Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-07-2014 01 Ran by SIWY (administrator) on SIWY-HP on 16-07-2014 20:26:17 Running from C:\Users\SIWY\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (AMD) C:\Windows\System32\atieclxx.exe (HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe (HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe (Kingsoft Corporation) C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxescore.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (CrossLoop) C:\Users\SIWY\AppData\Local\CrossLoop\CrossLoopService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (OptionNV) C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\pg_ctl.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\Varico\VaricoPostgres\bin\postgres.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Nokia) C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia) C:\Program Files (x86)\Nokia\Nokia PC Suite 6\PCSuite.exe (Pokki) C:\Users\SIWY\AppData\Local\Pokki\Engine\pokki.exe (Option) C:\Program Files\Option\GlobeTrotter Connect\GlobeTrotter Connect.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Kingsoft Corporation) C:\Program Files (x86)\kingsoft\kingsoft antivirus\kxetray.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Pokki) C:\Users\SIWY\AppData\Local\Pokki\Engine\pokki.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe (Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrv.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (TeamViewer GmbH) C:\Users\SIWY\AppData\Local\Temp\TeamViewer\Version9\TeamViewer.exe (TeamViewer GmbH) C:\Users\SIWY\AppData\Local\Temp\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Users\SIWY\AppData\Local\Temp\TeamViewer\Version9\tv_x64.exe (Microsoft Corporation) C:\Windows\SysWOW64\taskmgr.exe () C:\Program Files (x86)\Common Files\Nokia\NoA\nokiaaserver.exe (Nokia) C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (TeamViewer GmbH) C:\Users\SIWY\AppData\Local\Temp\TeamViewer\Version9\TeamViewer_Desktop.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Opera Software) C:\Program Files (x86)\Opera\opera.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe (Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated) HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-02-04] (Intel(R) Corporation) HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7825720 2014-03-26] (Motorola Solutions, Inc.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-15] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-01-25] (cyberlink) HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Run: [help] => C:\Users\SIWY\AppData\Roaming\InstallDir\help.exe [81920 2010-11-21] ( ) HKLM-x32\...\Run: [kxesc] => c:\program files (x86)\kingsoft\kingsoft antivirus\kxetray.exe [1595056 2014-07-12] (Kingsoft Corporation) HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-06-10] (Hewlett-Packard) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 0 HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\.DEFAULT\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\.DEFAULT\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Run: [NokiaOviSuite2] => C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [401728 2009-12-10] (Nokia) HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Run: [PC Suite Tray] => C:\Program Files (x86)\Nokia\Nokia PC Suite 6\PCSuite.exe [1079808 2008-04-16] (Nokia) HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Run: [help] => C:\Users\SIWY\AppData\Roaming\InstallDir\help.exe [81920 2010-11-21] ( ) HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Run: [wfirewall] => C:\Users\SIWY\AppData\Roaming\wfirewall\alg.exe [81920 2014-06-02] ( ) HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-21-982367207-1440490565-2568245623-1001\...\Policies\Explorer: [HideSCAHealth] 0 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GlobeTrotter Connect.lnk ShortcutTarget: GlobeTrotter Connect.lnk -> C:\Program Files\Option\GlobeTrotter Connect\GlobeTrotter Connect.exe (Option) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\system.pif ( ) Startup: C:\Users\SIWY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\system.pif ( ) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - {0CEEE379-BFE6-4B45-8C64-3632C458CFEB} URL = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 - DefaultScope value is missing. BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: No Name - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-02-27] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR Extension: (Website Logon) - C:\Users\SIWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe [2014-01-12] CHR Extension: (Adblock Plus) - C:\Users\SIWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-12] CHR Extension: (Google Wallet) - C:\Users\SIWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-12] CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11] ==================== Services (Whitelisted) ================= S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-01-25] (CyberLink) R2 CrossLoopService; C:\Users\SIWY\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop) R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [File not signed] R2 GtDetectSc; C:\Program Files\Option\GlobeTrotter Connect\GtDetectSc.exe [312320 2007-12-18] (OptionNV) [File not signed] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed] R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 kxescore; c:\program files (x86)\kingsoft\kingsoft antivirus\kxescore.exe [123992 2014-07-12] (Kingsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-04] () R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] R2 pgsql-8.3; C:\Program Files (x86)\Varico\VaricoPostgres\bin\pg_ctl.exe [65536 2009-02-03] (PostgreSQL Global Development Group) [File not signed] R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] R3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [657408 2009-10-27] (Nokia) [File not signed] S3 tvnserver; C:\Users\SIWY\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [File not signed] ==================== Drivers (Whitelisted) ==================== S3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [274944 2011-01-24] (Intel Corporation) [File not signed] S3 GT72NDISIPXP; C:\Windows\System32\DRIVERS\Gt51Ip.sys [124928 2008-02-18] (Option N.V.) S3 GT72UBUS; C:\Windows\System32\DRIVERS\gt72ubus.sys [80896 2008-02-08] (Option N.V.) S3 GTPTSER; C:\Windows\System32\DRIVERS\gtptser.sys [10624 2007-03-30] (Option N.V.) S3 iBtFltCoex; C:\Windows\System32\DRIVERS\iBtFltCoex.sys [59904 2011-01-24] (Intel Corporation) [File not signed] R0 kavbootc; C:\Windows\System32\drivers\kavbootc64.sys [31848 2014-07-12] (Kingsoft Corporation) R1 KDHacker; c:\program files (x86)\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys [164696 2014-07-12] (Kingsoft Corporation) R2 kisknl; C:\Windows\system32\drivers\kisknl.sys [210296 2014-07-12] (Kingsoft Corporation) R4 KUsbGuard; C:\Program Files (x86)\kingsoft\kingsoft antivirus\kusbquery64.sys [18296 2014-07-12] (Kingsoft Corporation) S3 nmwcdcx64; C:\Windows\System32\drivers\ccdcmbox64.sys [25088 2009-10-06] (Nokia) S3 nmwcdx64; C:\Windows\System32\drivers\ccdcmbx64.sys [18944 2009-10-06] (Nokia) S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltx64j.sys [8704 2009-10-06] (Nokia) S3 btmaux; system32\DRIVERS\btmaux.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-16 20:26 - 2014-07-16 20:26 - 00020790 _____ () C:\Users\SIWY\Downloads\FRST.txt 2014-07-16 20:25 - 2014-07-16 20:26 - 00000000 ____D () C:\FRST 2014-07-16 20:24 - 2014-07-16 20:24 - 02086912 _____ (Farbar) C:\Users\SIWY\Downloads\FRST64.exe 2014-07-14 13:39 - 2014-07-14 13:39 - 00000000 _____ () C:\Users\SIWY\Desktop\ATT00019.txt 2014-07-14 10:01 - 2014-07-14 10:01 - 00000000 ____D () C:\Users\SIWY\Documents\Nowy folder 2014-07-12 20:18 - 2014-07-12 20:18 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\TeamViewer 2014-07-12 20:17 - 2014-07-12 20:17 - 04663800 _____ (TeamViewer) C:\Users\SIWY\Desktop\TeamViewerQS_pl.exe 2014-07-12 19:59 - 2014-07-16 17:49 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\wfirewall 2014-07-12 18:51 - 2014-07-12 18:51 - 00184408 _____ (Kaspersky Lab ZAO) C:\Users\SIWY\Downloads\rafr.exe 2014-07-12 18:40 - 2014-07-12 18:56 - 00000000 ____D () C:\UsbFix 2014-07-12 18:38 - 2014-07-12 18:38 - 04019211 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\SIWY\Downloads\UsbFix.exe 2014-07-12 18:32 - 2014-07-12 19:15 - 00000000 ____D () C:\KRECYCLE 2014-07-12 18:32 - 2014-07-12 19:04 - 00000000 ____D () C:\ProgramData\kingsoft 2014-07-12 18:32 - 2014-07-12 18:32 - 00210296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00210296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00164696 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00125784 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00082264 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00031848 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00027240 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00024472 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\bc.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00019352 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksskrpr.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00018296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00014200 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00001059 _____ () C:\Users\Public\Desktop\Kingsoft Antivirus.lnk 2014-07-12 18:32 - 2014-07-12 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Antivirus 2014-07-12 18:32 - 2014-07-12 18:32 - 00000000 ____D () C:\Program Files (x86)\kingsoft 2014-07-12 18:30 - 2014-07-12 18:31 - 14300584 _____ (Kingsoft Corporation) C:\Users\SIWY\Downloads\kav_setup.exe 2014-07-12 18:18 - 2014-07-12 18:19 - 00000000 ____D () C:\AdwCleaner 2014-07-12 18:18 - 2014-07-12 18:18 - 01348263 _____ () C:\Users\SIWY\Downloads\adwcleaner_3.215.exe 2014-07-12 18:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-12 18:13 - 2014-07-12 18:14 - 77105064 _____ (AVG) C:\Users\SIWY\Downloads\avg_tuht_stf_all_2014_489_futuretest2.exe 2014-07-12 18:09 - 2014-07-12 18:12 - 00048127 _____ () C:\Users\SIWY\Downloads\avgremover.log 2014-07-12 18:09 - 2014-07-12 18:09 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\SIWY\Downloads\avg_remover_stf_x64_2014_4116.exe 2014-07-12 18:09 - 2014-07-12 18:09 - 00000000 ____D () C:\Users\SIWY\AppData\Local\Avg2014 2014-07-12 18:03 - 2014-07-12 18:03 - 26384736 _____ (Intel(R) Corporation) C:\Users\SIWY\Downloads\Wireless_16.11.0_Ds64.exe 2014-07-12 17:56 - 2014-07-12 17:56 - 35148216 _____ (Intel(R) Corporation) C:\Users\SIWY\Downloads\BT_17.0.1405.02_s64.exe 2014-06-30 19:08 - 2014-06-30 19:08 - 00000000 __SHD () C:\Users\SIWY\Phone Browser 2014-06-28 02:11 - 2014-06-28 02:11 - 00000000 ____D () C:\ProgramData\Synaptics 2014-06-24 09:04 - 2014-06-24 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 7 2014-06-24 09:04 - 2011-11-22 11:56 - 00024912 _____ (Softland) C:\Windows\system32\dopdfmn7.dll 2014-06-24 09:04 - 2011-11-22 11:56 - 00021328 _____ (Softland) C:\Windows\system32\dopdfmi7.dll 2014-06-22 16:18 - 2014-07-07 10:11 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-06-22 14:18 - 2014-06-22 14:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf 2014-06-18 00:54 - 2014-06-18 00:54 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler 2014-06-18 00:54 - 2014-06-18 00:54 - 00003676 _____ () C:\Windows\System32\Tasks\Program aktualizacji online firmy HP 2014-06-18 00:21 - 2014-06-18 00:27 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\Ultimate Player Radio 2014-06-18 00:21 - 2014-06-18 00:21 - 00001051 _____ () C:\Users\Public\Desktop\Ultimate Player Radio.lnk 2014-06-18 00:21 - 2014-06-18 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Player Radio 2014-06-18 00:21 - 2014-06-18 00:21 - 00000000 ____D () C:\Program Files (x86)\Ultimate Player Radio 2014-06-17 21:24 - 2014-07-12 18:15 - 00000000 ____D () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-06-17 21:24 - 2014-07-07 09:24 - 00000000 ____D () C:\ProgramData\AVG 2014-06-17 21:24 - 2014-06-17 21:24 - 00001605 _____ () C:\Users\SIWY\Desktop\pdfsam-starter — skrót.lnk 2014-06-17 21:24 - 2014-06-17 21:24 - 00000000 ____D () C:\Users\SIWY\AppData\Local\AVG 2014-06-17 21:23 - 2014-06-17 21:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic 2014-06-17 21:23 - 2014-06-17 21:23 - 00000000 ____D () C:\Program Files\PDF Split And Merge Basic 2014-06-16 23:12 - 2014-06-16 23:16 - 00000065 _____ () C:\Windows\SysWOW64\vmailer.log ==================== One Month Modified Files and Folders ======= 2014-07-16 20:26 - 2014-07-16 20:26 - 00020790 _____ () C:\Users\SIWY\Downloads\FRST.txt 2014-07-16 20:26 - 2014-07-16 20:25 - 00000000 ____D () C:\FRST 2014-07-16 20:24 - 2014-07-16 20:24 - 02086912 _____ (Farbar) C:\Users\SIWY\Downloads\FRST64.exe 2014-07-16 20:24 - 2014-01-11 18:27 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{33C6F7EE-A423-42B7-92B4-2AA8011A7E1F} 2014-07-16 20:21 - 2014-01-12 00:56 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-16 20:21 - 2014-01-11 17:54 - 01162014 _____ () C:\Windows\WindowsUpdate.log 2014-07-16 20:21 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-16 20:21 - 2009-07-14 06:51 - 00088200 _____ () C:\Windows\setupact.log 2014-07-16 17:52 - 2014-01-12 00:56 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-16 17:49 - 2014-07-12 19:59 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\wfirewall 2014-07-16 17:47 - 2014-01-12 00:56 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-16 16:49 - 2009-07-14 06:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-16 16:49 - 2009-07-14 06:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-16 16:46 - 2011-04-19 03:57 - 00701128 _____ () C:\Windows\system32\perfh015.dat 2014-07-16 16:46 - 2011-04-19 03:57 - 00136246 _____ () C:\Windows\system32\perfc015.dat 2014-07-16 16:46 - 2009-07-14 07:13 - 01558248 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-16 13:35 - 2014-01-14 02:28 - 00000072 _____ () C:\Users\Public\LMDebug.log 2014-07-16 09:07 - 2014-01-14 03:13 - 00000000 ____D () C:\Users\SIWY\AppData\Local\Pokki 2014-07-15 22:21 - 2014-06-09 08:19 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForSIWY 2014-07-15 22:21 - 2014-06-09 08:19 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForSIWY.job 2014-07-15 08:34 - 2014-01-14 01:54 - 00000000 ____D () C:\PŁATNIK 2014-07-14 13:39 - 2014-07-14 13:39 - 00000000 _____ () C:\Users\SIWY\Desktop\ATT00019.txt 2014-07-14 10:01 - 2014-07-14 10:01 - 00000000 ____D () C:\Users\SIWY\Documents\Nowy folder 2014-07-14 09:28 - 2014-01-12 00:56 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-14 09:28 - 2014-01-12 00:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-14 09:28 - 2014-01-12 00:56 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-14 08:32 - 2014-01-11 21:31 - 00000000 ____D () C:\Users\SIWY\Documents\Dokumenty AFi 2014-07-12 20:18 - 2014-07-12 20:18 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\TeamViewer 2014-07-12 20:17 - 2014-07-12 20:17 - 04663800 _____ (TeamViewer) C:\Users\SIWY\Desktop\TeamViewerQS_pl.exe 2014-07-12 20:02 - 2010-11-21 05:47 - 00254382 _____ () C:\Windows\PFRO.log 2014-07-12 19:15 - 2014-07-12 18:32 - 00000000 ____D () C:\KRECYCLE 2014-07-12 19:04 - 2014-07-12 18:32 - 00000000 ____D () C:\ProgramData\kingsoft 2014-07-12 18:56 - 2014-07-12 18:40 - 00000000 ____D () C:\UsbFix 2014-07-12 18:51 - 2014-07-12 18:51 - 00184408 _____ (Kaspersky Lab ZAO) C:\Users\SIWY\Downloads\rafr.exe 2014-07-12 18:49 - 2014-02-04 20:40 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\Okucil 2014-07-12 18:49 - 2014-02-03 13:07 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\Awum 2014-07-12 18:38 - 2014-07-12 18:38 - 04019211 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\SIWY\Downloads\UsbFix.exe 2014-07-12 18:32 - 2014-07-12 18:32 - 00210296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00210296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00164696 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00125784 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00082264 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00031848 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00027240 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00024472 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\bc.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00019352 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksskrpr.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00018296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery64.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00014200 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery.sys 2014-07-12 18:32 - 2014-07-12 18:32 - 00001059 _____ () C:\Users\Public\Desktop\Kingsoft Antivirus.lnk 2014-07-12 18:32 - 2014-07-12 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingsoft Antivirus 2014-07-12 18:32 - 2014-07-12 18:32 - 00000000 ____D () C:\Program Files (x86)\kingsoft 2014-07-12 18:32 - 2014-01-11 18:24 - 00000000 ____D () C:\Users\SIWY 2014-07-12 18:31 - 2014-07-12 18:30 - 14300584 _____ (Kingsoft Corporation) C:\Users\SIWY\Downloads\kav_setup.exe 2014-07-12 18:22 - 2014-06-10 17:49 - 00000000 ____D () C:\Program Files (x86)\PC-Optimizer 2014-07-12 18:21 - 2014-01-18 15:32 - 00000000 ____D () C:\Users\SIWY\AppData\Local\CrashDumps 2014-07-12 18:20 - 2014-01-13 21:44 - 00000000 ____D () C:\Users\varicopostgres 2014-07-12 18:19 - 2014-07-12 18:18 - 00000000 ____D () C:\AdwCleaner 2014-07-12 18:18 - 2014-07-12 18:18 - 01348263 _____ () C:\Users\SIWY\Downloads\adwcleaner_3.215.exe 2014-07-12 18:15 - 2014-06-17 21:24 - 00000000 ____D () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-07-12 18:14 - 2014-07-12 18:13 - 77105064 _____ (AVG) C:\Users\SIWY\Downloads\avg_tuht_stf_all_2014_489_futuretest2.exe 2014-07-12 18:12 - 2014-07-12 18:09 - 00048127 _____ () C:\Users\SIWY\Downloads\avgremover.log 2014-07-12 18:09 - 2014-07-12 18:09 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\SIWY\Downloads\avg_remover_stf_x64_2014_4116.exe 2014-07-12 18:09 - 2014-07-12 18:09 - 00000000 ____D () C:\Users\SIWY\AppData\Local\Avg2014 2014-07-12 18:04 - 2014-01-11 17:54 - 00071476 _____ () C:\Windows\DPINST.LOG 2014-07-12 18:03 - 2014-07-12 18:03 - 26384736 _____ (Intel(R) Corporation) C:\Users\SIWY\Downloads\Wireless_16.11.0_Ds64.exe 2014-07-12 17:59 - 2014-01-11 17:52 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-07-12 17:59 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-07-12 17:56 - 2014-07-12 17:56 - 35148216 _____ (Intel(R) Corporation) C:\Users\SIWY\Downloads\BT_17.0.1405.02_s64.exe 2014-07-10 09:12 - 2014-02-10 17:17 - 00000000 ____D () C:\Users\SIWY\Documents\Moje skanowanie 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\Video.lnk 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\Pictures.lnk 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\Passwords.lnk 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\New Folder.lnk 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\Music.lnk 2014-07-10 01:40 - 2014-04-02 17:54 - 00000676 _____ () C:\Windows\SysWOW64\Documents.lnk 2014-07-09 15:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-07-07 10:11 - 2014-06-22 16:18 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-07-07 10:11 - 2014-06-09 07:55 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-07-07 09:25 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-07-07 09:24 - 2014-06-17 21:24 - 00000000 ____D () C:\ProgramData\AVG 2014-07-07 09:24 - 2014-06-09 08:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support 2014-07-07 09:24 - 2014-05-29 17:18 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\InstallDir 2014-07-07 09:24 - 2014-05-14 22:38 - 00000000 ____D () C:\Users\SIWY\Documents\D O M 2014-07-07 09:24 - 2014-01-18 15:29 - 00000000 ____D () C:\ProgramData\HP 2014-07-07 09:24 - 2014-01-18 15:29 - 00000000 ____D () C:\Program Files (x86)\HP 2014-07-07 09:24 - 2014-01-11 17:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-07-07 09:24 - 2014-01-11 17:55 - 00000000 ____D () C:\ProgramData\Intel 2014-07-07 09:24 - 2014-01-11 17:55 - 00000000 ____D () C:\Program Files\Intel 2014-07-07 09:24 - 2014-01-11 17:55 - 00000000 ____D () C:\Program Files (x86)\Cisco 2014-07-07 09:24 - 2014-01-11 17:54 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics 2014-07-07 09:24 - 2014-01-11 17:53 - 00000000 ____D () C:\Windows\SysWOW64\sda 2014-07-07 09:24 - 2014-01-11 17:53 - 00000000 ____D () C:\Program Files\IDT 2014-07-07 09:24 - 2014-01-11 17:53 - 00000000 ____D () C:\Program Files\Common Files\Intel 2014-07-07 09:24 - 2014-01-11 17:53 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-07-07 09:24 - 2011-04-18 18:32 - 00000000 ____D () C:\Windows\System32\Tasks\Hewlett-Packard 2014-07-07 09:24 - 2011-04-18 18:30 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-07 09:24 - 2011-04-18 18:23 - 00000000 ____D () C:\ProgramData\Hewlett-Packard 2014-07-07 09:24 - 2011-04-18 18:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-07-07 09:24 - 2011-04-18 18:13 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard 2014-07-07 09:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-07-07 09:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-07-07 09:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2014-07-04 08:05 - 2014-01-11 21:21 - 00000000 ____D () C:\Users\SIWY\Documents\ARMAK 2014-07-01 11:03 - 2014-03-09 11:02 - 00000000 ____D () C:\Users\SIWY\AppData\Local\Windows Live Writer 2014-06-30 19:08 - 2014-06-30 19:08 - 00000000 __SHD () C:\Users\SIWY\Phone Browser 2014-06-28 10:38 - 2014-01-11 18:28 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\hpqLog 2014-06-28 10:37 - 2014-01-18 15:18 - 00019311 _____ () C:\ProgramData\hpzinstall.log 2014-06-28 02:11 - 2014-06-28 02:11 - 00000000 ____D () C:\ProgramData\Synaptics 2014-06-27 18:45 - 2014-03-07 13:38 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\Nokia 2014-06-27 17:11 - 2014-01-11 21:23 - 00000000 ____D () C:\Users\SIWY\Documents\D E M I U R G 2014-06-26 22:47 - 2014-01-12 00:56 - 00004040 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-06-26 22:47 - 2014-01-12 00:56 - 00003788 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-06-24 09:04 - 2014-06-24 09:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 7 2014-06-24 09:04 - 2014-01-14 03:14 - 00000000 ____D () C:\Program Files\Softland 2014-06-23 19:50 - 2014-01-11 21:31 - 00000000 ____D () C:\Users\SIWY\Documents\Druki GOFIN 2014-06-22 14:18 - 2014-06-22 14:18 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf 2014-06-22 14:18 - 2014-03-07 13:38 - 00000000 ____D () C:\ProgramData\PC Suite 2014-06-18 23:23 - 2014-06-04 02:55 - 00003868 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389479799 2014-06-18 23:23 - 2014-01-12 00:36 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-06-18 00:54 - 2014-06-18 00:54 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler 2014-06-18 00:54 - 2014-06-18 00:54 - 00003676 _____ () C:\Windows\System32\Tasks\Program aktualizacji online firmy HP 2014-06-18 00:54 - 2014-06-09 08:16 - 00000000 ____D () C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF} 2014-06-18 00:27 - 2014-06-18 00:21 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\Ultimate Player Radio 2014-06-18 00:21 - 2014-06-18 00:21 - 00001051 _____ () C:\Users\Public\Desktop\Ultimate Player Radio.lnk 2014-06-18 00:21 - 2014-06-18 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Player Radio 2014-06-18 00:21 - 2014-06-18 00:21 - 00000000 ____D () C:\Program Files (x86)\Ultimate Player Radio 2014-06-17 21:24 - 2014-06-17 21:24 - 00001605 _____ () C:\Users\SIWY\Desktop\pdfsam-starter — skrót.lnk 2014-06-17 21:24 - 2014-06-17 21:24 - 00000000 ____D () C:\Users\SIWY\AppData\Local\AVG 2014-06-17 21:23 - 2014-06-17 21:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic 2014-06-17 21:23 - 2014-06-17 21:23 - 00000000 ____D () C:\Program Files\PDF Split And Merge Basic 2014-06-17 21:23 - 2014-01-14 03:12 - 00000000 ____D () C:\Users\SIWY\AppData\Roaming\OpenCandy 2014-06-16 23:16 - 2014-06-16 23:12 - 00000065 _____ () C:\Windows\SysWOW64\vmailer.log Some content of TEMP: ==================== C:\Users\SIWY\AppData\Local\Temp\NEventMessages.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-28 01:40 ==================== End Of Log ============================