Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-01-2014 Ran by Manikowscy (administrator) on MANIEK on 21-01-2014 13:20:27 Running from C:\Users\Manikowscy\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.EXE (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Program Files\ASUS\ASUS Secure Delete\ADDEL.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Dropbox, Inc.) C:\Users\Manikowscy\AppData\Roaming\Dropbox\bin\Dropbox.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Filefacts.net) C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe () C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5123216 2012-06-08] (VIA) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation) HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2010-11-16] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [932288 2010-11-16] (Adobe Systems Incorporated) HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-03-06] (Intel Corporation) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3567800 2013-10-18] (AVAST Software) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [283712 2013-07-24] (Filefacts.net) HKLM-x32\...\Run: [SFAUpdater] - C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [620608 2013-10-08] (Filefacts.net) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKCU\...\Run: [ChomikBox] - C:\Program Files (x86)\ChomikBox\chomikbox.exe [5979648 2012-11-15] ( ) MountPoints2: {7f551562-50ed-11e3-8509-60a44c23fbb0} - G:\SETUP.EXE Startup: C:\Users\Manikowscy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Manikowscy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Manikowscy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Manikowscy\AppData\Roaming\Mozilla\Firefox\Profiles\joh2488m.default-1390306267886 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-17] ==================== Services (Whitelisted) ================= R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-02-17] (ASUSTeK Computer Inc.) S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-17] (AVAST Software) S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-06] (Intel Corporation) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] () R0 assd; C:\Windows\System32\Drivers\assd.sys [27056 2011-10-29] (ASUS Corporation) R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-17] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-17] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-17] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-17] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-17] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-08] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-17] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-17] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-11-19] (Disc Soft Ltd) S3 IAMTVE; C:\Windows\system32\drivers\IAMTVE.sys [43416 2007-04-12] (Intel Corporation) S3 IAMTXPE; C:\Windows\system32\drivers\IAMTXPE.sys [51096 2007-04-12] (Intel Corporation) R3 RSUSBCCID; C:\Windows\System32\DRIVERS\RtsUCcid.sys [50176 2009-08-15] (Realtek Semiconductor Corp.) R3 RSUSBCCID; C:\Windows\SysWOW64\DRIVERS\RtsUCcid.sys [50176 2009-08-15] (Realtek Semiconductor Corp.) R3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [222720 2009-08-24] (Realtek Semiconductor Corp.) R1 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-10-22] (Duplex Secure Ltd.) U3 a5sebukj; C:\Windows\System32\Drivers\a5sebukj.sys [0 ] (Advanced Micro Devices) U3 a91ketya; C:\Windows\System32\Drivers\a91ketya.sys [0 ] (Advanced Micro Devices) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-21 13:19 - 2014-01-21 13:19 - 00007653 _____ C:\Users\Manikowscy\Desktop\AdwCleaner[S1].txt 2014-01-21 13:15 - 2014-01-21 13:15 - 01236282 _____ C:\Users\Manikowscy\Downloads\AdwCleaner.exe 2014-01-21 13:11 - 2014-01-21 13:11 - 00000000 ____D C:\Users\Manikowscy\Desktop\Stare dane programu Firefox 2014-01-21 13:09 - 2014-01-21 13:09 - 00000000 ____D C:\MATS 2014-01-21 13:06 - 2014-01-21 13:06 - 00347816 _____ (Microsoft Corporation) C:\Users\Manikowscy\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.33313733187366338.2.1.Run.exe 2014-01-21 13:01 - 2014-01-21 13:01 - 00000000 ____D C:\Users\Manikowscy\Downloads\FRST-OlderVersion 2014-01-21 00:45 - 2014-01-21 00:45 - 00444035 _____ C:\Users\Manikowscy\Desktop\GMER.txt 2014-01-21 00:12 - 2014-01-21 00:12 - 00379904 _____ C:\Users\Manikowscy\Downloads\389pcm8d.exe 2014-01-21 00:12 - 2014-01-21 00:12 - 00030580 _____ C:\Users\Manikowscy\Desktop\FRST.txt 2014-01-21 00:11 - 2014-01-21 00:11 - 00028033 _____ C:\Users\Manikowscy\Downloads\Addition.txt 2014-01-21 00:11 - 2014-01-21 00:11 - 00028033 _____ C:\Users\Manikowscy\Desktop\Addition.txt 2014-01-21 00:10 - 2014-01-21 13:20 - 00015431 _____ C:\Users\Manikowscy\Downloads\FRST.txt 2014-01-21 00:10 - 2014-01-21 13:01 - 00000000 ____D C:\FRST 2014-01-21 00:09 - 2014-01-21 13:01 - 02077184 _____ (Farbar) C:\Users\Manikowscy\Downloads\FRST64.exe 2014-01-20 22:56 - 2014-01-20 22:56 - 00071548 _____ C:\Users\Manikowscy\Desktop\Extras.Txt 2014-01-20 22:55 - 2014-01-20 22:55 - 00091856 _____ C:\Users\Manikowscy\Desktop\OTL.Txt 2014-01-20 22:54 - 2014-01-20 22:54 - 00091856 _____ C:\Users\Manikowscy\Downloads\OTL.Txt 2014-01-20 22:54 - 2014-01-20 22:54 - 00071548 _____ C:\Users\Manikowscy\Downloads\Extras.Txt 2014-01-20 22:48 - 2014-01-20 22:48 - 00602112 _____ (OldTimer Tools) C:\Users\Manikowscy\Downloads\OTL.exe 2014-01-16 22:17 - 2014-01-16 22:25 - 28391449 _____ C:\Users\Manikowscy\Downloads\Marcela bawi i uczy.mp4 2014-01-16 17:21 - 2014-01-16 17:21 - 00449536 _____ C:\Users\Manikowscy\Downloads\przew-konw-prom_wyklad_1.ppt 2014-01-16 15:39 - 2014-01-16 15:39 - 01062912 _____ C:\Users\Manikowscy\Downloads\dynamika_plynow_rzeczywistych.ppt 2014-01-16 15:38 - 2014-01-16 15:38 - 00166400 _____ C:\Users\Manikowscy\Downloads\ROWNANIE_BERNOULLIEGO_DLA_CIECZY_RZECZYWISTEJ.ppt 2014-01-16 14:36 - 2014-01-16 14:36 - 06117061 _____ C:\Users\Manikowscy\Downloads\pytania na semi.rar 2014-01-16 14:19 - 2014-01-16 14:19 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\{6C1CBB5A-59EA-43F5-8542-F4DFF1C2D9CD} 2014-01-16 14:19 - 2014-01-16 14:19 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\{3F9F2098-67CB-4B8F-84FA-B4C9A5AA61C1} 2014-01-15 22:45 - 2014-01-15 22:45 - 23359665 _____ C:\Users\Manikowscy\Downloads\Zagadnienia.zip 2014-01-15 10:33 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 10:33 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 10:33 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 10:33 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-10 18:47 - 2014-01-10 18:47 - 00000000 ____D C:\Users\Manikowscy\Desktop\do biedry 2014-01-07 23:39 - 2014-01-07 23:39 - 00000000 ____D C:\Users\Manikowscy\Downloads\ChomikBox 2014-01-07 23:38 - 2014-01-21 13:18 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\ChomikBox 2014-01-07 23:38 - 2014-01-21 13:18 - 00000000 ____D C:\Users\Manikowscy\.gstreamer-0.10 2014-01-07 23:38 - 2014-01-07 23:38 - 00000662 _____ C:\Users\Public\Desktop\ChomikBox.lnk 2014-01-07 23:38 - 2014-01-07 23:38 - 00000000 ____D C:\Program Files (x86)\ChomikBox 2014-01-07 23:37 - 2014-01-07 23:38 - 28002816 _____ C:\Users\Manikowscy\Downloads\ChomikBox.msi 2014-01-01 14:00 - 2014-01-03 00:52 - 00000005 _____ C:\Users\Manikowscy\AppData\Roaming\WBPU-Q5-TTL.DAT ==================== One Month Modified Files and Folders ======= 2014-01-21 13:20 - 2014-01-21 00:10 - 00015431 _____ C:\Users\Manikowscy\Downloads\FRST.txt 2014-01-21 13:19 - 2014-01-21 13:19 - 00007653 _____ C:\Users\Manikowscy\Desktop\AdwCleaner[S1].txt 2014-01-21 13:18 - 2014-01-07 23:38 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\ChomikBox 2014-01-21 13:18 - 2014-01-07 23:38 - 00000000 ____D C:\Users\Manikowscy\.gstreamer-0.10 2014-01-21 13:18 - 2013-11-05 22:58 - 00000000 ___RD C:\Users\Manikowscy\Dropbox 2014-01-21 13:18 - 2013-11-05 22:54 - 00000000 ____D C:\Users\Manikowscy\AppData\Roaming\Dropbox 2014-01-21 13:18 - 2013-10-17 12:06 - 00000000 ____D C:\ProgramData\NVIDIA 2014-01-21 13:18 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-21 13:18 - 2009-07-14 05:51 - 00065478 _____ C:\Windows\setupact.log 2014-01-21 13:17 - 2013-10-17 21:04 - 01257324 _____ C:\Windows\WindowsUpdate.log 2014-01-21 13:16 - 2013-10-17 19:08 - 00000000 ____D C:\AdwCleaner 2014-01-21 13:15 - 2014-01-21 13:15 - 01236282 _____ C:\Users\Manikowscy\Downloads\AdwCleaner.exe 2014-01-21 13:11 - 2014-01-21 13:11 - 00000000 ____D C:\Users\Manikowscy\Desktop\Stare dane programu Firefox 2014-01-21 13:09 - 2014-01-21 13:09 - 00000000 ____D C:\MATS 2014-01-21 13:06 - 2014-01-21 13:06 - 00347816 _____ (Microsoft Corporation) C:\Users\Manikowscy\Downloads\MicrosoftFixit.ProgramInstallUninstall.RNP.33313733187366338.2.1.Run.exe 2014-01-21 13:01 - 2014-01-21 13:01 - 00000000 ____D C:\Users\Manikowscy\Downloads\FRST-OlderVersion 2014-01-21 13:01 - 2014-01-21 00:10 - 00000000 ____D C:\FRST 2014-01-21 13:01 - 2014-01-21 00:09 - 02077184 _____ (Farbar) C:\Users\Manikowscy\Downloads\FRST64.exe 2014-01-21 12:02 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-21 12:02 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-21 12:00 - 2011-03-16 18:32 - 00749142 _____ C:\Windows\system32\perfh015.dat 2014-01-21 12:00 - 2011-03-16 18:32 - 00158170 _____ C:\Windows\system32\perfc015.dat 2014-01-21 12:00 - 2009-07-14 06:13 - 01693316 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-21 00:45 - 2014-01-21 00:45 - 00444035 _____ C:\Users\Manikowscy\Desktop\GMER.txt 2014-01-21 00:43 - 2013-10-17 20:32 - 00000100 _____ C:\Users\Manikowscy\AppData\Roaming\WB.CFG 2014-01-21 00:43 - 2013-10-17 20:32 - 00000005 _____ C:\Users\Manikowscy\AppData\Roaming\WBPU-TTL.DAT 2014-01-21 00:12 - 2014-01-21 00:12 - 00379904 _____ C:\Users\Manikowscy\Downloads\389pcm8d.exe 2014-01-21 00:12 - 2014-01-21 00:12 - 00030580 _____ C:\Users\Manikowscy\Desktop\FRST.txt 2014-01-21 00:11 - 2014-01-21 00:11 - 00028033 _____ C:\Users\Manikowscy\Downloads\Addition.txt 2014-01-21 00:11 - 2014-01-21 00:11 - 00028033 _____ C:\Users\Manikowscy\Desktop\Addition.txt 2014-01-20 22:56 - 2014-01-20 22:56 - 00071548 _____ C:\Users\Manikowscy\Desktop\Extras.Txt 2014-01-20 22:55 - 2014-01-20 22:55 - 00091856 _____ C:\Users\Manikowscy\Desktop\OTL.Txt 2014-01-20 22:54 - 2014-01-20 22:54 - 00091856 _____ C:\Users\Manikowscy\Downloads\OTL.Txt 2014-01-20 22:54 - 2014-01-20 22:54 - 00071548 _____ C:\Users\Manikowscy\Downloads\Extras.Txt 2014-01-20 22:48 - 2014-01-20 22:48 - 00602112 _____ (OldTimer Tools) C:\Users\Manikowscy\Downloads\OTL.exe 2014-01-20 13:59 - 2013-11-13 18:01 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-17 03:20 - 2010-11-21 04:47 - 00704026 _____ C:\Windows\PFRO.log 2014-01-17 03:03 - 2013-10-21 11:02 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-17 03:01 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini 2014-01-16 22:26 - 2013-11-05 22:55 - 00000000 ____D C:\Users\Manikowscy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-16 22:26 - 2013-10-17 12:08 - 00000000 ___RD C:\Users\Manikowscy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-16 22:25 - 2014-01-16 22:17 - 28391449 _____ C:\Users\Manikowscy\Downloads\Marcela bawi i uczy.mp4 2014-01-16 22:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports 2014-01-16 17:21 - 2014-01-16 17:21 - 00449536 _____ C:\Users\Manikowscy\Downloads\przew-konw-prom_wyklad_1.ppt 2014-01-16 15:39 - 2014-01-16 15:39 - 01062912 _____ C:\Users\Manikowscy\Downloads\dynamika_plynow_rzeczywistych.ppt 2014-01-16 15:38 - 2014-01-16 15:38 - 00166400 _____ C:\Users\Manikowscy\Downloads\ROWNANIE_BERNOULLIEGO_DLA_CIECZY_RZECZYWISTEJ.ppt 2014-01-16 14:36 - 2014-01-16 14:36 - 06117061 _____ C:\Users\Manikowscy\Downloads\pytania na semi.rar 2014-01-16 14:19 - 2014-01-16 14:19 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\{6C1CBB5A-59EA-43F5-8542-F4DFF1C2D9CD} 2014-01-16 14:19 - 2014-01-16 14:19 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\{3F9F2098-67CB-4B8F-84FA-B4C9A5AA61C1} 2014-01-16 03:17 - 2009-07-14 05:45 - 00521416 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 22:45 - 2014-01-15 22:45 - 23359665 _____ C:\Users\Manikowscy\Downloads\Zagadnienia.zip 2014-01-15 21:40 - 2013-10-21 10:32 - 00000000 ____D C:\Users\Manikowscy\Desktop\inżynierka 2014-01-15 20:58 - 2013-10-17 14:26 - 00000000 ____D C:\Users\Manikowscy\Desktop\praca 2014-01-12 20:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2014-01-10 18:47 - 2014-01-10 18:47 - 00000000 ____D C:\Users\Manikowscy\Desktop\do biedry 2014-01-07 23:39 - 2014-01-07 23:39 - 00000000 ____D C:\Users\Manikowscy\Downloads\ChomikBox 2014-01-07 23:38 - 2014-01-07 23:38 - 00000662 _____ C:\Users\Public\Desktop\ChomikBox.lnk 2014-01-07 23:38 - 2014-01-07 23:38 - 00000000 ____D C:\Program Files (x86)\ChomikBox 2014-01-07 23:38 - 2014-01-07 23:37 - 28002816 _____ C:\Users\Manikowscy\Downloads\ChomikBox.msi 2014-01-07 23:38 - 2013-10-17 12:02 - 00000000 ____D C:\Users\Manikowscy 2014-01-04 12:49 - 2013-11-18 22:11 - 00000000 ____D C:\Users\Manikowscy\AppData\Local\cache 2014-01-03 00:52 - 2014-01-01 14:00 - 00000005 _____ C:\Users\Manikowscy\AppData\Roaming\WBPU-Q5-TTL.DAT Some content of TEMP: ==================== C:\Users\Manikowscy\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 11:13 ==================== End Of Log ============================