Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-10-2014 01 Ran by m-kol_000 (administrator) on SKIMPK on 28-10-2014 15:01:08 Running from C:\Users\Public\Z__Diagnostyka Loaded Profile: m-kol_000 (Available profiles: UpdatusUser & admin & m-kol_000) Platform: Windows 8.1 (X64) OS Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe (ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS VivoBook\vivokey.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\csisyncclient.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\msosync.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe [79376 2013-07-31] (Intel Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13550152 2013-05-30] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1308232 2013-05-20] (Realtek Semiconductor) HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [8925504 2014-10-15] () HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-09-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [111120 2012-05-24] (CyberLink) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-04-25] ( (Atheros Communications)) HKU\S-1-5-21-564193530-946695896-3617906930-1010\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1938624 2014-10-21] (Valve Corporation) HKU\S-1-5-21-564193530-946695896-3617906930-1010\...\MountPoints2: {00cdd7af-ff75-11e3-be92-240a6493f93c} - "F:\AutoRun.exe" ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\m-kol_000.SKIMPK\AppData\Roaming\Mozilla\Firefox\Profiles\x8odgthm.default FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\m-kol_000.SKIMPK\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) Chrome: ======= CHR HomePage: Default -> CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-15] CHR Extension: (Dokumenty Google) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-15] CHR Extension: (Dysk Google) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-15] CHR Extension: (Brushed) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2014-09-15] CHR Extension: (YouTube) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-15] CHR Extension: (Szukaj w Google) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-15] CHR Extension: (Arkusze Google) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-15] CHR Extension: (Google Wallet) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-15] CHR Extension: (Gmail) - C:\Users\m-kol_000.SKIMPK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-15] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-07-23] (ASUS) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [310400 2013-04-25] (Windows (R) Win 7 DDK provider) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2436280 2014-09-25] (Microsoft Corporation) R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [83032 2013-07-31] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [100032 2013-07-31] (Intel Corporation) R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [84568 2013-07-31] (Intel Corporation) R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [92864 2013-07-31] (Intel Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-12] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-12] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation) R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation) R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [707888 2014-10-15] () S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-06-21] (Microsoft Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-06-21] (Microsoft Corporation) S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation) S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-06-21] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-06-21] (Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-04-24] (Atheros) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [69392 2013-08-09] (ASUS Corporation) R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2014-08-21] (BitDefender) R3 avchv; C:\Windows\system32\DRIVERS\avchv.sys [261496 2014-08-21] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2014-08-21] (BitDefender) R1 BdfNdisf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfndisf6.sys [97816 2014-07-10] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [107080 2014-07-10] (BitDefender LLC) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [68072 2013-07-31] (Intel Corporation) R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [57216 2013-07-31] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [120256 2013-07-31] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [200808 2013-07-31] (Intel Corporation) R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\gzflt.sys [150256 2014-07-10] (BitDefender LLC) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-10-17] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-19] (Intel Corporation) R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2013-07-23] (Windows (R) Win 7 DDK provider) S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-06-21] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-25 21:26 - 2014-10-25 21:27 - 00000000 ____D () C:\Users\Public\Z_Instal_Nvidia 2014-10-25 20:27 - 2014-10-25 20:28 - 334270521 _____ () C:\Users\Public\VGA_nVidia_Win81_64_VER918132745.zip 2014-10-25 19:20 - 2014-10-25 19:20 - 00002001 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-10-25 19:17 - 2014-10-25 19:17 - 00000000 ____D () C:\Users\admin\AppData\Local\Adobe 2014-10-25 18:31 - 2014-10-25 18:31 - 00000021 _____ () C:\Users\admin\AppData\Roaming\my_intel.sys 2014-10-25 17:55 - 2014-10-25 17:55 - 00000000 ____D () C:\Users\admin\AppData\Local\Intel_Corporation 2014-10-25 00:00 - 2014-10-25 00:00 - 00296712 _____ () C:\WINDOWS\Minidump\102514-24109-01.dmp 2014-10-24 17:35 - 2014-10-28 15:01 - 00000000 ____D () C:\Users\Public\Z__Diagnostyka 2014-10-23 18:26 - 2014-10-28 15:01 - 00000000 ____D () C:\FRST 2014-10-23 16:56 - 2014-10-23 16:56 - 00602112 _____ (OldTimer Tools) C:\Users\m-kol_000.SKIMPK\Downloads\OTL.exe 2014-10-23 16:50 - 2014-10-27 21:36 - 00003976 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{655DEA21-ED35-408E-A736-D2622AE1E87D} 2014-10-23 16:50 - 2014-10-23 16:50 - 00000000 __SHD () C:\Users\admin\AppData\Local\EmieUserList 2014-10-23 16:50 - 2014-10-23 16:50 - 00000000 __SHD () C:\Users\admin\AppData\Local\EmieSiteList 2014-10-23 16:49 - 2014-10-23 16:49 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-10-21 18:48 - 2014-10-21 18:48 - 00000000 ____D () C:\Users\admin\AppData\Roaming\OpenOffice 2014-10-21 18:46 - 2014-10-21 18:46 - 00001158 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk 2014-10-21 18:46 - 2014-10-21 18:46 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1 2014-10-21 18:45 - 2014-10-21 18:45 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-10-21 18:43 - 2014-10-21 18:43 - 00000000 ____D () C:\Users\admin\Desktop\OpenOffice 4.1.1 (pl) Installation Files 2014-10-21 13:39 - 2014-10-21 13:39 - 00350768 _____ () C:\WINDOWS\Minidump\102114-20015-01.dmp 2014-10-20 17:13 - 2014-10-20 17:13 - 01080416 _____ (Unity Technologies ApS) C:\Users\m-kol_000.SKIMPK\Downloads\UnityWebPlayer(1).exe 2014-10-17 22:31 - 2014-10-17 22:31 - 00062427 _____ () C:\Users\admin\Desktop\1_Shortcut.txt 2014-10-17 22:22 - 2014-10-17 22:22 - 00001415 _____ () C:\Users\admin\Desktop\adwcleaner.pl 4.000 — skrót.lnk 2014-10-17 22:04 - 2014-10-17 22:04 - 00003170 _____ () C:\WINDOWS\System32\Tasks\{5841213F-0C48-46D8-A337-0E9449EDBFB2} 2014-10-17 20:36 - 2014-10-17 20:36 - 00000000 ____D () C:\WINDOWS\pss 2014-10-17 19:41 - 2014-10-28 14:56 - 00002331 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk 2014-10-17 19:41 - 2014-10-17 19:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2014-10-17 19:40 - 2014-10-17 19:40 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft 2014-10-17 19:39 - 2014-10-17 19:39 - 01753736 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\Adaware_Installer(2).exe 2014-10-17 18:37 - 2014-10-17 18:37 - 00003178 _____ () C:\WINDOWS\System32\Tasks\{9AF1F74B-5CB3-4411-B672-FC14E9FC0E9F} 2014-10-17 16:50 - 2014-10-17 16:57 - 301605264 _____ () C:\Users\m-kol_000.SKIMPK\Desktop\X-Pack 1.7.10_2.exe 2014-10-17 13:39 - 2014-10-17 13:39 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Downloads\Train Simulator 2014 Steam Edition Cracked [MULTI7][PCDVD][3DM][WwW.GamesTorrents.CoM] 2014-10-17 12:59 - 2014-10-09 23:16 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll 2014-10-17 12:59 - 2014-10-08 23:09 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2014-10-17 12:59 - 2014-09-19 02:24 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2014-10-17 12:59 - 2014-09-13 07:02 - 02779648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2014-10-17 12:59 - 2014-09-13 06:30 - 03117568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2014-10-17 12:59 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-10-17 12:59 - 2014-09-04 00:57 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-10-17 12:59 - 2014-09-04 00:49 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-10-17 12:57 - 2014-10-17 13:17 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Downloads\Train.Simulator.2015-SKIDROW 2014-10-17 12:54 - 2014-10-17 13:32 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Downloads\Tomorrow's Modern Boxes 2014-10-17 12:48 - 2014-09-27 23:25 - 04183040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-10-17 12:47 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-10-17 12:47 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-10-17 12:47 - 2014-09-08 04:15 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2014-10-17 12:47 - 2014-09-08 02:46 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2014-10-17 12:47 - 2014-09-08 02:46 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2014-10-17 12:47 - 2014-09-08 01:08 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe 2014-10-17 12:47 - 2014-09-08 01:07 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll 2014-10-17 12:47 - 2014-09-08 01:05 - 03448320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2014-10-17 12:47 - 2014-09-08 01:04 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2014-10-17 12:47 - 2014-09-08 01:04 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll 2014-10-17 12:47 - 2014-09-08 01:03 - 01702400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2014-10-17 12:47 - 2014-09-08 01:03 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2014-10-17 12:47 - 2014-09-08 00:59 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll 2014-10-17 12:47 - 2014-09-08 00:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe 2014-10-17 12:47 - 2014-09-08 00:56 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2014-10-17 12:47 - 2014-09-08 00:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll 2014-10-17 12:46 - 2014-10-23 22:04 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Desktop\Nowy folder (2) 2014-10-17 12:46 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-10-17 12:46 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2014-10-17 12:46 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2014-10-17 12:46 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-10-17 12:46 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-10-17 12:46 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-10-17 12:46 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-10-17 12:46 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-10-17 12:46 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2014-10-17 12:46 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-10-17 12:46 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-10-17 12:46 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-10-17 12:46 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-10-17 12:46 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2014-10-17 12:46 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2014-10-17 12:46 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2014-10-17 12:46 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-10-17 12:46 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-10-17 12:46 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-10-17 12:46 - 2014-09-19 01:42 - 00363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2014-10-17 12:46 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-10-17 12:46 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-10-17 12:46 - 2014-09-19 01:20 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2014-10-17 12:46 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-10-17 12:46 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-10-17 12:46 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-10-17 12:46 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-10-17 12:46 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-10-17 12:46 - 2014-09-13 07:29 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll 2014-10-17 12:46 - 2014-09-13 06:49 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll 2014-10-17 12:46 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-10-17 12:46 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-10-16 14:37 - 2014-10-16 14:38 - 110347210 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\5Na06332 2014-10-16 14:25 - 2014-10-16 14:25 - 110349504 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\HuśBox 1.5.2.zip 2014-10-15 12:31 - 2014-10-15 12:31 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Local\Dovetail_Games 2014-10-15 11:55 - 2014-10-15 11:55 - 01690704 _____ (BitTorrent Inc.) C:\Users\m-kol_000.SKIMPK\Downloads\uTorrent.exe 2014-10-13 17:13 - 2014-10-28 14:50 - 00003992 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B5BA4C74-613A-4476-9DF3-F50345F9BAFE} 2014-10-13 17:13 - 2014-10-13 17:13 - 00000000 __SHD () C:\Users\m-kol_000.SKIMPK\AppData\Local\EmieUserList 2014-10-13 17:13 - 2014-10-13 17:13 - 00000000 __SHD () C:\Users\m-kol_000.SKIMPK\AppData\Local\EmieSiteList 2014-10-13 17:13 - 2014-10-13 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Giant 2014-10-13 17:13 - 2014-10-13 17:13 - 00000000 ____D () C:\Program Files (x86)\Giant 2014-10-10 18:50 - 2014-10-10 18:50 - 10134754 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\Nightmare v1.1(ENG).zip 2014-10-10 18:39 - 2014-10-10 18:39 - 92339975 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\ChromaHills-128x1.8_1.0.10.zip 2014-10-10 18:21 - 2014-10-10 18:21 - 00070096 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\181_WaterShaderv4d_OptiFineHD__B1_Patch.zip 2014-10-10 17:55 - 2014-10-10 17:57 - 198811786 _____ () C:\Users\m-kol_000.SKIMPK\Downloads\BetaBox! Pack [1.8] 32x32.zip 2014-10-03 16:29 - 2014-10-03 16:29 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Documents\Electronic Arts 2014-10-03 16:27 - 2014-10-03 16:27 - 00002084 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk 2014-10-03 16:27 - 2010-01-21 01:22 - 00447752 ____R (On2.com) C:\WINDOWS\SysWOW64\vp6vfw.dll 2014-10-02 23:18 - 2014-08-16 05:08 - 21195616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-10-02 23:18 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-10-02 23:17 - 2014-08-29 02:58 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2014-10-02 23:17 - 2014-08-29 00:56 - 02646016 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-10-02 23:17 - 2014-08-29 00:47 - 02321920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-10-02 23:17 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-10-02 23:17 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2014-10-02 23:17 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-10-02 23:17 - 2014-08-16 04:57 - 02498880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-10-02 23:17 - 2014-08-16 04:57 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2014-10-02 23:17 - 2014-08-16 04:16 - 18722600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-10-02 23:17 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-10-02 23:17 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2014-10-02 23:17 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-10-02 23:17 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll 2014-10-02 23:17 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-10-02 23:17 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll 2014-10-02 23:17 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll 2014-10-02 23:17 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-10-02 23:17 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll 2014-10-02 23:17 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll 2014-10-02 23:17 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2014-10-02 23:17 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2014-10-02 23:17 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-02 23:17 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-10-02 23:17 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-10-02 23:17 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-10-02 23:17 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-10-02 23:17 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-10-02 23:17 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-10-02 23:17 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-10-02 23:17 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-10-02 23:17 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-10-02 23:17 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-10-02 23:17 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-10-02 23:17 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-10-02 23:17 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-10-02 23:17 - 2014-08-01 00:22 - 00388729 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-10-02 11:07 - 2014-10-23 18:40 - 00000000 ____D () C:\Users\Public\muza 2014-10-02 10:38 - 2014-10-02 10:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-10-02 10:38 - 2014-07-25 11:55 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2014-10-02 10:38 - 2014-07-25 11:49 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe 2014-10-02 10:38 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe 2014-10-02 10:38 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe 2014-10-02 10:37 - 2014-10-02 10:38 - 00004162 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_67-b01.log 2014-10-02 10:35 - 2014-10-02 10:35 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\Lavasoft ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-28 15:00 - 2014-06-28 08:14 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-564193530-946695896-3617906930-1010 2014-10-28 15:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-10-28 14:57 - 2014-08-17 10:47 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-10-28 14:57 - 2014-06-28 19:44 - 00005114 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for SKIMPK-m-kol_000 skimpk 2014-10-28 14:57 - 2014-06-28 08:10 - 00000000 ___DO () C:\Users\m-kol_000.SKIMPK\OneDrive 2014-10-28 14:57 - 2014-06-28 08:08 - 00000074 _____ () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\sp_data.sys 2014-10-28 14:57 - 2014-06-20 23:34 - 01082156 _____ () C:\WINDOWS\WindowsUpdate.log 2014-10-28 14:55 - 2014-08-15 19:36 - 00001066 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-10-28 14:55 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-10-28 14:54 - 2014-06-28 08:08 - 00001668 _____ () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-28 14:50 - 2013-10-01 04:36 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1 2014-10-28 14:50 - 2013-10-01 04:36 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2 2014-10-28 14:47 - 2014-06-21 00:07 - 00000000 __RDO () C:\Users\admin\OneDrive 2014-10-27 21:51 - 2014-06-19 22:55 - 00969940 _____ () C:\WINDOWS\system32\perfh015.dat 2014-10-27 21:51 - 2014-06-19 22:55 - 00205052 _____ () C:\WINDOWS\system32\perfc015.dat 2014-10-27 21:51 - 2014-06-19 17:23 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-564193530-946695896-3617906930-1002 2014-10-27 21:51 - 2014-03-18 11:03 - 02020942 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-10-27 21:49 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-10-27 21:47 - 2014-08-15 19:36 - 00001070 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-10-27 21:47 - 2014-06-18 22:41 - 00000074 _____ () C:\Users\admin\AppData\Roaming\sp_data.sys 2014-10-27 21:45 - 2013-08-22 14:25 - 00786432 ___SH () C:\WINDOWS\system32\config\BBI 2014-10-27 21:37 - 2014-06-20 18:37 - 00000000 ____D () C:\ProgramData\CyberLink 2014-10-27 21:35 - 2014-08-15 22:23 - 00000000 ____D () C:\Users\Public\CyberLink 2014-10-26 12:56 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-10-25 20:03 - 2014-06-18 22:40 - 00000000 ____D () C:\Users\admin\AppData\Local\Packages 2014-10-25 19:20 - 2013-05-01 10:34 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-10-25 19:19 - 2013-05-01 10:34 - 00000000 ____D () C:\ProgramData\Adobe 2014-10-25 19:17 - 2014-06-18 22:41 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Adobe 2014-10-25 01:29 - 2014-06-28 08:07 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK 2014-10-25 00:00 - 2014-08-07 20:47 - 00000000 ____D () C:\WINDOWS\Minidump 2014-10-25 00:00 - 2014-08-07 20:46 - 647437457 _____ () C:\WINDOWS\MEMORY.DMP 2014-10-23 22:41 - 2014-08-15 19:36 - 00004042 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2014-10-23 22:41 - 2014-08-15 19:36 - 00003806 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2014-10-23 22:07 - 2014-09-15 14:31 - 00002171 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-10-22 17:37 - 2013-08-22 15:46 - 00338058 _____ () C:\WINDOWS\setupact.log 2014-10-22 12:57 - 2014-03-18 10:54 - 00168694 _____ () C:\WINDOWS\PFRO.log 2014-10-21 19:41 - 2013-08-22 15:44 - 00508296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-10-21 13:21 - 2014-06-20 23:40 - 00000000 ____D () C:\Users\admin 2014-10-20 17:14 - 2014-09-12 13:40 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Local\Unity 2014-10-18 22:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-10-18 21:32 - 2014-06-28 19:34 - 00000000 ____D () C:\Program Files\Microsoft Office 15 2014-10-17 22:17 - 2014-08-07 15:14 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2014-10-17 22:10 - 2014-06-18 23:13 - 00001035 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-17 22:10 - 2014-06-18 23:13 - 00001023 _____ () C:\Users\Public\Desktop\przeglądareczka.lnk 2014-10-17 21:18 - 2014-09-15 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-10-17 20:23 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-10-17 20:23 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-10-17 20:23 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-10-17 20:23 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2014-10-17 20:08 - 2014-08-03 15:27 - 00000000 ____D () C:\ProgramData\Origin 2014-10-17 19:33 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\DesktopTileResources 2014-10-17 19:32 - 2014-08-17 22:37 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel 2014-10-17 18:34 - 2014-08-28 17:18 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\uTorrent 2014-10-17 17:14 - 2014-06-28 09:12 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\.minecraft 2014-10-17 16:47 - 2014-06-28 10:41 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\Desktop\gry 2014-10-17 13:22 - 2014-06-18 23:54 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-10-17 13:12 - 2014-06-18 23:54 - 103265616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-10-16 14:30 - 2014-08-23 12:15 - 00223744 ___SH () C:\Users\m-kol_000.SKIMPK\Desktop\Thumbs.db 2014-10-15 11:59 - 2014-08-17 09:21 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\CyberLink 2014-10-13 17:13 - 2013-10-01 04:13 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-08 21:26 - 2014-08-15 19:35 - 00000000 ____D () C:\Users\admin\AppData\Local\Google 2014-10-04 15:25 - 2013-05-01 10:34 - 07691892 _____ () C:\WINDOWS\AsDebug.log 2014-10-03 16:02 - 2014-08-03 15:31 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2014-10-03 16:01 - 2014-08-03 15:29 - 00000000 ____D () C:\Users\m-kol_000.SKIMPK\AppData\Roaming\Origin 2014-10-03 07:15 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-10-03 07:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-10-02 10:38 - 2014-06-28 09:12 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-02 10:38 - 2014-06-28 09:11 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-29 23:45 - 2013-08-22 16:38 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-09-29 23:45 - 2013-08-22 16:38 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-28 18:48 - 2014-09-25 09:19 - 00003718 _____ () C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-10-17 13:07 ==================== End Of Log ============================