 _____ (Adobe Systems Incorporated) C:\WINDOWS
\SysWOW64\FlashPlayerApp.exe
2015-01-06 00:28 - 2014-12-11 10:15 - 00106440 _____ (Adobe Systems Incorporated) C:\WINDOWS
\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-04 21:01 - 2014-04-18 21:30 - 00000000 ____D () C:\Users\Marcin\Desktop\stare
2015-01-03 09:37 - 2014-04-03 11:23 - 00000000 ____D () C:\Users\Marcin\Desktop\blog
2015-01-02 19:29 - 2014-12-13 11:28 - 00007696 _____ () C:\Users\Marcin\Desktop\U-20.txt
2015-01-02 15:19 - 2013-04-11 13:08 - 00000000 ____D () C:\Users\Marcin\Documents\Youcam
2014-12-29 13:20 - 2013-04-30 21:40 - 00000000 ____D () C:\Users\Marcin\Desktop\notatki
2014-12-25 23:05 - 2013-05-23 22:23 - 00000000 ____D () C:\Users\Marcin\Documents\FIFA 12
2014-12-25 11:40 - 2014-08-13 15:34 - 00000000 ____D () C:\Users\Marcin\Desktop\źródło
2014-12-24 08:49 - 2013-04-30 10:22 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-17 09:39 - 2014-08-28 09:34 - 00000000 ____D () C:\Users\Marcin\Desktop\koszykowka
2014-12-15 21:57 - 2014-12-05 10:29 - 00001009 _____ () C:\Users\Marcin\Desktop\wyniki.txt
Some content of TEMP:
====================
C:\Users\dvoorek\AppData\Local\Temp\ubi95B7.tmp.exe
C:\Users\Marcin\AppData\Local\Temp\Quarantine.exe
C:\Users\Marcin\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-10 11:06
==================== End Of Log ============================
