Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-04-2014 Ran by awk (administrator) on AWK-KOMPUTER on 23-04-2014 00:19:02 Running from F:\8\2 Farbar Recovery Scan Tool (FRST) Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Farbar) F:\8\2 Farbar Recovery Scan Tool (FRST)\FRST64 X-8.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13219984 2012-11-07] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-08-10] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-08-10] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2978544 2013-05-22] (Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3854640 2014-04-22] (AVAST Software) HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) Hosts: 127.0.0.1 validation.sls.microsoft.com Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\awk\AppData\Roaming\Mozilla\Firefox\Profiles\kpkdwig0.default-1398204126321 FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.5.0 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-22] Chrome: ======= CHR Extension: (Google Wallet) - C:\Users\awk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-23] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-22] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-22] (AVAST Software) R2 MSSQL$BIZNESMENPRO; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [327296 2012-08-10] (Atheros) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-22] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-22] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-22] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-22] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-22] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-22] () R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [61824 2012-10-31] (ASUS Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-22] (Duplex Secure Ltd.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-04-23 00:02 - 2014-04-23 00:02 - 00000000 ____D () C:\Users\awk\Desktop\Stare dane programu Firefox 2014-04-22 18:22 - 2014-04-23 00:19 - 00000000 ____D () C:\FRST 2014-04-22 17:32 - 2014-04-22 17:32 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-04-22 17:12 - 2014-04-22 17:12 - 00001032 _____ () C:\Users\Public\Desktop\OpenFM.lnk 2014-04-22 17:12 - 2014-04-22 17:12 - 00001003 _____ () C:\Users\Public\Desktop\Gadu-Gadu 10.lnk 2014-04-22 17:12 - 2014-04-22 17:12 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Gadu-Gadu 10 2014-04-22 17:12 - 2014-04-22 17:12 - 00000000 ____D () C:\ProgramData\Gadu-Gadu 10 2014-04-22 17:11 - 2014-04-22 17:11 - 00000000 ____D () C:\Program Files (x86)\Gadu-Gadu 10 2014-04-22 15:56 - 2014-04-22 15:56 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-04-22 15:55 - 2014-04-22 15:56 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-22 15:42 - 2014-04-22 15:42 - 00001397 _____ () C:\AdwCleaner[S1].txt 2014-04-22 14:57 - 2014-04-22 14:57 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{9B60F7B6-BB6D-4566-9F4C-C0CA4F011EA3} 2014-04-22 14:06 - 2014-04-22 14:28 - 00000000 ____D () C:\AdwCleaner 2014-04-22 13:57 - 2014-04-22 13:57 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-22 13:57 - 2014-04-22 13:57 - 00000000 ____D () C:\Users\awk\AppData\Roaming\AVAST Software 2014-04-22 13:56 - 2014-04-22 16:38 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-04-22 13:56 - 2014-04-22 13:56 - 00002261 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-22 13:54 - 2014-04-23 00:14 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-22 13:54 - 2014-04-23 00:06 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-22 13:54 - 2014-04-23 00:01 - 00004038 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-04-22 13:54 - 2014-04-23 00:01 - 00003786 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-04-22 13:54 - 2014-04-22 13:53 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-22 13:54 - 2014-04-22 13:53 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-22 13:53 - 2014-04-22 13:53 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-22 13:53 - 2014-04-22 13:53 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-22 13:52 - 2014-04-22 13:52 - 00000000 ____D () C:\Program Files\AVAST Software 2014-04-22 13:51 - 2014-04-22 13:51 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-04-21 15:27 - 2014-04-21 16:12 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Google 2014-04-21 15:15 - 2014-04-21 15:15 - 00000000 ____D () C:\Program Files\Google 2014-04-21 15:13 - 2014-04-21 15:13 - 00000000 ____D () C:\Program Files (x86)\NirSoft 2014-04-21 15:12 - 2014-04-21 15:15 - 00000000 ____D () C:\ProgramData\Google 2014-04-21 15:12 - 2014-04-21 15:12 - 00000000 ____D () C:\Users\awk\AppData\Roaming\RealNetworks 2014-04-21 15:12 - 2014-04-21 15:12 - 00000000 ____D () C:\Users\awk\AppData\Local\Real 2014-04-21 15:11 - 2014-04-22 09:18 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-04-21 15:11 - 2014-04-21 15:11 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-04-21 15:10 - 2014-04-21 15:11 - 00000000 ____D () C:\Program Files (x86)\Real 2014-04-21 15:09 - 2014-04-21 16:25 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Real 2014-04-21 14:30 - 2014-04-21 14:30 - 00000000 ____D () C:\Users\awk\AppData\Roaming\TeamViewer 2014-04-21 14:30 - 2014-04-21 14:30 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-04-21 12:05 - 2014-04-21 12:05 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Passware 2014-04-21 12:05 - 2014-04-21 12:05 - 00000000 ____D () C:\Program Files (x86)\Passware 2014-04-21 12:03 - 2014-04-21 12:03 - 62828544 _____ () C:\Users\awk\Downloads\passware-kit-enterprise-demo.msi 2014-04-21 11:46 - 2014-04-21 15:17 - 00000000 ____D () C:\ProgramData\Real 2014-04-18 13:14 - 2014-04-18 13:14 - 00000000 ____D () C:\Windows\Sun 2014-04-07 15:37 - 2014-04-07 15:37 - 00001997 _____ () C:\Users\awk\Desktop\Fakturowanie PRO Plus.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001987 _____ () C:\Users\awk\Desktop\Magazyn i Faktury PRO Plus.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001985 _____ () C:\Users\awk\Desktop\Fakturowanie PRO.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001969 _____ () C:\Users\awk\Desktop\Magazyn i Faktury PRO.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry 2014-04-07 15:36 - 2014-04-12 22:38 - 00000000 ____D () C:\Program Files (x86)\BiznesmenPRO 2014-04-07 15:36 - 2014-04-07 15:36 - 00001980 _____ () C:\Users\awk\Desktop\Księga Przychodów i Rozchodów PRO Plus.lnk 2014-04-07 15:36 - 2014-04-07 15:36 - 00001968 _____ () C:\Users\awk\Desktop\Księga Przychodów i Rozchodów PRO.lnk 2014-04-07 15:36 - 2014-04-07 15:36 - 00001075 _____ () C:\Users\awk\Desktop\Kadry, Płace i Zus PRO.lnk 2014-04-07 15:32 - 2014-04-07 15:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server 2014-04-07 15:32 - 2014-04-07 15:33 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works 2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 2014-04-04 15:06 - 2014-04-04 15:06 - 00000000 ____D () C:\Windows\PCHEALTH 2014-04-04 15:04 - 2014-04-04 15:04 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-04-04 15:04 - 2014-04-04 15:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-04-04 15:03 - 2014-04-04 15:10 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-04 15:03 - 2014-04-04 15:07 - 00000000 ____D () C:\Windows\SHELLNEW 2014-04-04 15:03 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Users\awk\AppData\Local\Microsoft Help 2014-04-04 15:02 - 2014-04-04 15:02 - 00000000 __RHD () C:\MSOCache 2014-04-02 22:26 - 2014-04-02 22:33 - 21026990 _____ (Drimar) C:\Users\awk\Downloads\fajnafakturaSuper.exe 2014-03-28 11:19 - 2014-03-28 11:25 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Drimar 2014-03-28 11:19 - 2014-03-28 11:19 - 00001104 _____ () C:\Users\awk\Desktop\FajnaFaktura.lnk 2014-03-28 11:19 - 2014-03-28 11:19 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fajna Faktura Start 2014-03-28 11:19 - 2014-03-28 11:19 - 00000000 ____D () C:\Program Files (x86)\Fajna Faktura Start 2014-03-26 15:32 - 2014-03-26 15:32 - 01608921 _____ () C:\Users\awk\Desktop\dokumenty.zip ==================== One Month Modified Files and Folders ======= 2014-04-23 00:19 - 2014-04-22 18:22 - 00000000 ____D () C:\FRST 2014-04-23 00:14 - 2014-04-22 13:54 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-04-23 00:13 - 2010-11-21 05:47 - 00019080 _____ () C:\Windows\PFRO.log 2014-04-23 00:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-23 00:13 - 2009-07-14 06:51 - 00044330 _____ () C:\Windows\setupact.log 2014-04-23 00:12 - 2013-12-12 12:15 - 01130885 _____ () C:\Windows\WindowsUpdate.log 2014-04-23 00:06 - 2014-04-22 13:54 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-04-23 00:06 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-23 00:06 - 2009-07-14 06:45 - 00021072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-23 00:02 - 2014-04-23 00:02 - 00000000 ____D () C:\Users\awk\Desktop\Stare dane programu Firefox 2014-04-23 00:01 - 2014-04-22 13:54 - 00004038 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-04-23 00:01 - 2014-04-22 13:54 - 00003786 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-04-23 00:01 - 2013-12-13 12:02 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-04-23 00:00 - 2011-02-04 19:20 - 00747968 _____ () C:\Windows\system32\perfh015.dat 2014-04-23 00:00 - 2011-02-04 19:20 - 00154008 _____ () C:\Windows\system32\perfc015.dat 2014-04-23 00:00 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-04-22 19:35 - 2014-01-06 21:41 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-22 17:32 - 2014-04-22 17:32 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2014-04-22 17:12 - 2014-04-22 17:12 - 00001032 _____ () C:\Users\Public\Desktop\OpenFM.lnk 2014-04-22 17:12 - 2014-04-22 17:12 - 00001003 _____ () C:\Users\Public\Desktop\Gadu-Gadu 10.lnk 2014-04-22 17:12 - 2014-04-22 17:12 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Gadu-Gadu 10 2014-04-22 17:12 - 2014-04-22 17:12 - 00000000 ____D () C:\ProgramData\Gadu-Gadu 10 2014-04-22 17:11 - 2014-04-22 17:11 - 00000000 ____D () C:\Program Files (x86)\Gadu-Gadu 10 2014-04-22 16:38 - 2014-04-22 13:56 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-04-22 15:56 - 2014-04-22 15:56 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-04-22 15:56 - 2014-04-22 15:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-22 15:55 - 2013-12-13 11:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-22 15:42 - 2014-04-22 15:42 - 00001397 _____ () C:\AdwCleaner[S1].txt 2014-04-22 14:57 - 2014-04-22 14:57 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{9B60F7B6-BB6D-4566-9F4C-C0CA4F011EA3} 2014-04-22 14:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-22 14:28 - 2014-04-22 14:06 - 00000000 ____D () C:\AdwCleaner 2014-04-22 13:57 - 2014-04-22 13:57 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-04-22 13:57 - 2014-04-22 13:57 - 00000000 ____D () C:\Users\awk\AppData\Roaming\AVAST Software 2014-04-22 13:56 - 2014-04-22 13:56 - 00002261 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-04-22 13:53 - 2014-04-22 13:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00208928 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00084816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-04-22 13:53 - 2014-04-22 13:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-04-22 13:53 - 2014-04-22 13:53 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-04-22 13:53 - 2014-04-22 13:53 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-04-22 13:53 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-04-22 13:52 - 2014-04-22 13:52 - 00000000 ____D () C:\Program Files\AVAST Software 2014-04-22 13:51 - 2014-04-22 13:51 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-04-22 13:34 - 2013-12-12 12:20 - 00001417 _____ () C:\Users\awk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-04-22 13:34 - 2013-12-12 12:19 - 00001421 _____ () C:\Users\awk\Desktop\Internet Explorer.lnk 2014-04-22 09:20 - 2013-12-12 15:50 - 00108840 _____ () C:\Users\awk\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-22 09:19 - 2013-12-12 12:19 - 00000000 ____D () C:\Users\awk 2014-04-22 09:18 - 2014-04-21 15:11 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-04-22 09:18 - 2013-12-13 11:28 - 00000000 ____D () C:\Program Files (x86)\IrfanView 2014-04-22 09:18 - 2013-12-12 15:35 - 00000000 ____D () C:\ProgramData\Atheros 2014-04-22 09:18 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-04-22 09:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-04-21 16:25 - 2014-04-21 15:09 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Real 2014-04-21 16:12 - 2014-04-21 15:27 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Google 2014-04-21 16:12 - 2013-12-15 15:12 - 00000000 ____D () C:\Users\awk\AppData\Local\CrashDumps 2014-04-21 16:11 - 2014-03-09 23:10 - 00000000 ____D () C:\Users\awk\AppData\Local\Google 2014-04-21 15:17 - 2014-04-21 11:46 - 00000000 ____D () C:\ProgramData\Real 2014-04-21 15:15 - 2014-04-21 15:15 - 00000000 ____D () C:\Program Files\Google 2014-04-21 15:15 - 2014-04-21 15:12 - 00000000 ____D () C:\ProgramData\Google 2014-04-21 15:13 - 2014-04-21 15:13 - 00000000 ____D () C:\Program Files (x86)\NirSoft 2014-04-21 15:12 - 2014-04-21 15:12 - 00000000 ____D () C:\Users\awk\AppData\Roaming\RealNetworks 2014-04-21 15:12 - 2014-04-21 15:12 - 00000000 ____D () C:\Users\awk\AppData\Local\Real 2014-04-21 15:11 - 2014-04-21 15:11 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-04-21 15:11 - 2014-04-21 15:10 - 00000000 ____D () C:\Program Files (x86)\Real 2014-04-21 14:30 - 2014-04-21 14:30 - 00000000 ____D () C:\Users\awk\AppData\Roaming\TeamViewer 2014-04-21 14:30 - 2014-04-21 14:30 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-04-21 12:05 - 2014-04-21 12:05 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Passware 2014-04-21 12:05 - 2014-04-21 12:05 - 00000000 ____D () C:\Program Files (x86)\Passware 2014-04-21 12:03 - 2014-04-21 12:03 - 62828544 _____ () C:\Users\awk\Downloads\passware-kit-enterprise-demo.msi 2014-04-21 11:34 - 2013-12-13 11:45 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-04-18 13:14 - 2014-04-18 13:14 - 00000000 ____D () C:\Windows\Sun 2014-04-15 15:13 - 2014-03-19 22:03 - 00000000 ____D () C:\Users\awk\Desktop\Nowy folder 2014-04-12 22:38 - 2014-04-07 15:36 - 00000000 ____D () C:\Program Files (x86)\BiznesmenPRO 2014-04-10 08:21 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-09 12:25 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-04-07 15:37 - 2014-04-07 15:37 - 00001997 _____ () C:\Users\awk\Desktop\Fakturowanie PRO Plus.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001987 _____ () C:\Users\awk\Desktop\Magazyn i Faktury PRO Plus.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001985 _____ () C:\Users\awk\Desktop\Fakturowanie PRO.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00001969 _____ () C:\Users\awk\Desktop\Magazyn i Faktury PRO.lnk 2014-04-07 15:37 - 2014-04-07 15:37 - 00000000 ___HD () C:\Program Files (x86)\InstallJammer Registry 2014-04-07 15:36 - 2014-04-07 15:36 - 00001980 _____ () C:\Users\awk\Desktop\Księga Przychodów i Rozchodów PRO Plus.lnk 2014-04-07 15:36 - 2014-04-07 15:36 - 00001968 _____ () C:\Users\awk\Desktop\Księga Przychodów i Rozchodów PRO.lnk 2014-04-07 15:36 - 2014-04-07 15:36 - 00001075 _____ () C:\Users\awk\Desktop\Kadry, Płace i Zus PRO.lnk 2014-04-07 15:35 - 2014-04-07 15:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server 2014-04-07 15:35 - 2013-12-13 12:01 - 01529928 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-04-07 15:33 - 2014-04-07 15:32 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2014-04-04 15:40 - 2009-07-14 06:45 - 00418384 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-04 15:10 - 2014-04-04 15:03 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works 2014-04-04 15:07 - 2014-04-04 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 2014-04-04 15:07 - 2014-04-04 15:03 - 00000000 ____D () C:\Windows\SHELLNEW 2014-04-04 15:07 - 2014-04-04 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-04-04 15:07 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-04-04 15:06 - 2014-04-04 15:06 - 00000000 ____D () C:\Windows\PCHEALTH 2014-04-04 15:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-04-04 15:04 - 2014-04-04 15:04 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-04-04 15:04 - 2014-04-04 15:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8 2014-04-04 15:03 - 2014-04-04 15:03 - 00000000 ____D () C:\Users\awk\AppData\Local\Microsoft Help 2014-04-04 15:03 - 2009-07-14 07:13 - 01495262 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-04 15:03 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini 2014-04-04 15:02 - 2014-04-04 15:02 - 00000000 __RHD () C:\MSOCache 2014-04-02 22:33 - 2014-04-02 22:26 - 21026990 _____ (Drimar) C:\Users\awk\Downloads\fajnafakturaSuper.exe 2014-03-28 11:25 - 2014-03-28 11:19 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Drimar 2014-03-28 11:19 - 2014-03-28 11:19 - 00001104 _____ () C:\Users\awk\Desktop\FajnaFaktura.lnk 2014-03-28 11:19 - 2014-03-28 11:19 - 00000000 ____D () C:\Users\awk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fajna Faktura Start 2014-03-28 11:19 - 2014-03-28 11:19 - 00000000 ____D () C:\Program Files (x86)\Fajna Faktura Start 2014-03-26 15:32 - 2014-03-26 15:32 - 01608921 _____ () C:\Users\awk\Desktop\dokumenty.zip ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-21 11:24 ==================== End Of Log ============================