Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-08-2015 Ran by Sierotaa (administrator) on SIEROTAA123 (19-08-2015 12:57:18) Running from C:\Users\Sierotaa\Desktop\Nowy folder (2) Loaded Profiles: Sierotaa (Available Profiles: Sierotaa) Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Polski (Polska) Internet Explorer Version 8 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Sonix) C:\Windows\vsnp2uvc.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Spotify Ltd) C:\Users\Sierotaa\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe () C:\Users\Sierotaa\Downloads\0ffil083.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe (Opera Software) C:\Program Files (x86)\Opera\31.0.1889.99\opera.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663464 2011-04-20] (Realtek Semiconductor) HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [662016 2009-08-13] (Sonix) HKLM\...\Run: [LoadFUJ02E3] => C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [45680 2010-06-08] (FUJITSU LIMITED) HKLM\...\Run: [FDM7] => C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712 2009-11-26] (FUJITSU LIMITED) HKLM\...\Run: [PfNet] => C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6311424 2010-10-07] (FUJITSU LIMITED) HKLM\...\Run: [LoadFujitsuQuickTouch] => C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [162416 2010-07-16] (FUJITSU LIMITED) HKLM\...\Run: [LoadBtnHnd] => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [21616 2010-07-09] (FUJITSU LIMITED) HKLM-x32\...\Run: [IndicatorUtility] => C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752 2010-09-29] (FUJITSU LIMITED) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-08-05] (AVAST Software) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-726486324-3529100794-3880433245-1000\...\Run: [Spotify Web Helper] => C:\Users\Sierotaa\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-18] (Spotify Ltd) HKU\S-1-5-21-726486324-3529100794-3880433245-1000\...\Run: [Spotify] => C:\Users\Sierotaa\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-18] (Spotify Ltd) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-05] (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-05] (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: No Name -> {1F91A9A1-01BA-4c81-863D-3BA0751E1419} -> No File BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-05] (AVAST Software) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation) Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 62.233.233.233 87.204.204.204 Tcpip\..\Interfaces\{4150ADBD-3EB6-4ACF-B30C-830BECDA450F}: [DhcpNameServer] 62.233.233.233 87.204.204.204 Tcpip\..\Interfaces\{45EEFF63-AD61-4093-B483-8F78BC459070}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{F5943C4E-B333-49D1-9E25-104B7DDE71CD}: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll [2014-11-18] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll [2014-11-18] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-24] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-24] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-08-05] Chrome: ======= CHR Profile: C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Lamborghini Sesto Elemento Theme) - C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dappigdjllcnkkoacaoolciaolaaiemb [2015-08-18] CHR Extension: (Avast SafePrice) - C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-10] CHR Extension: (AdBlock) - C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-08-18] CHR Extension: (Avast Online Security) - C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-08-08] CHR Extension: (Chrome Web Store Payments) - C:\Users\Sierotaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27] CHR HKU\S-1-5-21-726486324-3529100794-3880433245-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-08-05] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-08-05] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] Opera: ======= OPR Extension: (Adblock Plus) - C:\Users\Sierotaa\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2014-09-27] ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-05] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4047768 2015-08-05] (Avast Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-09-18] (Ellora Assets Corp.) [File not signed] S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] () R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [331776 2010-10-07] (FUJITSU LIMITED) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-05] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-05] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-05] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-05] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-14] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-05] (AVAST Software) U2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-05] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-05] (AVAST Software) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-18] (Disc Soft Ltd) R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [21104 2009-06-24] (FUJITSU LIMITED) R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED) R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-26] (REALiX(tm)) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-10-02] (Intel Corporation) R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-08-05] (AVAST Software) S3 rstescu; C:\Windows\system32\drivers\rstescu.sys [607256 2011-03-25] (Intel Corporation) S3 rstescu1; C:\Windows\system32\drivers\rstescu1.sys [607256 2011-03-25] (Intel Corporation) R0 rstfltr; C:\Windows\System32\drivers\rstfltr.sys [22552 2011-03-25] (Intel Corporation) R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1849752 2014-10-02] (Sonix Co. Ltd.) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-08-05] (Avast Software) S3 andnetadb; System32\Drivers\lgandnetadb.sys [X] S3 AndNetDiag; system32\DRIVERS\lgandnetdiag64.sys [X] S3 ANDNetModem; system32\DRIVERS\lgandnetmodem64.sys [X] S3 NPF; system32\drivers\NPF.sys [X] U3 uglyiaob; \??\C:\Users\Sierotaa\AppData\Local\Temp\uglyiaob.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-19 12:56 - 2015-08-19 12:57 - 00000000 ____D C:\Users\Sierotaa\Desktop\Nowy folder (2) 2015-08-19 12:40 - 2015-08-19 12:42 - 00026177 _____ C:\Users\Sierotaa\Downloads\Addition.txt 2015-08-19 12:40 - 2015-08-19 12:40 - 00380416 _____ C:\Users\Sierotaa\Downloads\0ffil083.exe 2015-08-19 12:39 - 2015-08-19 12:42 - 00029469 _____ C:\Users\Sierotaa\Downloads\FRST.txt 2015-08-19 12:38 - 2015-08-19 12:57 - 00000000 ____D C:\FRST 2015-08-18 21:27 - 2015-08-19 10:18 - 00000000 ____D C:\Users\Sierotaa\AppData\Local\Spotify 2015-08-18 21:27 - 2015-08-18 21:27 - 00001823 _____ C:\Users\Sierotaa\Desktop\Spotify.lnk 2015-08-18 21:27 - 2015-08-18 21:27 - 00001809 _____ C:\Users\Sierotaa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2015-08-18 21:27 - 2015-08-18 21:27 - 00000000 ____D C:\Users\Sierotaa\AppData\Local\CEF 2015-08-18 21:25 - 2015-08-19 10:14 - 00000000 ____D C:\Users\Sierotaa\AppData\Roaming\Spotify 2015-08-18 21:25 - 2015-08-18 21:25 - 00146080 _____ (Spotify Ltd) C:\Users\Sierotaa\Downloads\SpotifySetup.exe 2015-08-18 16:45 - 2015-08-18 16:47 - 00000000 ____D C:\Users\Sierotaa\Downloads\backups 2015-08-18 16:43 - 2015-08-18 16:43 - 00008657 _____ C:\Users\Sierotaa\Downloads\hijackthis.log 2015-08-18 16:42 - 2015-08-18 16:43 - 00388608 _____ (Trend Micro Inc.) C:\Users\Sierotaa\Downloads\HijackThis_2.0.4.exe 2015-08-18 00:05 - 2015-08-19 10:14 - 00000224 _____ C:\Windows\setupact.log 2015-08-18 00:05 - 2015-08-18 00:05 - 00000000 _____ C:\Windows\setuperr.log 2015-08-16 12:51 - 2015-08-16 12:51 - 00001946 _____ C:\Users\Sierotaa\Desktop\Lista odtwarzania1.wpl 2015-08-11 00:54 - 2015-08-11 00:54 - 05147430 _____ C:\Users\Sierotaa\Downloads\LGMOBILEAX.zip 2015-08-11 00:48 - 2012-02-05 14:17 - 00003157 _____ C:\Users\Sierotaa\Desktop\Automatic Offline Procedure.vbs 2015-08-11 00:40 - 2014-10-26 17:49 - 07280959 _____ C:\Users\Sierotaa\Desktop\LG_KDZ_FW_UPD_EN_(łatka).zip 2015-08-11 00:40 - 2014-10-26 17:49 - 05147430 _____ C:\Users\Sierotaa\Desktop\LGMOBILEAX(Łatka).zip 2015-08-11 00:32 - 2015-08-11 00:38 - 12307508 _____ C:\Users\Sierotaa\Downloads\Łatka_Update.rar 2015-08-11 00:20 - 2015-08-11 00:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_lgandnetadb_01005.Wdf 2015-08-11 00:08 - 2015-08-11 00:58 - 00002760 _____ C:\Windows\SysWOW64\lgAxconfig.ini 2015-08-11 00:08 - 2015-08-11 00:57 - 00000831 _____ C:\Users\Sierotaa\Desktop\LGMobile Support Tool.lnk 2015-08-11 00:08 - 2015-08-11 00:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LGMobile Support Tool 2015-08-11 00:08 - 2011-05-06 10:37 - 00655872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr90.dll 2015-08-11 00:08 - 2011-05-06 10:37 - 00568832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp90.dll 2015-08-11 00:08 - 2011-05-06 10:37 - 00224768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcm90.dll 2015-08-11 00:08 - 2010-03-13 21:15 - 04342088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100.dll 2015-08-11 00:08 - 2006-04-30 05:33 - 00053248 _____ () C:\Windows\SysWOW64\CommonDL.dll 2015-08-11 00:08 - 2005-09-29 22:39 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll 2015-08-11 00:07 - 2015-08-11 00:59 - 00000000 ____D C:\ProgramData\LGMOBILEAX 2015-08-11 00:06 - 2011-07-18 06:03 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01005.dll 2015-08-11 00:05 - 2013-11-28 20:26 - 00000000 ____D C:\Users\Sierotaa\Desktop\Paczka LG L9 2015-08-11 00:04 - 2015-08-11 00:05 - 12771626 _____ C:\Users\Sierotaa\Downloads\Paczka LG L9.rar 2015-08-11 00:03 - 2015-08-11 00:25 - 737500207 _____ C:\Users\Sierotaa\Downloads\V20A_00.kdz 2015-08-10 23:11 - 2015-08-10 23:12 - 00000000 ____D C:\Program Files (x86)\QuickTime 2015-08-10 23:11 - 2015-08-10 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2015-08-10 23:10 - 2015-08-10 23:10 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-08-10 23:10 - 2015-08-10 23:10 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2015-08-10 23:06 - 2015-08-10 23:07 - 42096984 _____ (Apple Inc.) C:\Users\Sierotaa\Downloads\QuickTimeInstaller.exe 2015-08-05 18:33 - 2015-08-05 18:33 - 00002802 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2015-08-05 18:33 - 2015-08-05 18:33 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk 2015-08-05 18:33 - 2015-08-05 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-08-05 18:33 - 2015-08-05 18:33 - 00000000 ____D C:\Program Files\CCleaner 2015-08-05 18:31 - 2015-08-05 18:32 - 06609608 _____ (Piriform Ltd) C:\Users\Sierotaa\Downloads\ccsetup508.exe 2015-08-05 16:54 - 2015-08-05 16:54 - 00000000 ____D C:\Users\Sierotaa\AppData\Roaming\AVAST Software 2015-08-05 16:53 - 2015-08-14 04:53 - 01048344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2015-08-05 16:53 - 2015-08-05 16:54 - 00000000 ____D C:\Windows\SysWOW64\vbox 2015-08-05 16:53 - 2015-08-05 16:54 - 00000000 ____D C:\Windows\system32\vbox 2015-08-05 16:53 - 2015-08-05 16:53 - 00447944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-08-05 16:53 - 2015-08-05 16:53 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00150672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00115152 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-08-05 16:53 - 2015-08-05 16:53 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-08-05 16:53 - 2015-08-05 16:53 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-08-05 16:53 - 2015-08-05 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-08-05 16:50 - 2015-08-05 16:50 - 05685704 _____ (AVAST Software) C:\Users\Sierotaa\Downloads\avast! Free Antivirus 2015 10.3.2225.1172.exe 2015-08-05 16:50 - 2015-08-05 16:50 - 00000000 ____D C:\Program Files\AVAST Software 2015-08-05 16:49 - 2015-08-05 16:49 - 00817088 _____ (Installer Soft internet ) C:\Users\Sierotaa\Downloads\avast! Free Antivirus 2015 10.exe 2015-08-04 23:30 - 2015-08-04 23:30 - 01199856 _____ ( ) C:\Users\Sierotaa\Downloads\hwmonitor_1.28.exe 2015-08-04 23:30 - 2015-08-04 23:30 - 00000930 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk 2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Program Files\CPUID 2015-07-26 17:45 - 2015-07-26 17:45 - 00026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS 2015-07-26 17:45 - 2015-07-26 17:45 - 00003244 _____ C:\Windows\System32\Tasks\Driver Booster Scan 2015-07-26 17:45 - 2015-07-26 17:45 - 00003188 _____ C:\Windows\System32\Tasks\Driver Booster Update 2015-07-26 17:45 - 2015-07-26 17:45 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled 2015-07-26 17:45 - 2015-07-26 17:45 - 00000000 ____D C:\ProgramData\ProductData 2015-07-26 17:45 - 2015-07-26 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 2 2015-07-24 16:14 - 2015-07-24 16:16 - 00000000 ____D C:\AdwCleaner 2015-07-24 16:14 - 2015-07-24 16:14 - 02248704 _____ C:\Users\Sierotaa\Downloads\AdwCleaner.exe 2015-07-24 16:00 - 2015-07-24 16:00 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Sierotaa\Downloads\SpyHunter-Installer (1).exe 2015-07-24 15:59 - 2015-08-18 01:41 - 00000000 ____D C:\Program Files (x86)\SFK 2015-07-24 15:59 - 2015-08-05 17:15 - 00000000 ____D C:\ProgramData\lWinManProl ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-08-19 12:03 - 2014-10-05 20:15 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-08-18 18:56 - 2014-08-17 21:42 - 01219826 _____ C:\Windows\WindowsUpdate.log 2015-08-18 16:36 - 2015-02-12 20:06 - 00000000 ____D C:\Program Files (x86)\LG Electronics 2015-08-18 16:36 - 2014-08-17 21:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2015-08-18 16:03 - 2014-10-05 20:15 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-08-17 00:16 - 2014-08-18 07:33 - 00697912 _____ C:\Windows\system32\perfh015.dat 2015-08-17 00:16 - 2014-08-18 07:33 - 00134990 _____ C:\Windows\system32\perfc015.dat 2015-08-17 00:16 - 2009-07-14 07:13 - 01549696 _____ C:\Windows\system32\PerfStringBackup.INI 2015-08-16 18:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-08-16 01:48 - 2015-01-28 23:54 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job 2015-08-15 21:08 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2015-08-15 21:07 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-08-15 21:07 - 2009-07-14 06:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-08-15 21:00 - 2014-10-02 23:11 - 00002886 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Sierotaa) 2015-08-15 20:59 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-08-13 03:05 - 2014-10-05 20:16 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2015-08-11 00:45 - 2014-08-17 21:41 - 00000000 ____D C:\Users\Sierotaa\AppData\Local\VirtualStore 2015-08-10 23:14 - 2015-02-28 23:51 - 00000000 ____D C:\Users\Sierotaa\AppData\Local\Apple Computer 2015-08-06 16:04 - 2014-08-20 11:29 - 00003878 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1408306031 2015-08-06 16:04 - 2014-08-17 22:07 - 00000000 ____D C:\Program Files (x86)\Opera 2015-08-05 18:37 - 2014-08-17 22:00 - 00000000 ____D C:\Program Files\Fujitsu 2015-08-05 18:33 - 2014-09-21 01:21 - 00000000 ____D C:\Users\Sierotaa\AppData\Roaming\TeamViewer 2015-08-05 18:33 - 2014-09-18 17:38 - 00000000 ____D C:\Users\Sierotaa\AppData\Roaming\DAEMON Tools Lite 2015-08-05 18:33 - 2014-08-18 07:34 - 00000000 ____D C:\Windows\panther 2015-08-05 18:33 - 2014-08-17 23:36 - 00000000 ____D C:\Users\Sierotaa\AppData\Roaming\AIMP3 2015-08-05 18:32 - 2015-02-24 21:42 - 00001424 _____ C:\ProgramData\lxdx.log 2015-08-05 16:50 - 2014-08-17 23:21 - 00000000 ____D C:\ProgramData\AVAST Software 2015-07-30 00:45 - 2015-02-11 01:05 - 00000000 ____D C:\Users\Sierotaa\Desktop\RS 2015-07-25 12:42 - 2014-10-29 19:02 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-07-24 16:16 - 2015-01-15 16:17 - 00000000 ____D C:\Windows\system32\log 2015-07-24 16:11 - 2014-08-17 22:50 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-24 16:09 - 2014-12-25 21:52 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-24 15:58 - 2014-10-05 20:15 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-07-24 15:58 - 2014-10-05 20:15 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore ==================== Files in the root of some directories ======= 2015-02-24 21:42 - 2015-08-05 18:32 - 0001424 _____ () C:\ProgramData\lxdx.log ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-08-12 01:08 ==================== End of log ============================