Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-10-2014 01 Ran by AG (administrator) on AGNIESZKA on 19-10-2014 12:28:53 Running from C:\Users\AG\Desktop\Programy do loga Loaded Profile: AG (Available profiles: AG) Platform: Windows 8.1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Windows\System32\nvwmi64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe () C:\Windows\jwpen.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Windows\System32\nvwmi64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Windows\jwpen.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Akamai Technologies, Inc.) C:\Users\AG\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\AG\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7018568 2013-02-22] (Realtek Semiconductor) HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated) HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2728736 2014-07-02] () HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation) HKLM-x32\...\Run: [ADSK DLMSession] => C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1641368 2013-02-01] (Autodesk, Inc.) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3593744 2014-09-05] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-790045001-1484126515-3946774136-1002\...\Run: [Akamai NetSession Interface] => C:\Users\AG\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-790045001-1484126515-3946774136-1002\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-790045001-1484126515-3946774136-1002\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) HKU\S-1-5-21-790045001-1484126515-3946774136-1002\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () HKU\S-1-5-21-790045001-1484126515-3946774136-1002\...\Run: [] => [X] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Device Monitor 3.lnk ShortcutTarget: Device Monitor 3.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser 3\MBCameraMonitor.exe (PIXELA CORPORATION) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll () ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0FCEED3B0704CF01 BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default FF Homepage: https://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems) FF SearchPlugin: C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\searchplugins\filmwebpl.xml FF SearchPlugin: C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\searchplugins\wyszukiwarka-filmw-w-youtube.xml FF Extension: United States English Spellchecker - C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\Extensions\en-US@dictionaries.addons.mozilla.org [2014-02-01] FF Extension: Polski slownik poprawnej pisowni - C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\Extensions\pl@dictionaries.addons.mozilla.org [2014-01-17] FF Extension: DownloadHelper - C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-09] FF Extension: HTTPtoHTTPS - C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\Extensions\jid0-ad08RZ08iNQBNTcg20ZWy84a73I@jetpack.xpi [2014-10-18] FF Extension: Adblock Plus - C:\Users\AG\AppData\Roaming\Mozilla\Firefox\Profiles\pkcwowt0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-17] Chrome: ======= CHR Profile: C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-28] CHR Extension: (Dysk Google) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-28] CHR Extension: (YouTube) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-28] CHR Extension: (Adblock Plus) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-12-28] CHR Extension: (Szukaj w Google) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-28] CHR Extension: (Przycisk Pin It) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-09-17] CHR Extension: (Google Wallet) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-28] CHR Extension: (Gmail) - C:\Users\AG\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.) S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2428088 2014-08-12] (Microsoft Corporation) R2 HWSuperPowerTablet; C:\Windows\jwpen.exe [90840 2012-07-20] () [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation) S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-03-13] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [180200 2013-02-13] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation) S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-03-20] (MICRO-STAR INTERNATIONAL CO., LTD.) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation) R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2683736 2014-07-02] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-02-05] () S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed] S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [247576 2014-07-24] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-20] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [273176 2014-07-18] (AVG Technologies CZ, s.r.o.) U3 axscsidrv; C:\Windows\System32\Drivers\axscsidrv.sys [293888 2014-03-30] (Alcohol Soft Development Team) R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-02-13] () R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-02-13] () R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-02-13] () R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation) R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-03-30] (Duplex Secure Ltd.) R3 VHWDrawing; C:\Windows\System32\drivers\HWDrawing.sys [15336 2011-08-05] (Windows (R) Win 7 DDK provider) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-10-18] () R3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation) S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 MSICDSetup; \??\E:\CDriver64.sys [X] S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-19 12:28 - 2014-10-19 12:28 - 00000000 ___DC () C:\FRST 2014-10-19 12:28 - 2014-10-19 12:28 - 00000000 ____D () C:\Users\AG\Desktop\Programy do loga 2014-10-18 19:53 - 2014-10-18 19:53 - 00000000 ____D () C:\Users\AG\Desktop\Router 2014-10-18 18:29 - 2014-10-18 18:39 - 306671616 _____ () C:\Users\AG\Desktop\kav_rescue_10.iso 2014-10-18 11:06 - 2014-10-18 11:06 - 00041604 _____ () C:\Users\AG\Desktop\SPIS MULTIMEDIOW Agnieszka Wójcik .xlsx 2014-10-17 21:18 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-10-17 21:18 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-10-17 21:18 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-10-17 21:18 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-10-17 21:18 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-10-17 21:18 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-10-17 21:18 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-10-17 21:18 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-10-17 21:18 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-10-17 21:18 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-10-17 21:18 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-10-17 21:18 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-10-17 21:18 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-10-17 21:18 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-10-17 21:18 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-10-17 21:18 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-10-17 21:18 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-10-17 21:18 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-10-17 21:18 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-10-17 21:18 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-10-17 21:18 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-10-17 21:18 - 2014-09-19 02:42 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-10-17 21:18 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-10-17 21:18 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-10-17 21:18 - 2014-09-19 02:20 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-10-17 21:18 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-10-17 21:18 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-10-17 21:18 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-10-17 21:18 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-10-17 21:18 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-10-17 21:18 - 2014-08-16 06:08 - 21195616 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-10-17 21:18 - 2014-08-16 06:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-10-17 21:18 - 2014-08-16 06:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-10-17 21:18 - 2014-08-16 05:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-10-17 21:18 - 2014-08-16 05:57 - 02498880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-10-17 21:18 - 2014-08-16 05:57 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-10-17 21:18 - 2014-08-16 05:16 - 18722600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-10-17 21:18 - 2014-08-16 05:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll 2014-10-17 21:18 - 2014-08-16 05:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-10-17 21:18 - 2014-08-16 03:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-10-17 21:18 - 2014-08-16 03:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2014-10-17 21:18 - 2014-08-16 02:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll 2014-10-17 21:18 - 2014-08-16 02:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll 2014-10-17 21:18 - 2014-08-16 02:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll 2014-10-17 21:18 - 2014-08-16 02:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2014-10-17 21:18 - 2014-08-16 02:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2014-10-17 21:18 - 2014-08-16 02:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll 2014-10-17 21:18 - 2014-08-16 02:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-10-17 21:18 - 2014-08-16 02:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll 2014-10-17 21:18 - 2014-08-16 02:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-17 21:18 - 2014-08-16 02:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-10-17 21:18 - 2014-08-16 02:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll 2014-10-17 21:18 - 2014-08-16 02:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll 2014-10-17 21:18 - 2014-08-16 02:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-17 21:18 - 2014-08-16 02:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll 2014-10-17 21:18 - 2014-08-16 02:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll 2014-10-17 21:18 - 2014-08-16 02:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll 2014-10-17 21:18 - 2014-08-16 02:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-10-17 21:18 - 2014-08-16 02:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll 2014-10-17 21:18 - 2014-08-16 02:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2014-10-17 21:18 - 2014-08-16 02:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-10-17 21:18 - 2014-08-16 02:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe 2014-10-17 21:18 - 2014-08-16 02:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-10-17 21:18 - 2014-08-16 02:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-10-17 21:18 - 2014-08-01 01:22 - 00388729 _____ () C:\Windows\system32\ApnDatabase.xml 2014-10-17 21:17 - 2014-10-10 00:16 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-10-17 21:17 - 2014-10-09 00:09 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-10-17 21:17 - 2014-09-28 00:25 - 04183040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-17 21:17 - 2014-09-19 03:24 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-10-17 21:17 - 2014-09-13 08:29 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-10-17 21:17 - 2014-09-13 08:02 - 02779648 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-10-17 21:17 - 2014-09-13 07:49 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-10-17 21:17 - 2014-09-13 07:30 - 03117568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-10-17 21:17 - 2014-09-08 05:15 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-10-17 21:17 - 2014-09-08 03:46 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-10-17 21:17 - 2014-09-08 03:46 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-10-17 21:17 - 2014-09-08 02:08 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-10-17 21:17 - 2014-09-08 02:07 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-10-17 21:17 - 2014-09-08 02:05 - 03448320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-10-17 21:17 - 2014-09-08 02:04 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-10-17 21:17 - 2014-09-08 02:04 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-10-17 21:17 - 2014-09-08 02:03 - 01702400 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-10-17 21:17 - 2014-09-08 02:03 - 00839680 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-10-17 21:17 - 2014-09-08 01:59 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-10-17 21:17 - 2014-09-08 01:59 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-10-17 21:17 - 2014-09-08 01:56 - 00672256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-10-17 21:17 - 2014-09-08 01:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-10-17 21:17 - 2014-09-04 02:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-10-17 21:17 - 2014-09-04 02:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll 2014-10-17 21:17 - 2014-09-04 02:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-10-17 21:17 - 2014-09-04 01:57 - 00921600 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll 2014-10-17 21:17 - 2014-09-04 01:49 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll 2014-10-17 21:17 - 2014-08-29 03:58 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-10-17 21:17 - 2014-08-29 01:56 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-10-17 21:17 - 2014-08-29 01:47 - 02321920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-10-17 21:14 - 2014-10-18 19:20 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2014-10-17 20:48 - 2014-10-17 21:04 - 00010952 _____ () C:\Windows\system32\avgrep.txt 2014-10-15 18:34 - 2014-10-15 18:34 - 00000856 _____ () C:\Users\AG\Desktop\µTorrent.lnk 2014-10-15 18:33 - 2014-10-15 18:39 - 00000000 ____D () C:\Users\AG\AppData\Roaming\uTorrent 2014-10-15 18:33 - 2014-10-15 18:33 - 01690704 _____ (BitTorrent Inc.) C:\Users\AG\Downloads\utorrent.exe 2014-10-13 20:25 - 2014-10-13 20:25 - 00405152 _____ () C:\Users\AG\Desktop\Sztuka_reklamy_lab_sexy_shape.aep 2014-10-11 15:09 - 2014-10-11 16:30 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0 2014-10-11 14:44 - 2014-10-11 14:44 - 00001171 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-11 14:44 - 2014-10-11 14:44 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-11 14:44 - 2014-10-11 14:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-11 14:42 - 2014-10-11 14:42 - 00244304 _____ () C:\Users\AG\Downloads\Firefox Setup Stub 32.0.3.exe 2014-10-11 14:34 - 2014-10-17 20:51 - 00000000 ____D () C:\ProgramData\AVG2015 2014-10-11 14:34 - 2014-10-11 14:34 - 00001011 _____ () C:\Users\Public\Desktop\AVG 2015.lnk 2014-10-11 14:34 - 2014-10-11 14:34 - 00000000 __HDC () C:\$AVG 2014-10-11 14:34 - 2014-10-11 14:34 - 00000000 ____D () C:\Users\AG\AppData\Roaming\AVG2015 2014-10-11 14:34 - 2014-10-11 14:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2014-10-11 14:33 - 2014-10-11 14:33 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-10-11 14:31 - 2014-10-11 14:45 - 00000000 ____D () C:\Users\AG\AppData\Local\Avg2015 2014-10-11 14:31 - 2014-10-11 14:31 - 04578040 _____ (AVG Technologies) C:\Users\AG\Downloads\avg_free_stb_all_2015_5315_ppc1.exe 2014-10-11 12:36 - 2014-10-11 12:36 - 14177648 _____ (McAfee Inc) C:\Users\AG\Downloads\stinger64.exe 2014-10-11 12:09 - 2014-10-11 12:09 - 00387584 _____ () C:\Users\AG\Downloads\rescue2usb.exe 2014-10-11 11:34 - 2014-10-11 11:57 - 305303552 _____ () C:\Users\AG\Downloads\kav_rescue_10.iso 2014-10-11 01:40 - 2014-10-11 01:40 - 00000000 ____C () C:\Recovery.txt 2014-10-11 00:43 - 2014-10-11 00:47 - 00000000 ____D () C:\ProgramData\HitmanPro 2014-10-11 00:43 - 2014-10-11 00:43 - 00000000 ____D () C:\Program Files\HitmanPro 2014-10-11 00:31 - 2014-10-13 17:45 - 00000000 ___DC () C:\FFOutput 2014-10-10 23:55 - 2014-10-10 23:55 - 00000000 ___DC () C:\sh4ldr 2014-10-10 23:55 - 2014-10-10 23:55 - 00000000 ____D () C:\Users\AG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2014-10-10 23:55 - 2014-10-10 23:55 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-10-10 23:23 - 2014-10-10 23:25 - 125559024 _____ (Microsoft Corporation) C:\Users\AG\Downloads\msert.exe 2014-10-10 23:12 - 2014-10-10 23:12 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\AG\Downloads\mbam-setup-2.0.2.1012 (1).exe 2014-10-10 19:17 - 2014-10-10 19:17 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-10-10 18:56 - 2014-10-10 18:56 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\AG\Downloads\rkill.com 2014-10-10 18:35 - 2014-10-11 00:00 - 00000000 ____D () C:\Windows\pss 2014-10-10 17:08 - 2014-10-10 17:08 - 00000000 ____D () C:\Users\AG\AppData\Roaming\TuneUp Software 2014-10-10 17:07 - 2014-10-18 19:32 - 00000000 ____D () C:\ProgramData\MFAData 2014-10-10 17:07 - 2014-10-10 17:07 - 00000000 ____D () C:\Users\AG\AppData\Local\MFAData 2014-10-10 00:26 - 2014-10-10 00:26 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-10-10 00:25 - 2014-10-10 00:25 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\AG\Downloads\mbam-setup-2.0.2.1012.exe 2014-10-10 00:11 - 2014-10-10 00:11 - 00000878 _____ () C:\Windows\system32\.crusader 2014-10-09 22:28 - 2014-10-09 22:28 - 00000000 ____D () C:\Users\AG\AppData\Roaming\ActivePresenter 2014-10-09 21:54 - 2014-10-09 21:54 - 04196870 _____ () C:\Users\AG\Desktop\wirus.psd 2014-10-09 17:00 - 2014-10-09 17:00 - 00000000 ____D () C:\Users\AG\Desktop\Wpisanie na liste wyborcow 16_11 2014-10-06 23:33 - 2014-10-07 15:19 - 00000529 _____ () C:\Users\AG\Desktop\Nat_links.txt 2014-09-27 21:13 - 2014-10-11 14:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-09-26 15:12 - 2014-09-26 15:12 - 00000111 _____ () C:\Users\AG\Desktop\pyt_do_Rad.txt 2014-09-23 20:26 - 2014-09-23 20:26 - 00000115 _____ () C:\Users\AG\Desktop\how_to_lie.txt 2014-09-20 20:26 - 2014-09-20 20:26 - 00001270 _____ () C:\Users\Public\Desktop\Pazera WebM Converter.lnk 2014-09-20 20:26 - 2014-09-20 20:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pazera WebM Converter 2014-09-20 20:23 - 2014-09-20 20:25 - 09522832 _____ (Jacek Pazera ) C:\Users\AG\Downloads\Pazera_WebM_Converter.exe 2014-09-20 20:19 - 2014-09-20 20:26 - 00000000 ____D () C:\Program Files (x86)\pazera-software 2014-09-20 20:19 - 2014-09-20 20:19 - 00001258 _____ () C:\Users\Public\Desktop\Pazera OGV Converter.lnk 2014-09-20 20:19 - 2014-09-20 20:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pazera OGV Converter 2014-09-20 20:16 - 2014-09-20 20:19 - 09149776 _____ (Jacek Pazera ) C:\Users\AG\Downloads\Pazera_OGV_Converter.exe 2014-09-20 20:12 - 2014-09-20 20:12 - 02748305 _____ () C:\Users\AG\Downloads\Pazera_Free_PSP_Video_Converter.zip 2014-09-20 20:12 - 2008-09-13 13:34 - 00000339 _____ () C:\Users\AG\Downloads\ffmpeg_info.txt 2014-09-20 20:12 - 2008-09-12 21:29 - 00030255 _____ () C:\Users\AG\Downloads\ffmpeg_help.txt 2014-09-20 20:12 - 2008-09-12 21:28 - 02440192 _____ () C:\Users\AG\Downloads\ffmpeg.exe 2014-09-20 20:12 - 2008-08-17 21:04 - 00000672 _____ () C:\Users\AG\Downloads\ffmpeg_license.txt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-19 12:28 - 2013-12-29 01:36 - 00000000 __RDO () C:\Users\AG\SkyDrive 2014-10-19 00:10 - 2014-01-17 01:39 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-19 00:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2014-10-18 23:29 - 2013-12-28 23:08 - 00000000 ____D () C:\Users\AG\AppData\Local\Akamai 2014-10-18 23:23 - 2013-12-28 21:59 - 00003976 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B746C97E-5544-477D-8297-B28E633BFFCE} 2014-10-18 22:36 - 2013-12-23 21:29 - 00000000 ____D () C:\Users\AG\AppData\Local\Packages 2014-10-18 19:49 - 2013-12-28 21:15 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-790045001-1484126515-3946774136-1002 2014-10-18 19:34 - 2014-06-04 00:19 - 00005098 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for AGNIESZKA-AG Agnieszka 2014-10-18 19:24 - 2013-11-18 12:01 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-18 19:24 - 2013-08-23 01:12 - 00805918 _____ () C:\Windows\system32\perfh015.dat 2014-10-18 19:24 - 2013-08-23 01:12 - 00163272 _____ () C:\Windows\system32\perfc015.dat 2014-10-18 19:20 - 2013-12-17 15:26 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-10-18 19:20 - 2013-11-18 12:08 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys 2014-10-18 19:20 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-18 18:49 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-10-18 18:18 - 2014-02-08 23:27 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-18 18:17 - 2014-08-14 11:49 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-10-18 18:17 - 2014-08-14 11:49 - 00000000 ____D () C:\Program Files (x86)\Java 2014-10-18 18:16 - 2014-08-27 18:50 - 00000000 ___DC () C:\AITEMP 2014-10-18 14:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache 2014-10-18 00:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData 2014-10-18 00:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2014-10-18 00:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer 2014-10-18 00:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager 2014-10-18 00:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera 2014-10-17 21:22 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp 2014-10-17 21:21 - 2013-12-29 00:58 - 00000000 ____D () C:\Windows\system32\MRT 2014-10-17 21:20 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-10-17 21:18 - 2014-07-09 11:32 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-10-17 21:18 - 2013-12-29 00:58 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-10-17 21:08 - 2014-02-22 17:26 - 00000000 ____D () C:\Program Files (x86)\ElcomSoft 2014-10-17 21:04 - 2014-01-06 11:53 - 00000000 ____D () C:\Users\AG\AppData\Local\CrashDumps 2014-10-16 22:26 - 2013-12-29 00:41 - 00000000 ____D () C:\Users\AG\AppData\Roaming\Audacity 2014-10-15 19:19 - 2014-01-08 19:19 - 00000132 _____ () C:\Users\AG\AppData\Roaming\Adobe PNG Format CS6 Prefs 2014-10-15 19:02 - 2014-01-19 14:29 - 00001456 _____ () C:\Users\AG\AppData\Local\Adobe Save for Web 13.0 Prefs 2014-10-15 18:39 - 2014-01-26 16:25 - 00000000 ____D () C:\Users\AG\Documents\Kopie rejestru 2014-10-14 22:16 - 2014-02-22 15:21 - 00007168 _____ () C:\Users\AG\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-10-13 17:51 - 2014-02-14 02:44 - 00000000 ____D () C:\Users\AG\AppData\Roaming\vlc 2014-10-12 23:50 - 2014-08-19 10:51 - 00000000 ____D () C:\Users\AG\AppData\Local\Adobe 2014-10-12 13:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2014-10-11 14:34 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-10-11 11:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF 2014-10-11 00:31 - 2014-01-01 01:57 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-10-10 21:33 - 2014-01-03 23:10 - 00000000 ___RD () C:\Users\AG\Dropbox 2014-10-10 17:17 - 2014-03-30 12:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart File Advisor 2014-10-10 17:17 - 2014-03-30 12:44 - 00000000 ____D () C:\Program Files (x86)\Smart File Advisor 2014-10-09 22:51 - 2013-12-28 21:59 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-30 19:34 - 2014-03-30 13:39 - 00000000 ____D () C:\Users\AG\Documents\Everio MediaBrowser 3 2014-09-30 00:45 - 2013-08-22 17:38 - 00706016 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-30 00:45 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-28 11:42 - 2014-01-03 23:04 - 00000000 ____D () C:\Users\AG\AppData\Roaming\Dropbox 2014-09-27 18:02 - 2014-01-03 23:10 - 00001020 _____ () C:\Users\AG\Desktop\Dropbox.lnk 2014-09-27 18:02 - 2014-01-03 23:04 - 00000000 ____D () C:\Users\AG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-09-25 15:42 - 2014-03-30 12:49 - 00000124 _____ () C:\Users\AG\Documents\ax_files.xml 2014-09-22 08:42 - 2013-12-28 21:31 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-20 13:04 - 2014-04-13 23:55 - 00000000 ____D () C:\Program Files\Microsoft Office 15 ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-10 21:50 ==================== End Of Log ============================