Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by Acer (administrator) on ACER-KOMPUTER on 31-03-2015 14:39:51 Running from C:\Users\Acer\Desktop\Clean Loaded Profiles: Acer (Available profiles: Acer) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe (Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE (Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe (Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Atheros Communications) C:\Program Files\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Redefine Sp z o.o.) C:\Program Files\ipla\ipla.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [6471168 2015-01-28] (Broadcom Corporation) HKLM\...\Run: [Plus Internet] => C:\Program Files\Plus Internet\PlusInternetChecker.exe [501112 2012-02-29] () HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10889832 2011-12-27] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [879208 2011-11-15] (Realtek Semiconductor) HKLM\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM\...\Run: [USB3MON] => C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2193200 2012-03-07] (ELAN Microelectronics Corp.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2325776 2012-02-14] (Synaptics Incorporated) HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\BtvStack.exe [875680 2012-02-20] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\AthBtTray.exe [695456 2012-02-20] (Atheros Commnucations) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3667472 2014-12-18] (AVG Technologies CZ, s.r.o.) HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21360736 2014-12-12] (Redefine Sp z o.o.) HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\...\MountPoints2: {4b6cc553-a6f4-11e4-9cc7-b888e306902e} - F:\setup.exe HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\...\MountPoints2: {e4503a1b-a6e7-11e4-a0c9-b888e306902e} - G:\AutoRun.exe HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\...\MountPoints2: {e4503a29-a6e7-11e4-a0c9-b888e306902e} - G:\AutoRun.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-01-31] (Microsoft Corporation) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-1269757778-2498391830-3713489346-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-11-12] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-01-28] (Oracle Corporation) BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files\Bluetooth Suite\IEPlugIn.dll [2012-02-20] (Atheros Commnucations) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default FF DefaultSearchEngine: webssearches FF SelectedSearchEngine: webssearches FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2015-01-28] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation) FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-23] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2015-02-01] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2015-02-01] (Google Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-23] (Microsoft Corporation) FF Extension: 158d7cb370394a758e0b3bd0a464edd2 - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\Extensions\{158d7cb3-7039-4a75-8e0b-3bd0a464edd2} [2015-01-31] FF Extension: Adblock Plus - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-28] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\fftoolbar2014@etech.com [Not Found] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E} [Not Found] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [Not Found] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\OIBMBKA115048682@HYKFIU97176590.com [Not Found] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\sonnypenn@aol.com [Not Found] FF Extension: No Name - C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\k8a17bfg.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR HomePage: Default -> CHR Profile: C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-01] CHR Extension: (YouTube) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-01] CHR Extension: (Google Search) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-01] CHR Extension: (Solution Real) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\gajmlbhaikobfinipefjoonopbfdkpcl [2015-02-01] CHR Extension: (No Name) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\idmleblnjffpliebomfhmbhimioibfjm [2015-02-03] CHR Extension: (Google Wallet) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-01] CHR Extension: (Gmail) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-01] Opera: ======= OPR Extension: (GoHD) - C:\Users\Acer\AppData\Roaming\Opera Software\Opera Stable\Extensions\bokijhalndhhhikpnaniimagniglonke [2015-02-03] OPR Extension: (Adblock Plus) - C:\Users\Acer\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2015-03-07] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [85664 2012-02-20] (Atheros Commnucations) [File not signed] R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3432976 2014-12-18] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [298080 2014-12-18] (AVG Technologies CZ, s.r.o.) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [276248 2012-03-07] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [458464 2012-02-02] (Intel(R) Corporation) R2 jhi_service; C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [5179392 2015-01-28] (Broadcom Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208152 2014-12-08] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.) R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.) R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.) R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [98584 2014-10-05] (AVG Technologies CZ, s.r.o.) R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.) R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [200984 2014-10-10] (AVG Technologies CZ, s.r.o.) R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18496 2015-01-28] (Broadcom Corporation) R3 BcmVWL; C:\Windows\System32\DRIVERS\bcmvwl32.sys [17728 2015-01-28] (Broadcom Corporation) R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25248 2012-02-20] (Atheros) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2015-01-28] (Disc Soft Ltd) S3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [207152 2012-03-07] (ELAN Microelectronics Corp.) R0 iusb3hcs; C:\Windows\System32\DRIVERS\iusb3hcs.sys [13592 2012-02-27] (Intel Corporation) R3 iusb3hub; C:\Windows\System32\DRIVERS\iusb3hub.sys [348440 2012-02-27] (Intel Corporation) R3 iusb3xhc; C:\Windows\System32\DRIVERS\iusb3xhc.sys [792856 2012-02-27] (Intel Corporation) S3 massfilter; C:\Windows\System32\DRIVERS\massfilter.sys [9216 2012-02-29] (MBB Incorporated) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [46080 2011-11-10] (Intel Corporation) R1 omwd; C:\Windows\system32\Drivers\omwd.sys [20480 2015-01-29] () [File not signed] R3 SmbDrv; C:\Windows\System32\DRIVERS\Smb_driver.sys [21520 2012-02-14] (Synaptics Incorporated) R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-18] (Samsung Electronics) [File not signed] S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [126976 2012-02-29] (ZTE Corporation) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-31 14:31 - 2015-03-31 14:31 - 00001230 _____ () C:\Users\Acer\Desktop\x.reg 2015-03-31 07:46 - 2015-03-31 14:34 - 00000000 ____D () C:\AdwCleaner 2015-03-31 07:40 - 2015-03-31 07:40 - 00000000 ____D () C:\Windows\system32\appmgmt 2015-03-30 08:32 - 2015-03-31 14:39 - 00000000 ____D () C:\FRST 2015-03-30 08:28 - 2015-03-31 14:39 - 00000000 ____D () C:\Users\Acer\Desktop\Clean 2015-03-29 00:25 - 2015-03-29 00:25 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\EncryptStick 2015-03-21 21:52 - 2015-03-21 22:58 - 00000000 ____D () C:\Users\Acer\Desktop\Zdjęcia Kasia 2015-03-10 22:49 - 2015-03-10 22:50 - 00000000 ____D () C:\Users\Acer\Documents\Filmy 2015-03-10 19:30 - 2015-03-11 20:32 - 00073564 _____ () C:\Users\Acer\Desktop\METODY I STYLE OBSŁUGI KONSUMENTÓW ZAKŁADU GASTRONOMICZNEGO.pptx 2015-03-07 20:48 - 2015-01-29 11:27 - 05048496 _____ (GIANTS Software GmbH) C:\Users\Acer\Desktop\FarmingSimulator2015Game.exe 2015-03-05 11:25 - 2015-03-05 11:25 - 00012256 _____ () C:\Users\Acer\Downloads\organizacja pracy zakladów gastronomicznych .zip 2015-03-05 11:25 - 2015-03-05 11:25 - 00012256 _____ () C:\Users\Acer\Downloads\organizacja pracy zakladów gastronomicznych (1).zip 2015-03-04 12:18 - 2015-03-04 12:18 - 00088357 _____ () C:\Users\Acer\Downloads\Materiały od Profesor Litwińczuk.zip ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-03-31 14:40 - 2015-02-02 17:24 - 01714473 _____ () C:\Windows\system32\debug.log 2015-03-31 14:40 - 2015-02-01 18:29 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-03-31 14:39 - 2015-01-28 13:59 - 01549696 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-03-31 14:39 - 2015-01-28 13:50 - 01741871 _____ () C:\Windows\WindowsUpdate.log 2015-03-31 14:39 - 2009-07-14 10:07 - 00697912 _____ () C:\Windows\system32\perfh015.dat 2015-03-31 14:39 - 2009-07-14 10:07 - 00134990 _____ () C:\Windows\system32\perfc015.dat 2015-03-31 14:36 - 2015-02-09 18:14 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\ipla 2015-03-31 14:36 - 2015-02-03 23:37 - 00001334 _____ () C:\Windows\Tasks\XSQFBT.job 2015-03-31 14:36 - 2015-02-03 23:36 - 00001682 _____ () C:\Windows\Tasks\GFXWRHAD.job 2015-03-31 14:36 - 2015-02-01 18:29 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-03-31 14:36 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-03-31 14:36 - 2009-07-14 06:39 - 00035259 _____ () C:\Windows\setupact.log 2015-03-31 14:34 - 2015-02-01 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-03-31 14:34 - 2015-01-28 14:39 - 00001023 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-03-31 14:34 - 2015-01-28 14:39 - 00001011 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-03-31 14:34 - 2015-01-28 13:54 - 00001152 _____ () C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-03-31 14:30 - 2015-02-02 10:59 - 00000000 ____D () C:\ProgramData\MFAData 2015-03-31 07:39 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-03-31 07:39 - 2009-07-14 06:34 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-03-31 07:32 - 2009-07-14 06:53 - 00030156 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-03-30 14:13 - 2015-01-28 14:44 - 00018368 _____ () C:\Windows\PFRO.log 2015-03-30 13:58 - 2015-02-02 17:22 - 00000000 ____D () C:\Program Files\AVG Web TuneUp 2015-03-30 08:43 - 2015-01-29 14:25 - 00000000 ____D () C:\Users\Acer\Desktop\szkoła 2015-03-29 00:06 - 2015-02-01 21:41 - 00000000 ____D () C:\Users\Acer\AppData\Local\CrashDumps 2015-03-15 00:00 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF 2015-03-11 17:56 - 2015-02-03 23:38 - 00002438 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-5_user.job 2015-03-11 17:48 - 2015-01-28 16:23 - 00000000 ____D () C:\ProgramData\TEMP 2015-03-11 17:47 - 2015-02-03 23:46 - 00003426 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-1-7.job 2015-03-11 17:47 - 2015-02-03 23:46 - 00003090 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-1-6.job 2015-03-11 17:47 - 2015-02-03 23:46 - 00002398 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-5_user.job 2015-03-11 17:47 - 2015-02-03 23:46 - 00002398 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-5.job 2015-03-11 17:47 - 2015-02-03 23:45 - 00005470 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-6.job 2015-03-11 17:47 - 2015-02-03 23:45 - 00005134 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-7.job 2015-03-11 17:47 - 2015-02-03 23:45 - 00004110 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-4.job 2015-03-11 17:47 - 2015-02-03 23:44 - 00004792 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-11.job 2015-03-11 17:47 - 2015-02-03 23:44 - 00002064 _____ () C:\Windows\Tasks\12d6c2af-d25b-4e93-a355-4b2280c4a46c-10_user.job 2015-03-11 17:47 - 2015-02-03 23:38 - 00003130 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-1-6.job 2015-03-11 17:47 - 2015-02-03 23:38 - 00002438 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-5.job 2015-03-11 17:47 - 2015-02-03 23:37 - 00004486 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-4.job 2015-03-11 17:47 - 2015-02-03 23:37 - 00003466 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-1-7.job 2015-03-11 17:47 - 2015-02-03 23:36 - 00005510 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-6.job 2015-03-11 17:47 - 2015-02-03 23:36 - 00005176 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-11.job 2015-03-11 17:47 - 2015-02-03 23:36 - 00005174 _____ () C:\Windows\Tasks\604196a1-9f5f-48e2-9c11-cb6cb22d19de-7.job 2015-03-11 17:47 - 2015-01-28 16:34 - 00003748 _____ () C:\Windows\Tasks\208aafe1-78bc-4f7b-a972-7c08a40c1a91-1.job 2015-03-11 17:47 - 2015-01-28 16:34 - 00002752 _____ () C:\Windows\Tasks\208aafe1-78bc-4f7b-a972-7c08a40c1a91-5_user.job 2015-03-11 17:47 - 2015-01-28 16:34 - 00002752 _____ () C:\Windows\Tasks\208aafe1-78bc-4f7b-a972-7c08a40c1a91-5.job 2015-03-11 17:47 - 2015-01-28 16:34 - 00002408 _____ () C:\Windows\Tasks\208aafe1-78bc-4f7b-a972-7c08a40c1a91-2.job 2015-03-11 17:47 - 2015-01-28 16:33 - 00004800 _____ () C:\Windows\Tasks\208aafe1-78bc-4f7b-a972-7c08a40c1a91-4.job 2015-03-10 23:16 - 2015-02-01 18:28 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-03-10 16:58 - 2015-01-28 14:34 - 00000000 ____D () C:\Program Files\Opera 2015-03-06 02:48 - 2015-01-28 15:38 - 00000095 _____ () C:\Users\Acer\AppData\Roaming\WB.CFG 2015-03-03 23:14 - 2015-02-26 17:59 - 00000000 ____D () C:\ProgramData\Avg_Update_0215tb ==================== Files in the root of some directories ======= 2015-01-25 18:12 - 2015-01-25 18:12 - 0001248 _____ () C:\Users\Acer\AppData\Roaming\GFXWRHAD 2015-01-28 15:38 - 2015-03-06 02:48 - 0000095 _____ () C:\Users\Acer\AppData\Roaming\WB.CFG 2015-01-25 18:12 - 2015-01-25 18:12 - 0002086 _____ () C:\Users\Acer\AppData\Roaming\XSQFBT 2015-02-03 23:37 - 2015-02-03 23:37 - 0613057 _____ (CMI Limited) C:\Users\Acer\AppData\Local\nsa7183.tmp 2015-02-04 15:10 - 2015-02-04 15:10 - 0613057 _____ (CMI Limited) C:\Users\Acer\AppData\Local\nsoFE3.tmp 2015-02-04 20:54 - 2015-02-04 20:54 - 0613057 _____ (CMI Limited) C:\Users\Acer\AppData\Local\nsqDF26.tmp Some content of TEMP: ==================== C:\Users\Acer\AppData\Local\Temp\68E1EC45-9CD3-2699-407A-61F1BCFF66D1.dll C:\Users\Acer\AppData\Local\Temp\cabex.dll C:\Users\Acer\AppData\Local\Temp\InstallGenieo.exe C:\Users\Acer\AppData\Local\Temp\jreInstall.exe C:\Users\Acer\AppData\Local\Temp\LqnyVaOJLQ.exe C:\Users\Acer\AppData\Local\Temp\ose00000.exe C:\Users\Acer\AppData\Local\Temp\Quarantine.exe C:\Users\Acer\AppData\Local\Temp\shb2TaS2LA.exe C:\Users\Acer\AppData\Local\Temp\ShopperProJSINJFull.exe C:\Users\Acer\AppData\Local\Temp\SpOrder.dll C:\Users\Acer\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll C:\Users\Acer\AppData\Local\Temp\sqlite3.dll C:\Users\Acer\AppData\Local\Temp\unelevate.exe C:\Users\Acer\AppData\Local\Temp\ytaiesmt_smtyc_setup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-03-05 23:47 ==================== End Of Log ============================