Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2015 Ran by icar (administrator) on KANCELARIA on 22-02-2015 21:43:56 Running from C:\Users\icar\Desktop Loaded Profiles: icar (Available profiles: icar) Platform: Windows 8.1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe () C:\Program Files (x86)\Opera\27.0.1689.69\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe (Opera Software) C:\Program Files (x86)\Opera\27.0.1689.69\opera.exe (The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\swriter.exe (The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\soffice.exe (The Document Foundation) C:\Program Files (x86)\LibreOffice 4\program\soffice.bin ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [678296 2012-07-10] (Alps Electric Co., Ltd.) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4384928 2012-07-12] (Dell Inc.) HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-24] (IDT, Inc.) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-02] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-01-14] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-23] (AVAST Software) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1084307622-131046002-2435356648-1002\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1565504 2015-01-14] (Samsung) HKU\S-1-5-21-1084307622-131046002-2435356648-1002\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2015-01-14] (Samsung) HKU\S-1-5-21-1084307622-131046002-2435356648-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd) HKU\S-1-5-21-1084307622-131046002-2435356648-1002\...\Run: [DellSystemDetect] => C:\Users\icar\AppData\Local\Apps\2.0\L64XY1GN.EKL\2WHETOBD.24E\dell..tion_e30b47f5d4a30e9e_0005.000d_4ab2a66cfade09be\DellSystemDetect.exe [276776 2015-01-24] (Dell) HKU\S-1-5-21-1084307622-131046002-2435356648-1002\...\MountPoints2: {71e35678-ce13-11e2-be6c-806e6f6e6963} - "D:\Autorun.exe" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKU\S-1-5-21-1084307622-131046002-2435356648-1002\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/ SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1084307622-131046002-2435356648-1002 -> {73C68E13-826B-41AA-B913-A13797172EA8} URL = SearchScopes: HKU\S-1-5-21-1084307622-131046002-2435356648-1002 -> {F1C109EB-3DFA-4141-A2CD-5968B90E8865} URL = http://www.google.com/search?hl=pl&q={searchTerms} BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com/bin/srldetect_intel_4.5.24.0.cab Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-17] FF HKLM-x32\...\Firefox\Extensions: [fdm_ffext@freedownloadmanager.org] - C:\Program Files (x86)\Free Download Manager\Firefox\Extension FF Extension: Free Download Manager plugin - C:\Program Files (x86)\Free Download Manager\Firefox\Extension [2015-01-23] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= CHR Profile: C:\Users\icar\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Free Download Manager Chrome extension) - C:\Users\icar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2014-09-03] CHR Extension: (Avast Online Security) - C:\Users\icar\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-17] CHR Extension: (Google Wallet) - C:\Users\icar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-10] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-10] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-10] (Avast Software) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed] R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [File not signed] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-14] (Realsil Microelectronics Inc.) [File not signed] R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-03] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] () S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [File not signed] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation) S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [File not signed] R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-25] () R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.) R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-07-24] (IDT, Inc.) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 A2DDA; C:\EEK\BIN\a2ddax64.sys [26176 2015-01-16] (Emsisoft GmbH) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-10] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-10] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-10] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-10] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-10] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-10] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-10] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-10] () R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2014-05-05] (Microsoft Corporation) R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.) S3 cleanhlp; C:\EEK\bin\cleanhlp64.sys [57024 2015-01-16] (Emsisoft GmbH) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-05] (OSR Open Systems Resources, Inc.) R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-19] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-03] (Intel Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) S3 ssm_bus; C:\Windows\System32\drivers\ssm_bus.sys [136192 2014-10-13] (MCCI Corporation) S3 ssm_mdfl; C:\Windows\system32\DRIVERS\ssm_mdfl.sys [18944 2014-10-13] (MCCI Corporation) S3 ssm_mdm; C:\Windows\system32\DRIVERS\ssm_mdm.sys [172032 2014-10-13] (MCCI Corporation) S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-10] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-10] (Windows (R) Win 7 DDK provider) U3 uwldqkog; \??\C:\Users\icar\AppData\Local\Temp\uwldqkog.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-22 21:39 - 2015-02-22 21:44 - 00019951 _____ () C:\Users\icar\Desktop\FRST.txt 2015-02-22 21:39 - 2015-02-22 21:39 - 00071449 _____ () C:\Users\icar\Desktop\gmer.odt 2015-02-22 21:39 - 2015-02-22 21:39 - 00000097 ____H () C:\Users\icar\Desktop\.~lock.gmer.odt# 2015-02-22 21:37 - 2015-02-22 21:37 - 00000097 ____H () C:\Users\icar\Desktop\.~lock.strażacy.doc# 2015-02-22 21:31 - 2015-02-22 21:31 - 00619688 _____ (Duplex Secure Ltd) C:\Users\icar\Downloads\SPTDinst-v187-x64.exe 2015-02-22 21:29 - 2015-02-22 21:29 - 00380416 _____ () C:\Users\icar\Downloads\ctk8ubx7.exe 2015-02-21 22:24 - 2015-02-21 22:24 - 01985862 _____ () C:\Users\icar\Downloads\podatki luty Karczmar Radosław.tif 2015-02-21 22:23 - 2015-02-21 22:23 - 01792018 _____ () C:\Users\icar\Downloads\podatki kwiecień R. Karczmar.tif 2015-02-21 22:21 - 2015-02-21 22:21 - 01773258 _____ () C:\Users\icar\Downloads\podatki R.Karczmar lipiec 2014.tif 2015-02-21 22:20 - 2015-02-21 22:20 - 03400543 _____ () C:\Users\icar\Downloads\podatki sierpień R.Karczmar.tif 2015-02-21 22:20 - 2015-02-21 22:20 - 02105657 _____ () C:\Users\icar\Downloads\podatki R.Karczmar wrzesień 2014.tif 2015-02-21 21:35 - 2015-02-21 21:35 - 00000937 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk 2015-02-21 21:35 - 2015-02-21 21:35 - 00000925 _____ () C:\Users\Public\Desktop\e-Deklaracje.lnk 2015-02-21 21:35 - 2015-02-21 21:35 - 00000000 ____D () C:\Program Files (x86)\e-Deklaracje 2015-02-21 21:34 - 2015-02-21 21:34 - 00000059 _____ () C:\Users\icar\Downloads\e-DeklaracjeDesktop.air (1).md5 2015-02-21 21:31 - 2015-02-21 21:31 - 00000059 _____ () C:\Users\icar\Downloads\e-DeklaracjeDesktop.air.md5 2015-02-21 21:29 - 2015-02-21 21:29 - 01845591 _____ () C:\Users\icar\Downloads\podatki R.Karczmar grudzień 2014.tif 2015-02-19 20:46 - 2015-02-19 20:46 - 00000000 ____D () C:\Users\icar\AppData\Local\CrashDumps 2015-02-19 20:45 - 2015-02-19 20:45 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\icar\Downloads\tdsskiller.exe 2015-02-19 13:49 - 2015-02-22 21:39 - 02087424 _____ (Farbar) C:\Users\icar\Desktop\FRST64.exe 2015-02-19 13:48 - 2015-02-19 13:48 - 02086912 _____ (Farbar) C:\Users\icar\Downloads\FRST64 (1).exe 2015-02-19 13:08 - 2015-02-19 13:08 - 00688992 _____ (Swearware) C:\Users\icar\Downloads\dds.com 2015-02-19 08:38 - 2015-02-19 08:38 - 00020279 _____ () C:\Users\icar\Downloads\uchwala soltysi.odt 2015-02-18 20:33 - 2015-02-18 20:34 - 00000197 _____ () C:\WINDOWS\system32\2015-02-18-19-33-17.085-AvastVBoxSVC.exe-3276.log 2015-02-18 20:11 - 2015-02-18 20:33 - 00000474 _____ () C:\Users\icar\Desktop\Ustawienia routera.txt 2015-02-18 20:06 - 2015-02-18 20:06 - 00238895 _____ () C:\Users\icar\Downloads\download (1).zip 2015-02-18 20:05 - 2015-02-18 20:05 - 00238895 _____ () C:\Users\icar\Downloads\download.zip 2015-02-18 19:59 - 2015-02-18 19:59 - 00000000 ____D () C:\Users\icar\Downloads\201171917172218 2015-02-18 19:59 - 2011-07-15 12:48 - 00000067 _____ () C:\Users\icar\Downloads\Release Note.txt 2015-02-18 19:59 - 2011-07-01 15:23 - 01252580 _____ () C:\Users\icar\Downloads\wr340gv4-en-up.bin 2015-02-18 19:59 - 2007-01-27 13:57 - 00090112 _____ () C:\Users\icar\Downloads\tftpd32.exe 2015-02-18 19:54 - 2015-02-18 19:54 - 01660178 _____ () C:\Users\icar\Downloads\201171917172218.zip 2015-02-18 19:47 - 2015-02-18 19:51 - 00000000 ____D () C:\Program Files (x86)\DriverDoc 2015-02-18 19:47 - 2015-02-18 19:47 - 03441528 _____ (Solvusoft Corporation ) C:\Users\icar\Downloads\ARRIS_Touchstone_Cable_Modem_CM820_Aktualizacja_sterownika_10-2014 (1).exe 2015-02-18 19:46 - 2015-02-18 19:47 - 03441528 _____ (Solvusoft Corporation ) C:\Users\icar\Downloads\ARRIS_Touchstone_Cable_Modem_CM820_Aktualizacja_sterownika_10-2014.exe 2015-02-18 12:54 - 2015-02-18 12:56 - 130581240 _____ (Microsoft Corporation) C:\Users\icar\Downloads\msert (1).exe 2015-02-18 12:49 - 2015-02-18 12:50 - 130581240 _____ (Microsoft Corporation) C:\Users\icar\Downloads\msert.exe 2015-02-18 12:47 - 2015-02-18 12:47 - 00013045 _____ () C:\Users\icar\Downloads\projekt uchwały (1).odt 2015-02-18 12:27 - 2015-02-19 12:07 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2015-02-18 12:27 - 2015-02-18 12:27 - 00001116 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-02-18 12:27 - 2015-02-18 12:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-02-18 12:27 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2015-02-18 12:27 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2015-02-18 12:27 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2015-02-18 12:26 - 2015-02-18 12:27 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\icar\Downloads\mbam-setup-2.0.4.1028 (1).exe 2015-02-18 12:26 - 2015-02-18 12:26 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\icar\Downloads\mbam-setup-2.0.4.1028.exe 2015-02-18 12:23 - 2015-02-18 12:23 - 00000197 _____ () C:\WINDOWS\system32\2015-02-18-11-23-15.020-AvastVBoxSVC.exe-4088.log 2015-02-18 12:22 - 2015-02-18 12:27 - 02112512 _____ () C:\Users\icar\Downloads\AdwCleaner (1).exe 2015-02-18 12:18 - 2015-02-18 12:18 - 01597368 _____ () C:\Users\icar\Downloads\podatki styczeń R.Karczmar.tif 2015-02-18 12:18 - 2015-02-18 12:18 - 00013045 _____ () C:\Users\icar\Downloads\projekt uchwały.odt 2015-02-18 12:17 - 2015-02-18 12:19 - 00000000 ____D () C:\AdwCleaner 2015-02-18 12:16 - 2015-02-18 12:16 - 02112512 _____ () C:\Users\icar\Downloads\AdwCleaner.exe 2015-02-18 09:40 - 2015-02-18 09:40 - 00003288 _____ () C:\WINDOWS\System32\Tasks\{73EEE4AA-6BC3-444F-AC34-9700850A43C8} 2015-02-18 09:04 - 2015-02-18 09:04 - 02347384 _____ (ESET) C:\Users\icar\Downloads\esetsmartinstaller_plk.exe 2015-02-18 08:59 - 2015-02-18 08:59 - 00037175 _____ () C:\Users\icar\Downloads\do opini.odt 2015-02-18 08:45 - 2015-02-22 21:43 - 00000000 ____D () C:\FRST 2015-02-18 08:40 - 2015-02-18 08:40 - 02085888 _____ (Farbar) C:\Users\icar\Downloads\FRST64.exe 2015-02-18 08:34 - 2015-02-18 08:34 - 00037624 _____ () C:\WINDOWS\system32\Drivers\TrueSight.sys 2015-02-18 08:34 - 2015-02-18 08:34 - 00000000 ____D () C:\ProgramData\RogueKiller 2015-02-18 08:33 - 2015-02-18 08:34 - 18642520 _____ () C:\Users\icar\Downloads\RogueKillerX64.exe 2015-02-18 08:25 - 2015-02-18 08:33 - 00007664 _____ () C:\Users\icar\Downloads\SystemLook.txt 2015-02-18 08:25 - 2015-02-18 08:25 - 00139264 _____ () C:\Users\icar\Downloads\SystemLook.exe 2015-02-18 08:20 - 2015-02-18 08:20 - 00401920 _____ (Farbar) C:\Users\icar\Downloads\MiniToolBox (1).exe 2015-02-18 08:13 - 2015-02-18 09:56 - 00042938 _____ () C:\Users\icar\Downloads\Result.txt 2015-02-18 08:13 - 2015-02-18 08:13 - 00401920 _____ (Farbar) C:\Users\icar\Downloads\MiniToolBox.exe 2015-02-17 09:39 - 2015-02-17 09:40 - 00000000 ____D () C:\Users\icar\Downloads\0.9.6_voytech_Mod_Pack_20150216 2015-02-17 08:07 - 2015-02-17 08:07 - 08496497 _____ () C:\Users\icar\Downloads\0.9.6_voytech_Mod_Pack_20150216.zip 2015-02-16 10:21 - 2015-01-21 10:54 - 2146566796 _____ () C:\Users\icar\Desktop\Interstellar..2014..PL.SUBBED.DVDScr.XviD.AC3.MORS.avi 2015-02-13 21:44 - 2015-02-13 21:44 - 00000000 ____D () C:\Users\icar\Desktop\TI 2015-02-12 08:18 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2015-02-12 08:18 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2015-02-11 20:32 - 2015-02-11 20:33 - 00000197 _____ () C:\WINDOWS\system32\2015-02-11-19-32-46.074-AvastVBoxSVC.exe-3092.log 2015-02-11 14:58 - 2015-02-16 18:55 - 00054246 _____ () C:\Users\icar\Desktop\zestawienie.odt 2015-02-11 08:20 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2015-02-11 08:20 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2015-02-11 08:20 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2015-02-11 08:20 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2015-02-11 08:20 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2015-02-11 08:20 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll 2015-02-11 08:20 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll 2015-02-11 08:20 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2015-02-11 08:20 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll 2015-02-11 08:20 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll 2015-02-11 08:20 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll 2015-02-11 08:20 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll 2015-02-11 08:20 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe 2015-02-11 08:20 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe 2015-02-11 08:20 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe 2015-02-11 08:19 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2015-02-11 08:19 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2015-02-11 08:19 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2015-02-11 08:19 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2015-02-11 08:19 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2015-02-11 08:19 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2015-02-11 08:19 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2015-02-11 08:19 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2015-02-11 08:19 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2015-02-11 08:19 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2015-02-11 08:19 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2015-02-11 08:19 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2015-02-11 08:19 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll 2015-02-11 08:19 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2015-02-11 08:19 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2015-02-11 08:19 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll 2015-02-11 08:19 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2015-02-11 08:19 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll 2015-02-11 08:19 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2015-02-11 08:19 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2015-02-11 08:19 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2015-02-11 08:19 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2015-02-11 08:19 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2015-02-11 08:19 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2015-02-11 08:19 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll 2015-02-11 08:19 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2015-02-11 08:19 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2015-02-11 08:19 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll 2015-02-11 08:19 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2015-02-11 08:19 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2015-02-11 08:19 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2015-02-11 08:19 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2015-02-11 08:19 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2015-02-11 08:19 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2015-02-11 08:19 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2015-02-11 08:19 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2015-02-11 08:19 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2015-02-11 08:19 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2015-02-11 08:19 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2015-02-11 08:19 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2015-02-11 08:19 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2015-02-11 08:19 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2015-02-11 08:19 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll 2015-02-11 08:19 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll 2015-02-11 08:19 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll 2015-02-11 08:19 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll 2015-02-11 08:19 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2015-02-11 08:18 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2015-02-11 08:18 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2015-02-11 08:18 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2015-02-10 21:37 - 2015-02-10 21:41 - 00001084 _____ () C:\DelFix.txt 2015-02-09 13:52 - 2015-02-09 13:52 - 00000000 ____D () C:\Users\icar\Desktop\Fwd__Pozew_G.Smugowski 2015-02-08 20:44 - 2015-02-08 20:47 - 00000197 _____ () C:\WINDOWS\system32\2015-02-08-19-44-27.026-AvastVBoxSVC.exe-3316.log 2015-02-07 11:53 - 2015-02-07 11:54 - 00000197 _____ () C:\WINDOWS\system32\2015-02-07-10-53-26.007-AvastVBoxSVC.exe-808.log 2015-02-05 21:15 - 2015-02-05 21:17 - 00000197 _____ () C:\WINDOWS\system32\2015-02-05-20-15-27.063-AvastVBoxSVC.exe-3136.log 2015-02-05 08:41 - 2015-02-05 08:41 - 00000197 _____ () C:\WINDOWS\system32\2015-02-05-07-41-47.075-AvastVBoxSVC.exe-3200.log 2015-02-04 14:50 - 2015-02-09 10:30 - 00061497 _____ () C:\Users\icar\Desktop\porozumienie.odt 2015-02-04 13:25 - 2015-02-04 13:27 - 00000197 _____ () C:\WINDOWS\system32\2015-02-04-12-25-30.080-AvastVBoxSVC.exe-3712.log 2015-02-04 12:25 - 2015-02-04 12:27 - 00017969 _____ () C:\Users\icar\Desktop\OSP Sokolniki.odt 2015-02-04 11:12 - 2015-02-04 11:13 - 00000197 _____ () C:\WINDOWS\system32\2015-02-04-10-12-23.070-AvastVBoxSVC.exe-1920.log 2015-02-04 09:34 - 2015-02-04 10:41 - 00021327 _____ () C:\Users\icar\Desktop\komputery.odt 2015-02-03 20:37 - 2015-02-03 20:38 - 00000197 _____ () C:\WINDOWS\system32\2015-02-03-19-37-44.080-AvastVBoxSVC.exe-1892.log 2015-02-03 19:03 - 2015-02-03 19:20 - 00000000 ____D () C:\Users\icar\.cr3 2015-02-02 15:12 - 2015-02-02 15:12 - 00000197 _____ () C:\WINDOWS\system32\2015-02-02-14-12-43.091-AvastVBoxSVC.exe-3132.log 2015-02-02 14:24 - 2015-02-02 14:24 - 00034547 _____ () C:\Users\icar\Desktop\Zarządzenie w sprawie zebrań sołeckich.odt 2015-02-02 11:56 - 2015-02-02 11:59 - 00039782 _____ () C:\Users\icar\Desktop\uchwala w sprawie przystapienia do PJST.odt 2015-02-02 11:56 - 2015-02-02 11:56 - 00019561 _____ () C:\Users\icar\Desktop\Projekt uchw. w spr. dzierzawy.odt 2015-02-02 11:27 - 2015-02-02 11:44 - 00035763 _____ () C:\Users\icar\Desktop\Biała zgromadzenie.odt 2015-02-01 20:39 - 2015-02-01 20:39 - 00000197 _____ () C:\WINDOWS\system32\2015-02-01-19-39-43.084-AvastVBoxSVC.exe-4160.log 2015-01-30 08:41 - 2015-01-30 08:41 - 00025296 _____ () C:\Users\icar\Desktop\Kontakty001.spb 2015-01-30 08:41 - 2015-01-30 08:41 - 00000000 ____D () C:\Users\icar\Desktop\BackUp 2015-01-30 08:39 - 2015-01-30 08:39 - 00002020 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2015-01-30 08:36 - 2015-01-30 08:36 - 00000000 ____D () C:\Users\icar\Documents\samsung 2015-01-28 20:28 - 2015-01-28 20:28 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2015-01-28 20:28 - 2015-01-28 20:28 - 00000000 ____D () C:\WINDOWS\system32\NV 2015-01-28 20:25 - 2015-01-10 09:07 - 32102544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 25459856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 24765584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 20465296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 18566296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 17250776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 16009120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 13295552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 13210248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 10774544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 10714488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 10274448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2015-01-28 20:25 - 2015-01-10 09:07 - 03607184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 03245712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434725.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434725.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00969360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00942736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00929424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00906384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00496456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00399688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00353040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00345744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00305320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2015-01-28 20:25 - 2015-01-10 09:07 - 00031376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2015-01-28 18:47 - 2015-02-11 20:38 - 00003876 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1422467275 2015-01-28 18:47 - 2015-02-11 20:38 - 00001059 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-01-28 18:47 - 2015-02-11 20:38 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-01-28 18:47 - 2015-01-28 18:47 - 00001149 _____ () C:\Users\Public\Desktop\Opera.lnk 2015-01-26 18:29 - 2015-01-26 18:29 - 00000197 _____ () C:\WINDOWS\system32\2015-01-26-17-29-43.021-AvastVBoxSVC.exe-3384.log 2015-01-26 10:06 - 2015-01-26 10:06 - 00000193 _____ () C:\WINDOWS\WORDPAD.INI 2015-01-26 09:16 - 2015-02-18 12:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-01-26 09:07 - 2015-01-26 09:07 - 00000197 _____ () C:\WINDOWS\system32\2015-01-26-08-07-25.005-AvastVBoxSVC.exe-2032.log 2015-01-26 08:58 - 2015-01-28 08:46 - 00038110 _____ () C:\Users\icar\Desktop\Eko-Biała.odt 2015-01-25 14:25 - 2015-01-25 14:27 - 00000197 _____ () C:\WINDOWS\system32\2015-01-25-13-25-55.014-AvastVBoxSVC.exe-4936.log 2015-01-25 14:23 - 2015-01-25 14:25 - 00307536 _____ () C:\WINDOWS\Minidump\012515-41890-01.dmp 2015-01-25 14:23 - 2015-01-25 14:23 - 709879417 _____ () C:\WINDOWS\MEMORY.DMP 2015-01-25 14:23 - 2015-01-25 14:23 - 00000000 ____D () C:\WINDOWS\Minidump 2015-01-24 20:56 - 2015-01-24 20:56 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2015-01-24 20:56 - 2013-09-03 22:53 - 01795952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll 2015-01-24 20:56 - 2013-09-03 22:53 - 00099288 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverx64.sys 2015-01-23 22:01 - 2015-01-23 22:03 - 00000197 _____ () C:\WINDOWS\system32\2015-01-23-21-01-18.020-AvastVBoxSVC.exe-3440.log 2015-01-23 21:18 - 2015-02-17 21:45 - 00000000 ____D () C:\Users\icar\AppData\Roaming\Free Download Manager 2015-01-23 21:17 - 2015-01-23 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager 2015-01-23 21:17 - 2015-01-23 21:17 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager 2015-01-23 13:45 - 2015-01-23 13:45 - 00000197 _____ () C:\WINDOWS\system32\2015-01-23-12-45-32.007-AvastVBoxSVC.exe-4340.log 2015-01-23 13:43 - 2015-02-18 20:30 - 00004496 _____ () C:\WINDOWS\PFRO.log ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-02-22 21:40 - 2013-07-05 07:34 - 00001078 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-22 21:35 - 2013-06-05 19:35 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1084307622-131046002-2435356648-1002 2015-02-22 21:15 - 2015-01-21 21:20 - 01354617 _____ () C:\WINDOWS\WindowsUpdate.log 2015-02-22 21:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2015-02-22 20:56 - 2013-06-07 12:29 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2015-02-22 20:52 - 2013-07-05 07:34 - 00001074 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-20 22:18 - 2013-09-30 05:15 - 01828496 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-02-20 22:18 - 2013-09-30 05:00 - 00808198 _____ () C:\WINDOWS\system32\perfh015.dat 2015-02-20 22:18 - 2013-09-30 05:00 - 00164014 _____ () C:\WINDOWS\system32\perfc015.dat 2015-02-20 22:16 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2015-02-20 22:15 - 2015-01-21 22:37 - 00009802 _____ () C:\WINDOWS\setupact.log 2015-02-19 13:48 - 2013-06-05 21:17 - 00000000 ____D () C:\Program Files\Vuze 2015-02-18 20:30 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-02-18 20:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2015-02-18 09:42 - 2014-07-12 13:52 - 00000000 ____D () C:\Users\icar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell 2015-02-18 09:42 - 2014-07-12 13:51 - 00000000 ____D () C:\Users\icar\AppData\Local\Deployment 2015-02-12 11:10 - 2015-01-07 21:20 - 00000000 ____D () C:\Users\icar\Desktop\back to school 2015-02-12 09:00 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2015-02-12 08:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2015-02-11 20:31 - 2013-08-22 15:44 - 00412624 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-02-11 08:49 - 2014-05-26 09:26 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-11 08:48 - 2013-07-22 08:24 - 00000000 ____D () C:\WINDOWS\system32\MRT 2015-02-11 08:45 - 2013-06-07 09:59 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2015-02-10 21:37 - 2015-01-16 08:58 - 00000000 ____D () C:\WINDOWS\ERUNT 2015-02-10 18:24 - 2013-06-05 21:25 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-02-08 20:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2015-02-07 17:35 - 2013-07-05 07:34 - 00004050 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2015-02-07 17:35 - 2013-07-05 07:34 - 00003814 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2015-02-05 09:56 - 2013-06-07 12:29 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2015-02-04 15:31 - 2013-10-19 12:39 - 00000000 ____D () C:\Users\icar 2015-02-03 20:31 - 2014-12-10 18:30 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2015-02-03 20:31 - 2014-12-10 18:30 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-30 21:42 - 2013-06-07 12:03 - 00000000 ____D () C:\Users\icar\AppData\Local\Adobe 2015-01-28 20:28 - 2013-10-19 12:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-28 18:48 - 2013-11-13 22:31 - 00000000 ____D () C:\Users\icar\AppData\Roaming\Opera Software 2015-01-28 18:48 - 2013-11-13 22:31 - 00000000 ____D () C:\Users\icar\AppData\Local\Opera Software 2015-01-25 14:22 - 2013-10-19 12:32 - 00000000 ____D () C:\Program Files (x86)\Intel 2015-01-24 20:56 - 2012-11-09 12:15 - 00000000 ____D () C:\ProgramData\Intel 2015-01-24 20:56 - 2012-11-09 12:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2015-01-24 20:56 - 2012-11-09 12:14 - 00000000 ____D () C:\Program Files\Intel 2015-01-23 21:17 - 2014-09-03 19:58 - 00001081 _____ () C:\Users\icar\Desktop\Free Download Manager.lnk ==================== Files in the root of some directories ======= 2012-11-09 12:28 - 2012-11-09 12:28 - 0000119 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log 2012-11-09 12:24 - 2012-11-09 12:25 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log 2012-11-09 12:25 - 2012-11-09 12:26 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log 2012-11-09 12:23 - 2012-11-09 12:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 2012-11-09 12:26 - 2012-11-09 12:27 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log Some content of TEMP: ==================== C:\Users\icar\AppData\Local\Temp\dllnt_dump.dll C:\Users\icar\AppData\Local\Temp\i4jdel0.exe C:\Users\icar\AppData\Local\Temp\Quarantine.exe C:\Users\icar\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-18 21:00 ==================== End Of Log ============================