Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2014 01 Ran by Anna (administrator) on ANEKS-KOMP on 13-02-2014 16:10:33 Running from C:\Users\Anna\Desktop\Nowy folder Microsoft Windows 8.1 Pro N (X86) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Atheros Commnucations) C:\Windows\system32\AdminService.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files\ASUS\Splendid\ACMON.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x86__8wekyb3d8bbwe\LiveComm.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUSTeK) C:\Windows\System32\ACEngSvr.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe () C:\Program Files\RocketDock\RocketDock.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\system32\wbem\WMIADAP.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-04-19] (Advanced Micro Devices, Inc.) HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS) HKLM\...\Run: [ATKMEDIA] - C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS) HKLM\...\Run: [HControlUser] - C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [1812264 2010-12-31] (ELAN Microelectronics Corp.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20586656 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [AQQ] - C:\Program Files\WapSter\WapSter AQQ\AQQ.exe [8174592 2013-10-16] (AQQ Sp. z o.o.) HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-3859302846-4071715073-4289997142-1001\...\Run: [Facebook Update] - C:\Users\Anna\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-03] (Facebook Inc.) Startup: C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Anna\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5BE1731F8BF9CE01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL SearchScopes: HKLM - DefaultScope value is missing. BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 FireFox: ======== FF ProfilePath: C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\yac0wf2q.default-1392303451609 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Anna\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-27] CHR Extension: (Google Drive) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-27] CHR Extension: (YouTube) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-27] CHR Extension: (Google Search) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-27] CHR Extension: (Google Wallet) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-27] CHR Extension: (Gmail) - C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-27] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-10-31] (Avira Operations GmbH & Co. KG) S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-17] (Avira Operations GmbH & Co. KG) R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [84536 2009-06-15] (ASUS) R2 AtherosSvc; C:\Windows\system32\AdminService.exe [174080 2012-08-29] (Atheros Commnucations) R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2009-12-15] (ASUS) S3 ScDeviceEnum; C:\Windows\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [278264 2013-08-22] (Microsoft Corporation) S3 WEPHOSTSVC; C:\Windows\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22240 2013-08-22] (Microsoft Corporation) S3 workfolderssvc; C:\Windows\system32\workfolderssvc.dll [1210368 2013-10-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS) R3 asmthub3; C:\Windows\System32\drivers\asmthub3.sys [101352 2011-06-02] (ASMedia Technology Inc) R3 asmtxhci; C:\Windows\System32\drivers\asmtxhci.sys [317416 2011-06-02] (ASMedia Technology Inc) R3 athr; C:\Windows\system32\DRIVERS\athwn.sys [2795520 2013-06-18] (Qualcomm Atheros Communications, Inc.) R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [14080 2010-07-26] (ASUS) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [135648 2013-12-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [37352 2013-10-31] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [68728 2013-12-17] (Avira Operations GmbH & Co. KG) R1 BasicRender; C:\Windows\System32\drivers\BasicRender.sys [25600 2013-08-22] (Microsoft Corporation) R3 BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [480256 2012-08-29] (Qualcomm Atheros) R3 ETD; C:\Windows\system32\DRIVERS\ETD.sys [116008 2010-12-31] (ELAN Microelectronics Corp.) S3 GPIO; C:\Windows\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation) R1 ISODrive; C:\Program Files\UltraISO\drivers\ISODrive.sys [73728 2008-05-24] (EZB Systems, Inc.) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [13880 2009-07-20] ( ) R3 L1C; C:\Windows\system32\DRIVERS\L1C63x86.sys [110792 2013-06-18] (Qualcomm Atheros Co., Ltd.) R3 MEI; C:\Windows\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation) R1 ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [28520 2013-10-31] (Avira GmbH) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [93024 2013-08-22] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-13 16:06 - 2014-02-13 16:06 - 00001014 _____ () C:\Windows\PFRO.log 2014-02-13 16:03 - 2014-02-13 16:04 - 00000000 ____D () C:\AdwCleaner 2014-02-13 16:03 - 2014-02-13 16:03 - 01166132 _____ () C:\Users\Anna\Downloads\adwcleaner.exe 2014-02-13 15:57 - 2014-02-13 15:57 - 00000000 ____D () C:\Users\Anna\Desktop\Stare dane programu Firefox 2014-02-13 15:49 - 2014-02-13 16:10 - 00000000 ____D () C:\Users\Anna\Desktop\Nowy folder 2014-02-13 11:48 - 2014-01-07 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe 2014-02-13 11:48 - 2013-12-09 02:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-13 11:47 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-13 11:47 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-13 11:47 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-13 11:47 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-13 11:47 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-13 11:47 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-13 11:47 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-13 11:47 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-13 11:47 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-13 11:47 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-13 11:47 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-13 11:47 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-13 11:47 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-13 11:47 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-13 11:47 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-13 11:47 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-13 11:47 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-13 11:47 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-13 11:47 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-13 11:47 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-13 11:47 - 2014-01-09 08:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-02-13 11:47 - 2014-01-09 08:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2014-02-13 11:47 - 2014-01-09 08:30 - 00588800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2014-02-13 11:47 - 2014-01-09 08:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2014-02-13 11:47 - 2014-01-09 08:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2014-02-13 11:47 - 2014-01-09 08:18 - 03482112 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2014-02-13 11:47 - 2014-01-09 07:58 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2014-02-13 11:47 - 2014-01-07 05:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-13 11:47 - 2014-01-04 20:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-02-13 11:47 - 2014-01-04 15:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-02-13 11:47 - 2014-01-04 14:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-02-13 11:47 - 2014-01-04 14:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-02-13 11:47 - 2013-12-21 03:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms 2014-02-13 11:47 - 2013-12-20 09:28 - 00861976 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-02-13 11:47 - 2013-12-09 00:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-13 11:47 - 2013-11-21 06:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-13 11:46 - 2013-12-09 00:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 23:44 - 2014-02-12 23:44 - 00120842 _____ () C:\Users\Anna\Desktop\OTL.Txt 2014-02-12 23:44 - 2014-02-12 23:44 - 00052682 _____ () C:\Users\Anna\Desktop\Extras.Txt 2014-02-12 23:37 - 2014-02-12 23:37 - 00028454 _____ () C:\Users\Anna\Desktop\FRST.txt 2014-02-12 23:37 - 2014-02-12 23:37 - 00022911 _____ () C:\Users\Anna\Desktop\Addition.txt 2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Anna\Downloads\FRST-OlderVersion 2014-02-08 15:27 - 2014-02-08 15:27 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\UpdateBonanza 2014-02-07 14:10 - 2014-02-13 15:06 - 00994379 _____ () C:\Windows\WindowsUpdate.log 2014-02-05 15:58 - 2014-02-05 15:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-03 15:46 - 2014-02-03 15:46 - 00278294 _____ () C:\Users\Anna\Downloads\serduszka.bmp 2014-02-01 23:49 - 2014-02-13 16:10 - 00000000 ____D () C:\FRST 2014-02-01 23:36 - 2014-02-01 23:36 - 00602112 _____ (OldTimer Tools) C:\Users\Anna\Downloads\OTL.exe 2014-02-01 23:18 - 2014-02-01 23:21 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Audacity 2014-02-01 23:13 - 2014-02-01 23:13 - 00000981 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-02-01 23:13 - 2014-02-01 23:13 - 00000000 ____D () C:\Program Files\Audacity 2014-02-01 23:08 - 2014-02-01 23:11 - 22180353 _____ (Audacity Team ) C:\Users\Anna\Downloads\audacity-win-2.0.5.exe 2014-01-27 16:01 - 2014-02-13 16:07 - 00000000 ___RD () C:\Users\Anna\SkyDrive 2014-01-21 15:58 - 2014-01-21 15:59 - 08040309 _____ () C:\Users\Anna\Downloads\Jan Pawe é II. (1).pptx 2014-01-20 17:48 - 2014-01-20 17:48 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-20 17:41 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-01-20 17:41 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-20 17:41 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-20 17:41 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-20 17:40 - 2014-01-20 17:41 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-17 19:03 - 2014-01-17 19:03 - 07627740 _____ () C:\Users\Anna\Downloads\Jan PaweĹ‚ II.pptx 2014-01-16 19:41 - 2014-01-16 19:41 - 00001137 _____ () C:\Users\Anna\Desktop\Moo0 YouTube Downloader 1.07.lnk 2014-01-16 19:40 - 2014-01-16 19:41 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0 2014-01-16 19:40 - 2014-01-16 19:41 - 00000000 ____D () C:\Program Files\Moo0 2014-01-16 19:40 - 2014-01-16 19:40 - 00001195 _____ () C:\Users\Anna\Desktop\Moo0 Audio Converter 1.32.lnk 2014-01-15 12:26 - 2013-12-09 00:43 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll 2014-01-15 12:26 - 2013-11-27 15:09 - 02872688 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-01-15 12:26 - 2013-11-27 11:46 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe 2014-01-15 12:26 - 2013-11-27 10:54 - 00103936 _____ () C:\Windows\system32\OEMLicense.dll 2014-01-15 12:26 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 12:26 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-01-15 12:26 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll ==================== One Month Modified Files and Folders ======= 2014-02-13 16:10 - 2014-02-13 15:49 - 00000000 ____D () C:\Users\Anna\Desktop\Nowy folder 2014-02-13 16:10 - 2014-02-01 23:49 - 00000000 ____D () C:\FRST 2014-02-13 16:07 - 2014-01-27 16:01 - 00000000 ___RD () C:\Users\Anna\SkyDrive 2014-02-13 16:06 - 2014-02-13 16:06 - 00001014 _____ () C:\Windows\PFRO.log 2014-02-13 16:06 - 2013-11-29 18:40 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-02-13 16:06 - 2013-11-26 21:03 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-13 16:06 - 2013-08-22 08:23 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-13 16:05 - 2013-08-22 07:13 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-02-13 16:04 - 2014-02-13 16:03 - 00000000 ____D () C:\AdwCleaner 2014-02-13 16:03 - 2014-02-13 16:03 - 01166132 _____ () C:\Users\Anna\Downloads\adwcleaner.exe 2014-02-13 16:00 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\sru 2014-02-13 15:57 - 2014-02-13 15:57 - 00000000 ____D () C:\Users\Anna\Desktop\Stare dane programu Firefox 2014-02-13 15:47 - 2013-12-01 12:37 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-13 15:23 - 2013-11-26 21:03 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-13 15:06 - 2014-02-07 14:10 - 00994379 _____ () C:\Windows\WindowsUpdate.log 2014-02-13 14:54 - 2013-11-26 21:02 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-13 14:54 - 2013-08-22 15:35 - 00807160 _____ () C:\Windows\system32\perfh015.dat 2014-02-13 14:54 - 2013-08-22 15:35 - 00163478 _____ () C:\Windows\system32\perfc015.dat 2014-02-13 14:48 - 2013-08-22 09:16 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-02-13 14:46 - 2013-08-22 09:17 - 00000000 ___RD () C:\Windows\ToastData 2014-02-13 14:46 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-02-13 14:46 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\MediaViewer 2014-02-13 14:46 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\FileManager 2014-02-13 14:46 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\Camera 2014-02-13 14:10 - 2013-12-03 19:56 - 00000946 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3859302846-4071715073-4289997142-1001UA.job 2014-02-13 14:05 - 2013-11-28 22:05 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-13 14:03 - 2013-11-28 22:05 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-13 11:27 - 2014-01-08 19:27 - 00000130 _____ () C:\Users\Anna\AppData\Roaming\WB.CFG 2014-02-13 00:16 - 2013-11-26 23:31 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Skype 2014-02-12 23:44 - 2014-02-12 23:44 - 00120842 _____ () C:\Users\Anna\Desktop\OTL.Txt 2014-02-12 23:44 - 2014-02-12 23:44 - 00052682 _____ () C:\Users\Anna\Desktop\Extras.Txt 2014-02-12 23:37 - 2014-02-12 23:37 - 00028454 _____ () C:\Users\Anna\Desktop\FRST.txt 2014-02-12 23:37 - 2014-02-12 23:37 - 00022911 _____ () C:\Users\Anna\Desktop\Addition.txt 2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Anna\Downloads\FRST-OlderVersion 2014-02-12 23:30 - 2013-11-27 19:06 - 00466432 ___SH () C:\Users\Anna\Downloads\Thumbs.db 2014-02-12 20:10 - 2013-12-03 19:56 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3859302846-4071715073-4289997142-1001Core.job 2014-02-12 14:11 - 2013-11-28 18:16 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\vlc 2014-02-12 12:31 - 2013-12-04 14:09 - 00114296 _____ () C:\Users\Anna\keylog.log 2014-02-11 14:23 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\rescache 2014-02-11 13:28 - 2013-12-05 22:43 - 00218112 ___SH () C:\Users\Anna\Desktop\Thumbs.db 2014-02-11 00:02 - 2013-11-26 21:10 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Dropbox 2014-02-10 11:14 - 2013-11-26 21:03 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-02-10 11:13 - 2013-08-22 09:17 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-02-10 11:13 - 2013-08-22 09:17 - 00000000 ____D () C:\Program Files\Windows Defender 2014-02-08 15:27 - 2014-02-08 15:27 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\UpdateBonanza 2014-02-06 11:38 - 2014-02-13 11:47 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 11:20 - 2014-02-13 11:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 11:19 - 2014-02-13 11:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 11:01 - 2014-02-13 11:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 11:00 - 2014-02-13 11:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 10:57 - 2014-02-13 11:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 10:52 - 2014-02-13 11:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 10:52 - 2014-02-13 11:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 10:47 - 2014-02-13 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 10:47 - 2014-02-13 11:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 10:46 - 2014-02-13 11:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 10:34 - 2014-02-13 11:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 10:25 - 2014-02-13 11:47 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 10:25 - 2014-02-13 11:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 10:13 - 2014-02-13 11:47 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:09 - 2014-02-13 11:47 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:03 - 2014-02-13 11:47 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 09:41 - 2014-02-13 11:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 09:36 - 2014-02-13 11:47 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:34 - 2014-02-13 11:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-05 15:58 - 2014-02-05 15:58 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-02-04 13:43 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\AppReadiness 2014-02-03 15:46 - 2014-02-03 15:46 - 00278294 _____ () C:\Users\Anna\Downloads\serduszka.bmp 2014-02-01 23:36 - 2014-02-01 23:36 - 00602112 _____ (OldTimer Tools) C:\Users\Anna\Downloads\OTL.exe 2014-02-01 23:21 - 2014-02-01 23:18 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Audacity 2014-02-01 23:13 - 2014-02-01 23:13 - 00000981 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-02-01 23:13 - 2014-02-01 23:13 - 00000000 ____D () C:\Program Files\Audacity 2014-02-01 23:11 - 2014-02-01 23:08 - 22180353 _____ (Audacity Team ) C:\Users\Anna\Downloads\audacity-win-2.0.5.exe 2014-01-30 21:47 - 2013-08-22 09:18 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-01-30 21:47 - 2013-08-22 09:18 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-01-27 16:01 - 2013-11-26 20:57 - 00000000 __RDO () C:\Users\Anna\SkyDrive.old 2014-01-27 16:01 - 2013-11-26 20:54 - 00000000 ____D () C:\Users\Anna 2014-01-22 21:02 - 2013-08-22 09:17 - 00000000 ____D () C:\Windows\WinStore 2014-01-21 15:59 - 2014-01-21 15:58 - 08040309 _____ () C:\Users\Anna\Downloads\Jan Pawe é II. (1).pptx 2014-01-20 17:48 - 2014-01-20 17:48 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-20 17:41 - 2014-01-20 17:40 - 00005134 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log 2014-01-20 17:41 - 2013-11-26 22:46 - 00000000 ____D () C:\Program Files\Java 2014-01-17 19:03 - 2014-01-17 19:03 - 07627740 _____ () C:\Users\Anna\Downloads\Jan PaweĹ‚ II.pptx 2014-01-17 17:59 - 2013-11-26 21:04 - 00000000 ____D () C:\Users\Anna\AppData\Local\Adobe 2014-01-16 20:08 - 2013-11-26 21:09 - 00001044 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-01-16 19:41 - 2014-01-16 19:41 - 00001137 _____ () C:\Users\Anna\Desktop\Moo0 YouTube Downloader 1.07.lnk 2014-01-16 19:41 - 2014-01-16 19:40 - 00000000 ____D () C:\Users\Anna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0 2014-01-16 19:41 - 2014-01-16 19:40 - 00000000 ____D () C:\Program Files\Moo0 2014-01-16 19:40 - 2014-01-16 19:40 - 00001195 _____ () C:\Users\Anna\Desktop\Moo0 Audio Converter 1.32.lnk 2014-01-15 21:03 - 2013-11-26 22:52 - 00000000 ____D () C:\ProgramData\Microsoft Help Some content of TEMP: ==================== C:\Users\Anna\AppData\Local\Temp\avgnt.exe C:\Users\Anna\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 16:31 ==================== End Of Log ============================