Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013 Ran by Sofia (administrator) on SOFIA-KOMPUTER on 05-10-2013 10:35:45 Running from C:\Users\Sofia\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851760 2013-09-15] (AVG Technologies CZ, s.r.o.) HKU\Default\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\Default User\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\UpdatusUser\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun AppInit_DLLs: c:\windows\syswow64\nvinit.dll C:\Windows\system32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation) AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {E3F66496-2F2D-4F8C-9271-75B063866898} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą konta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{74961F18-41AB-484E-9846-B16FA085CFE6}: [NameServer]156.154.70.22,156.154.71.22 Tcpip\..\Interfaces\{DB4DF3AE-0F55-41A3-BB52-4B3909E2FB7E}: [NameServer]156.154.70.22,156.154.71.22 FireFox: ======== FF ProfilePath: C:\Users\Sofia\AppData\Roaming\Mozilla\Firefox\Profiles\xpfn89um.default FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL No File FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll No File FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll No File FF Extension: Diccionario de Español/España - C:\Users\Sofia\AppData\Roaming\Mozilla\Firefox\Profiles\xpfn89um.default\Extensions\es-es@dictionaries.addons.mozilla.org FF Extension: WOT - C:\Users\Sofia\AppData\Roaming\Mozilla\Firefox\Profiles\xpfn89um.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF Extension: Flash and Video Download - C:\Users\Sofia\AppData\Roaming\Mozilla\Firefox\Profiles\xpfn89um.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} FF Extension: No Name - C:\Users\Sofia\AppData\Roaming\Mozilla\Firefox\Profiles\xpfn89um.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afext@anchorfree.com Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: () - C:\Users\Sofia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: () - C:\Users\Sofia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0 ==================== Services (Whitelisted) ================= S4 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit) S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-09-03] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-22] (AVG Technologies CZ, s.r.o.) S4 HPSLPSVC; C:\Users\Sofia\AppData\Local\Temp\7zS511C\hpslpsvc64.dll [x] ==================== Drivers (Whitelisted) ==================== R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.) R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-09-17] (AnchorFree Inc.) S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-01-27] (Windows (R) 2003 DDK 3790 provider) S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-01-27] (Windows (R) 2003 DDK 3790 provider) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.) R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-13] (Anchorfree Inc.) R0 vidsflt58; C:\Windows\System32\DRIVERS\vsflt58.sys [142944 2011-10-03] (Acronis) S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [x] S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-10-05 10:35 - 2013-10-05 10:35 - 00000000 ____D C:\FRST 2013-10-05 10:32 - 2013-10-05 10:32 - 00092802 _____ C:\Users\Sofia\Downloads\Extras.Txt 2013-10-05 10:30 - 2013-10-05 10:30 - 00117132 _____ C:\Users\Sofia\Downloads\OTL.Txt 2013-10-05 09:55 - 2013-10-05 09:55 - 01954124 _____ (Farbar) C:\Users\Sofia\Downloads\FRST64.exe 2013-10-05 09:55 - 2013-10-05 09:55 - 00377856 _____ C:\Users\Sofia\Downloads\d09j2b9v.exe 2013-10-05 09:33 - 2013-10-05 09:33 - 00001106 _____ C:\Windows\PFRO.log 2013-10-05 09:17 - 2013-10-05 09:17 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\Sofia\Downloads\SPTDinst-v184-x64.exe 2013-10-05 08:13 - 2013-10-05 09:54 - 00602112 _____ (OldTimer Tools) C:\Users\Sofia\Downloads\OTL.exe 2013-10-04 11:45 - 2013-10-04 11:45 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\HD Tune Pro 2013-10-04 11:38 - 2013-10-04 11:44 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro 2013-10-03 13:48 - 2013-10-03 13:48 - 10894104 _____ (MPC-HC Team ) C:\Users\Sofia\Downloads\MPC-HC.1.7.0.x64.exe 2013-10-03 13:42 - 2013-10-03 13:42 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2013-10-03 13:42 - 2013-08-22 19:09 - 00256088 _____ C:\Windows\system32\unrar64.dll 2013-10-03 13:33 - 2013-10-03 13:33 - 00000000 ____D C:\Program Files (x86)\AC3Filter 2013-10-03 13:19 - 2013-10-03 13:19 - 47267840 _____ C:\Windows\system32\config\components.iobit 2013-10-03 12:56 - 2013-10-05 09:34 - 00000392 _____ C:\Windows\setupact.log 2013-10-03 12:56 - 2013-10-03 12:56 - 00000000 _____ C:\Windows\setuperr.log 2013-10-03 12:25 - 2013-10-03 12:25 - 00001238 _____ C:\Users\Sofia\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-10-02 22:43 - 2013-10-02 22:56 - 00005860 _____ C:\Users\Sofia\Downloads\hijackthis.log 2013-10-02 14:59 - 2013-10-02 14:59 - 00438272 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-10-02 14:59 - 2013-10-02 14:59 - 00098304 _____ C:\Windows\system32\config\SAM.iobit 2013-10-02 14:59 - 2013-10-02 14:59 - 00032768 _____ C:\Windows\system32\config\SECURITY.iobit 2013-10-02 14:58 - 2013-10-02 14:59 - 82423808 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-10-02 14:47 - 2013-10-02 14:47 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} 2013-10-01 17:08 - 2013-10-01 17:08 - 00000000 ____D C:\Program Files (x86)\GUME6A1.tmp 2013-09-25 17:09 - 2013-09-25 17:11 - 00000000 ____D C:\AdwCleaner 2013-09-25 17:09 - 2013-09-25 17:09 - 01042066 _____ C:\Users\Sofia\Downloads\AdwCleaner.exe 2013-09-25 10:03 - 2013-10-03 12:06 - 00000000 ____D C:\ProgramData\Auslogics 2013-09-25 10:02 - 2013-10-03 12:05 - 00000000 ____D C:\Program Files (x86)\Auslogics 2013-09-25 09:04 - 2013-09-25 09:04 - 00001214 _____ C:\Users\Sofia\Desktop\SystemTL+.lnk 2013-09-24 07:14 - 2013-10-03 18:00 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\XnViewMP 2013-09-23 18:06 - 2013-09-23 18:13 - 00002754 _____ C:\Users\Sofia\Documents\Nueva base de datos - prueba.odb 2013-09-23 15:37 - 2013-09-23 15:36 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-09-23 15:37 - 2013-09-23 15:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-09-23 15:37 - 2013-09-23 15:36 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-09-23 15:37 - 2013-09-23 15:36 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-09-23 14:57 - 2013-09-23 15:38 - 00000000 ____D C:\ProgramData\Oracle 2013-09-23 14:44 - 2013-09-23 14:43 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-09-23 14:44 - 2013-09-23 14:43 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-09-23 14:44 - 2013-09-23 14:43 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-09-23 14:44 - 2013-09-23 14:43 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-09-23 14:23 - 2013-10-05 09:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-23 14:23 - 2013-09-23 14:46 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-19 23:23 - 2013-09-19 23:23 - 00000000 ____D C:\Windows\SysWOW64\Hotspot Shield 2013-09-19 18:17 - 2013-09-17 22:31 - 00046792 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys 2013-09-16 22:25 - 2013-09-16 22:25 - 00000076 _____ C:\Users\Sofia\Documents\adres sandry niemcy.txt 2013-09-16 18:44 - 2013-10-03 12:14 - 00000000 ____D C:\Users\Sofia\Documents\Youcam 2013-09-16 12:50 - 2013-09-16 12:50 - 00000000 ____D C:\ProgramData\Adobe 2013-09-16 12:47 - 2013-09-16 12:47 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-12 09:52 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-09-12 09:52 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-09-12 09:52 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-09-12 09:52 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-09-12 09:51 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-09-12 09:51 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-09-12 09:51 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-09-12 09:51 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-09-12 09:51 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-09-12 09:51 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-09-12 09:51 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-09-12 09:51 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-09-12 09:51 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-09-12 09:51 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-09-12 08:25 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2013-09-12 08:24 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-09-12 08:24 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-09-12 08:24 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-09-12 08:24 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2013-09-12 08:24 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-09-12 08:24 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2013-09-12 08:24 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2013-09-12 08:24 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2013-09-12 08:24 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2013-09-12 08:24 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-09-12 08:24 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-09-12 08:24 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-09-12 08:24 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2013-09-12 08:24 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2013-09-12 08:24 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2013-09-12 08:24 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2013-09-12 08:24 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-09-12 08:24 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-09-12 08:24 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-09-12 08:24 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-09-12 08:24 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2013-09-12 08:24 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2013-09-12 08:22 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2013-09-12 08:22 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2013-09-12 08:22 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2013-09-12 08:22 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2013-09-09 16:10 - 2013-09-09 16:10 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-09-08 22:11 - 2013-09-08 22:11 - 00031544 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys 2013-09-08 13:42 - 2013-09-08 13:43 - 00024357 _____ C:\Users\Sofia\Documents\mala gastronomia biznesplan.odt 2013-09-07 13:59 - 2013-09-25 07:44 - 00051234 _____ C:\Windows\system32\Drivers\fvstore.dat 2013-09-07 13:59 - 2013-09-07 13:59 - 00000000 ___HD C:\VTRoot 2013-09-07 12:02 - 2013-09-07 12:12 - 00000000 ____D C:\ProgramData\COMODO 2013-09-07 11:58 - 2013-09-07 11:58 - 00000000 ____D C:\ProgramData\Comodo Downloader 2013-09-07 10:05 - 2013-09-07 10:05 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\AVG2014 2013-09-07 09:59 - 2013-09-07 10:04 - 00000000 ____D C:\ProgramData\AVG2014 2013-09-07 09:59 - 2013-09-07 09:59 - 00000000 ___HD C:\$AVG 2013-09-07 09:49 - 2013-09-08 09:30 - 00000000 ____D C:\Users\Sofia\AppData\Local\Avg2014 ==================== One Month Modified Files and Folders ======= 2013-10-05 10:35 - 2013-10-05 10:35 - 00000000 ____D C:\FRST 2013-10-05 10:32 - 2013-10-05 10:32 - 00092802 _____ C:\Users\Sofia\Downloads\Extras.Txt 2013-10-05 10:30 - 2013-10-05 10:30 - 00117132 _____ C:\Users\Sofia\Downloads\OTL.Txt 2013-10-05 09:55 - 2013-10-05 09:55 - 01954124 _____ (Farbar) C:\Users\Sofia\Downloads\FRST64.exe 2013-10-05 09:55 - 2013-10-05 09:55 - 00377856 _____ C:\Users\Sofia\Downloads\d09j2b9v.exe 2013-10-05 09:54 - 2013-10-05 08:13 - 00602112 _____ (OldTimer Tools) C:\Users\Sofia\Downloads\OTL.exe 2013-10-05 09:46 - 2013-06-03 09:47 - 01223612 _____ C:\Windows\WindowsUpdate.log 2013-10-05 09:46 - 2009-07-14 06:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-10-05 09:46 - 2009-07-14 06:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-10-05 09:45 - 2012-02-11 12:16 - 00000000 ____D C:\ProgramData\MFAData 2013-10-05 09:44 - 2013-09-23 14:23 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-10-05 09:34 - 2013-10-03 12:56 - 00000392 _____ C:\Windows\setupact.log 2013-10-05 09:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-10-05 09:33 - 2013-10-05 09:33 - 00001106 _____ C:\Windows\PFRO.log 2013-10-05 09:17 - 2013-10-05 09:17 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\Sofia\Downloads\SPTDinst-v184-x64.exe 2013-10-05 09:03 - 2013-06-11 15:30 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Skype 2013-10-04 11:45 - 2013-10-04 11:45 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\HD Tune Pro 2013-10-04 11:44 - 2013-10-04 11:38 - 00000000 ____D C:\Program Files (x86)\HD Tune Pro 2013-10-04 11:43 - 2011-07-29 12:04 - 00000000 ____D C:\Users\Sofia\AppData\Local\CrashDumps 2013-10-04 10:03 - 2012-10-09 11:31 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2013-10-03 18:02 - 2011-09-19 08:12 - 00000000 ____D C:\Users\Sofia\AppData\Local\Paint.NET 2013-10-03 18:00 - 2013-09-24 07:14 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\XnViewMP 2013-10-03 16:07 - 2012-01-11 11:41 - 00000000 ___RD C:\Users\Sofia\Material Cristiano 2013-10-03 15:56 - 2013-05-24 08:35 - 00000911 _____ C:\Users\UpdatusUser\Desktop\Anki.lnk 2013-10-03 15:56 - 2013-05-24 08:35 - 00000911 _____ C:\Users\Sofia\Desktop\Anki.lnk 2013-10-03 15:56 - 2013-05-24 08:35 - 00000911 _____ C:\Users\Gość\Desktop\Anki.lnk 2013-10-03 15:54 - 2011-11-01 14:38 - 00000000 ____D C:\Users\Sofia\Documents\Anki 2013-10-03 13:50 - 2012-12-17 16:32 - 00000000 ____D C:\Program Files\MPC-HC 2013-10-03 13:48 - 2013-10-03 13:48 - 10894104 _____ (MPC-HC Team ) C:\Users\Sofia\Downloads\MPC-HC.1.7.0.x64.exe 2013-10-03 13:42 - 2013-10-03 13:42 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2013-10-03 13:33 - 2013-10-03 13:33 - 00000000 ____D C:\Program Files (x86)\AC3Filter 2013-10-03 13:25 - 2013-03-27 14:46 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Media Player Classic 2013-10-03 13:19 - 2013-10-03 13:19 - 47267840 _____ C:\Windows\system32\config\components.iobit 2013-10-03 13:19 - 2011-07-28 15:04 - 00000000 ____D C:\Users\Sofia 2013-10-03 12:56 - 2013-10-03 12:56 - 00000000 _____ C:\Windows\setuperr.log 2013-10-03 12:25 - 2013-10-03 12:25 - 00001238 _____ C:\Users\Sofia\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2013-10-03 12:24 - 2013-07-26 08:41 - 00000000 ____D C:\Program Files (x86)\IObit 2013-10-03 12:14 - 2013-09-16 18:44 - 00000000 ____D C:\Users\Sofia\Documents\Youcam 2013-10-03 12:14 - 2012-07-21 10:59 - 00000000 ____D C:\Users\Sofia\AppData\Local\ChomikBox 2013-10-03 12:06 - 2013-09-25 10:03 - 00000000 ____D C:\ProgramData\Auslogics 2013-10-03 12:05 - 2013-09-25 10:02 - 00000000 ____D C:\Program Files (x86)\Auslogics 2013-10-03 11:53 - 2013-07-26 08:41 - 00000000 ____D C:\ProgramData\IObit 2013-10-03 11:23 - 2011-07-29 20:06 - 00000000 ____D C:\Program Files (x86)\Leksykonia 2013-10-03 11:10 - 2013-01-10 09:47 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Foxit Software 2013-10-03 11:09 - 2012-04-10 12:59 - 00000000 ____D C:\Program Files (x86)\Edgard 2013-10-03 11:06 - 2011-07-28 15:22 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Adobe 2013-10-03 11:05 - 2011-11-28 20:33 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\IObit 2013-10-03 11:05 - 2011-07-31 19:15 - 00000000 ____D C:\Program Files (x86)\Google 2013-10-03 09:10 - 2012-02-14 10:47 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-03 09:02 - 2011-10-25 11:19 - 00000000 ____D C:\Program Files\Java 2013-10-03 08:46 - 2010-12-28 23:59 - 00000000 ____D C:\ProgramData\SAMSUNG 2013-10-03 08:46 - 2010-12-28 23:58 - 00000000 ____D C:\Program Files (x86)\Samsung 2013-10-03 02:31 - 2012-02-14 10:21 - 00000000 ____D C:\Windows\pss 2013-10-03 01:59 - 2012-12-17 11:08 - 00000000 ____D C:\Users\Sofia\AppData\Local\Abelssoft 2013-10-03 01:59 - 2011-09-25 08:15 - 00000000 ____D C:\Users\Gość 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\th-TH 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sk-SK 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ro-RO 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lv-LV 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lt-LT 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hr-HR 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\he-IL 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\et-EE 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG 2013-10-03 01:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ar-SA 2013-10-03 01:56 - 2011-07-31 19:15 - 00000000 ____D C:\Users\Sofia\AppData\Local\Google 2013-10-03 01:56 - 2011-07-28 15:13 - 00000000 ____D C:\Users\Sofia\AppData\Local\Adobe 2013-10-03 01:54 - 2010-12-29 17:09 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-10-03 01:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-10-03 01:50 - 2011-07-28 22:01 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Winamp 2013-10-03 01:41 - 2013-03-10 22:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-03 01:41 - 2010-12-28 23:54 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-10-03 01:40 - 2010-12-28 23:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-10-03 00:40 - 2010-12-28 23:52 - 00000086 _____ C:\setup.log 2013-10-02 22:56 - 2013-10-02 22:43 - 00005860 _____ C:\Users\Sofia\Downloads\hijackthis.log 2013-10-02 15:07 - 2009-08-02 04:27 - 00000000 ____D C:\Windows\Panther 2013-10-02 14:59 - 2013-10-02 14:59 - 00438272 _____ C:\Windows\system32\config\DEFAULT.iobit 2013-10-02 14:59 - 2013-10-02 14:59 - 00098304 _____ C:\Windows\system32\config\SAM.iobit 2013-10-02 14:59 - 2013-10-02 14:59 - 00032768 _____ C:\Windows\system32\config\SECURITY.iobit 2013-10-02 14:59 - 2013-10-02 14:58 - 82423808 _____ C:\Windows\system32\config\SOFTWARE.iobit 2013-10-02 14:47 - 2013-10-02 14:47 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} 2013-10-01 17:08 - 2013-10-01 17:08 - 00000000 ____D C:\Program Files (x86)\GUME6A1.tmp 2013-09-30 15:35 - 2010-12-29 17:23 - 00748408 _____ C:\Windows\system32\perfh015.dat 2013-09-30 15:35 - 2010-12-29 17:23 - 00160710 _____ C:\Windows\system32\perfc015.dat 2013-09-30 15:35 - 2009-07-14 07:13 - 01694288 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-30 11:14 - 2012-04-04 22:02 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Audacity 2013-09-30 09:57 - 2011-08-05 18:17 - 00000000 ____D C:\Users\Sofia\AppData\Local\Windows Live 2013-09-27 11:46 - 2011-08-10 15:47 - 00000000 ___RD C:\Users\Sofia\Desktop\Szkoła i Praca 2013-09-27 08:49 - 2013-02-25 09:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-27 08:16 - 2013-03-12 11:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-09-26 06:31 - 2011-09-19 08:13 - 00000000 ____D C:\Program Files\Paint.NET 2013-09-25 17:11 - 2013-09-25 17:09 - 00000000 ____D C:\AdwCleaner 2013-09-25 17:09 - 2013-09-25 17:09 - 01042066 _____ C:\Users\Sofia\Downloads\AdwCleaner.exe 2013-09-25 13:11 - 2012-07-21 10:59 - 00000000 ____D C:\Users\Sofia\.gstreamer-0.10 2013-09-25 10:02 - 2013-07-26 12:53 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\Auslogics 2013-09-25 09:04 - 2013-09-25 09:04 - 00001214 _____ C:\Users\Sofia\Desktop\SystemTL+.lnk 2013-09-25 07:47 - 2011-12-02 11:06 - 00000000 ____D C:\Windows\Minidump 2013-09-25 07:44 - 2013-09-07 13:59 - 00051234 _____ C:\Windows\system32\Drivers\fvstore.dat 2013-09-24 07:20 - 2013-08-06 08:56 - 00000000 ____D C:\Program Files\XnViewMP 2013-09-24 06:28 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-09-23 19:24 - 2013-04-11 21:19 - 00000000 ____D C:\Users\Sofia\Documents\Biblioteka calibre 2013-09-23 19:08 - 2013-04-11 21:15 - 00000000 ____D C:\Program Files\Calibre2 2013-09-23 18:13 - 2013-09-23 18:06 - 00002754 _____ C:\Users\Sofia\Documents\Nueva base de datos - prueba.odb 2013-09-23 15:38 - 2013-09-23 14:57 - 00000000 ____D C:\ProgramData\Oracle 2013-09-23 15:36 - 2013-09-23 15:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-09-23 15:36 - 2013-09-23 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-09-23 15:36 - 2013-09-23 15:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-09-23 15:36 - 2013-09-23 15:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-09-23 15:36 - 2012-10-14 19:51 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-09-23 15:36 - 2011-07-29 10:08 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-09-23 14:46 - 2013-09-23 14:23 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-09-23 14:45 - 2012-04-03 12:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-09-23 14:45 - 2011-07-28 22:38 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-09-23 14:43 - 2013-09-23 14:44 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-09-23 14:43 - 2013-09-23 14:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-09-23 14:43 - 2013-09-23 14:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-09-23 14:43 - 2013-09-23 14:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-09-23 14:43 - 2012-09-29 14:14 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll 2013-09-23 14:43 - 2011-10-25 11:20 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll 2013-09-19 23:23 - 2013-09-19 23:23 - 00000000 ____D C:\Windows\SysWOW64\Hotspot Shield 2013-09-17 22:31 - 2013-09-19 18:17 - 00046792 _____ (AnchorFree Inc.) C:\Windows\system32\Drivers\hssdrv6.sys 2013-09-17 15:53 - 2011-07-28 21:59 - 00000000 ____D C:\Users\Sofia\AppData\Local\Mozilla 2013-09-16 22:25 - 2013-09-16 22:25 - 00000076 _____ C:\Users\Sofia\Documents\adres sandry niemcy.txt 2013-09-16 18:55 - 2013-06-11 15:28 - 00000000 ____D C:\ProgramData\Skype 2013-09-16 18:54 - 2013-06-11 15:29 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-09-16 12:50 - 2013-09-16 12:50 - 00000000 ____D C:\ProgramData\Adobe 2013-09-16 12:47 - 2013-09-16 12:47 - 00000000 ____D C:\ProgramData\FLEXnet 2013-09-16 10:11 - 2011-07-29 22:24 - 00000000 ____D C:\Users\Sofia\Documents\CV 2013-09-14 08:04 - 2012-09-29 19:30 - 00002774 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-09-13 15:50 - 2011-07-28 16:04 - 00000000 ____D C:\DICCIONARIO CLAVE 2013-09-13 14:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-09-12 17:07 - 2011-07-28 15:16 - 00000000 ___RD C:\Users\Sofia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-09-12 17:07 - 2011-07-28 15:16 - 00000000 ___RD C:\Users\Sofia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-09-12 16:57 - 2009-07-14 06:45 - 00489888 _____ C:\Windows\system32\FNTCACHE.DAT 2013-09-12 09:51 - 2013-07-15 08:52 - 00000000 ____D C:\Windows\system32\MRT 2013-09-12 09:41 - 2011-07-28 23:19 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-09-10 18:24 - 2011-11-28 10:36 - 00000000 ____D C:\Program Files\CCleaner 2013-09-09 16:10 - 2013-09-09 16:10 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-09-08 22:11 - 2013-09-08 22:11 - 00031544 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys 2013-09-08 13:43 - 2013-09-08 13:42 - 00024357 _____ C:\Users\Sofia\Documents\mala gastronomia biznesplan.odt 2013-09-08 09:30 - 2013-09-07 09:49 - 00000000 ____D C:\Users\Sofia\AppData\Local\Avg2014 2013-09-07 13:59 - 2013-09-07 13:59 - 00000000 ___HD C:\VTRoot 2013-09-07 12:12 - 2013-09-07 12:02 - 00000000 ____D C:\ProgramData\COMODO 2013-09-07 11:58 - 2013-09-07 11:58 - 00000000 ____D C:\ProgramData\Comodo Downloader 2013-09-07 10:05 - 2013-09-07 10:05 - 00000000 ____D C:\Users\Sofia\AppData\Roaming\AVG2014 2013-09-07 10:04 - 2013-09-07 09:59 - 00000000 ____D C:\ProgramData\AVG2014 2013-09-07 09:59 - 2013-09-07 09:59 - 00000000 ___HD C:\$AVG 2013-09-07 09:56 - 2012-02-11 12:21 - 00000000 ____D C:\Program Files (x86)\AVG 2013-09-07 09:26 - 2012-10-01 11:13 - 00001912 _____ C:\Windows\epplauncher.mif Some content of TEMP: ==================== C:\Users\Sofia\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Sofia\AppData\Local\Temp\VSUSetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-03 10:41 ==================== End Of Log ============================