Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-02-2016 Ran by Joaś (administrator) on JOAŚ-PC (15-02-2016 20:28:21) Running from C:\Users\Joaś\Desktop Loaded Profiles: Joaś (Available Profiles: Joaś) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) C:\Program Files\Brother\Brother Help\BrotherHelp.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe (Nico Mak Computing) C:\Program Files\WinZip\FAHWindow32.exe (Nico Mak Computing) C:\Program Files\WinZip\WZUpdateNotifier.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe (Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe (Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1793736 2015-02-23] (NVIDIA Corporation) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.) HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.) HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation) HKU\S-1-5-21-791334374-3235565449-2318507296-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6453528 2015-07-17] (Piriform Ltd) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FAH.lnk [2015-11-19] ShortcutTarget: FAH.lnk -> C:\Program Files\WinZip\FAHConsole.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Update Notifier.lnk [2015-11-19] ShortcutTarget: Update Notifier.lnk -> C:\Program Files\WinZip\WZUpdateNotifier.exe (Nico Mak Computing) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2015-11-19] ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (WinZip Computing, S.L.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.254 192.168.1.254 Tcpip\..\Interfaces\{70AFD5D5-A181-4883-BF5E-C3BB4C895B2A}: [DhcpNameServer] 192.168.2.254 192.168.1.254 Internet Explorer: ================== HKU\S-1-5-21-791334374-3235565449-2318507296-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=pl-pl URLSearchHook: HKLM -> Default = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-02-05] (Oracle Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2016-02-07] (AO Kaspersky Lab) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-02-05] (Oracle Corporation) Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2016-02-07] (AO Kaspersky Lab) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Joaś\AppData\Roaming\Mozilla\Firefox\Profiles\il8n0zgr.default FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: hxxps://www.google.com/search/?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Bing FF Homepage: hxxp://www.google.pl FF Keyword.URL: hxxp://www.bing.com/search?FORM=SL5MDF&PC=SL5M&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-09] () FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-02-05] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-02-05] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Joaś\AppData\Roaming\Mozilla\Firefox\Profiles\il8n0zgr.default\searchplugins\bing-.xml [2015-08-25] FF SearchPlugin: C:\Users\Joaś\AppData\Roaming\Mozilla\Firefox\Profiles\il8n0zgr.default\searchplugins\google-avast.xml [2015-08-11] FF Extension: Bing Search - C:\Users\Joaś\AppData\Roaming\Mozilla\Firefox\Profiles\il8n0zgr.default\Extensions\bingsearch.full@microsoft.com [2015-08-22] [not signed] FF Extension: Skype - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06] FF HKLM\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox FF Extension: Kaspersky Protection - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-02-07] Chrome: ======= CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=pl-pl CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms} CHR DefaultSearchKeyword: Default -> bing.com CHR Profile: C:\Users\Joaś\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\Joaś\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-11] CHR Extension: (Kaspersky Protection) - C:\Users\Joaś\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-02-07] CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\Joaś\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-11] CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] CHR HKU\S-1-5-21-791334374-3235565449-2318507296-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP16.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-09-07] (Kaspersky Lab ZAO) R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [File not signed] R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [784256 2016-02-14] (Enigma Software Group USA, LLC.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [201912 2015-07-06] (Kaspersky Lab ZAO) R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [16432 2016-02-14] (Enigma Software Group USA, LLC.) S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [19984 2016-02-14] () R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [153784 2015-06-22] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [46776 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [58224 2015-06-27] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [58040 2015-06-06] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [147328 2016-02-07] (AO Kaspersky Lab) R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [44728 2016-02-07] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [783744 2016-02-07] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [33976 2015-06-11] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [37048 2015-06-06] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [38072 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [39304 2016-02-07] (AO Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54328 2015-06-11] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [87736 2015-06-16] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [156856 2015-06-23] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes) S3 MBAMSwissArmy; C:\Windows\system32\drivers\677B364F.sys [170200 2016-02-14] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation) U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] U3 kxldypog; \??\C:\Users\JOA~1\AppData\Local\Temp\kxldypog.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-02-15 20:28 - 2016-02-15 20:28 - 00013672 _____ C:\Users\Joaś\Desktop\FRST.txt 2016-02-15 20:18 - 2016-02-15 20:28 - 00000000 ____D C:\FRST 2016-02-15 20:15 - 2016-02-15 20:15 - 01721344 _____ (Farbar) C:\Users\Joaś\Downloads\FRST (1).exe 2016-02-15 20:15 - 2016-02-15 20:15 - 01721344 _____ (Farbar) C:\Users\Joaś\Desktop\FRST.exe 2016-02-15 20:09 - 2016-02-15 20:09 - 00035566 _____ C:\Users\Joaś\Desktop\gmer.txt 2016-02-15 18:27 - 2016-02-15 18:27 - 00176424 _____ C:\Windows\Minidump\021516-17394-01.dmp 2016-02-15 18:15 - 2016-02-15 18:15 - 00380416 _____ C:\Users\Joaś\Desktop\9c7yx80c.exe 2016-02-15 18:14 - 2016-02-15 18:14 - 00380416 _____ C:\Users\Joaś\Downloads\f846c2yd.exe 2016-02-15 18:13 - 2016-02-15 18:14 - 00380416 _____ C:\Users\Joaś\Downloads\c3n0w4mm.exe 2016-02-14 23:17 - 2016-02-14 23:17 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\677B364F.sys 2016-02-14 23:15 - 2016-02-14 23:16 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\1759349C.sys 2016-02-14 23:14 - 2016-02-14 23:14 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\746333AB.sys 2016-02-14 21:25 - 2016-02-14 21:25 - 00001240 _____ C:\Users\Joaś\Desktop\SpyHunter.lnk 2016-02-14 21:25 - 2016-02-14 21:25 - 00000000 ____D C:\Users\Joaś\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2016-02-14 21:25 - 2016-02-14 21:25 - 00000000 ____D C:\Users\Joaś\AppData\Roaming\Enigma Software Group 2016-02-14 21:23 - 2016-02-14 21:24 - 00000000 ____D C:\sh4ldr 2016-02-14 21:17 - 2016-02-14 21:17 - 00019984 _____ C:\Windows\system32\Drivers\EsgScanner.sys 2016-02-14 21:16 - 2016-02-14 21:16 - 00000000 ____D C:\Program Files\Enigma Software Group 2016-02-14 21:15 - 2016-02-14 21:16 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Joaś\Downloads\SpyHunter-Installer.exe 2016-02-09 23:05 - 2016-02-12 18:36 - 00000000 ____D C:\Program Files\Mozilla Firefox 2016-02-09 20:51 - 2016-02-09 21:03 - 00000000 ____D C:\Users\Joaś\Desktop\pliki Asi 2016-02-09 19:45 - 2016-02-09 20:05 - 00000000 ____D C:\Users\Joaś\Desktop\Nowy folder (2) 2016-02-08 20:42 - 2016-02-15 18:27 - 325975477 _____ C:\Windows\MEMORY.DMP 2016-02-08 20:42 - 2016-02-08 20:42 - 00400280 _____ C:\Windows\Minidump\020816-32245-01.dmp 2016-02-07 18:41 - 2016-02-07 18:41 - 00109280 _____ C:\Users\Joaś\AppData\Local\GDIPFONTCACHEV1.DAT 2016-02-07 18:41 - 2016-02-07 18:41 - 00002374 _____ C:\Users\Joaś\Desktop\Bezpieczne pieniądze.lnk 2016-02-07 18:38 - 2016-02-07 18:38 - 00002110 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2016-02-07 18:38 - 2016-02-07 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2016-02-07 18:37 - 2016-02-15 20:17 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2016-02-07 18:37 - 2016-02-07 18:37 - 00000000 ____D C:\Windows\ELAMBKUP 2016-02-07 18:37 - 2016-02-07 18:37 - 00000000 ____D C:\Program Files\Kaspersky Lab 2016-02-07 18:36 - 2016-02-07 19:02 - 00783744 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2016-02-07 18:36 - 2016-02-07 19:02 - 00147328 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2016-02-06 09:11 - 2016-02-06 09:11 - 00409688 _____ C:\Windows\system32\FNTCACHE.DAT 2016-02-05 21:19 - 2016-02-05 21:45 - 173141720 _____ (Kaspersky Lab) C:\Users\Joaś\Desktop\kis16.0.0.614pl-pl.exe 2016-02-05 19:33 - 2016-02-05 19:33 - 00000000 ____D C:\Users\Joaś\AppData\Roaming\Sun 2016-02-05 19:33 - 2016-02-05 19:33 - 00000000 ____D C:\Users\Joaś\.oracle_jre_usage 2016-02-05 19:33 - 2016-02-05 19:33 - 00000000 ____D C:\Program Files\Common Files\Java 2016-02-05 19:28 - 2016-02-05 19:28 - 00643680 _____ (Oracle Corporation) C:\Users\Joaś\Downloads\jxpiinstall.exe 2016-02-05 19:28 - 2016-02-05 19:28 - 00000000 ____D C:\Users\Joaś\AppData\LocalLow\Oracle 2016-02-05 19:26 - 2016-02-05 19:26 - 00643168 _____ (Oracle Corporation) C:\Users\Joaś\Downloads\chromeinstall-8u71 (1).exe 2016-02-03 20:29 - 2016-02-03 20:29 - 00643168 _____ (Oracle Corporation) C:\Users\Joaś\Downloads\chromeinstall-8u71.exe 2016-01-31 22:23 - 2016-01-31 22:23 - 00684054 _____ C:\Users\Joaś\Desktop\pieczątki FFP20160131.pdf 2016-01-29 15:35 - 2016-01-29 16:21 - 00000000 ____D C:\Users\Joaś\Desktop\FFPfaktury 2016-01-18 20:19 - 2016-02-15 18:27 - 00000000 ____D C:\Windows\Minidump ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-02-15 20:27 - 2009-07-14 05:34 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-02-15 20:27 - 2009-07-14 05:34 - 00016640 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-02-15 20:05 - 2015-06-23 15:54 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-02-15 19:33 - 2015-06-22 17:11 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-15 18:27 - 2015-06-22 17:11 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-15 18:27 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-02-15 18:04 - 2015-06-23 12:06 - 00697912 _____ C:\Windows\system32\perfh015.dat 2016-02-15 18:04 - 2015-06-23 12:06 - 00134990 _____ C:\Windows\system32\perfc015.dat 2016-02-15 18:04 - 2010-11-20 22:01 - 01549696 _____ C:\Windows\system32\PerfStringBackup.INI 2016-02-15 18:04 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf 2016-02-14 23:15 - 2015-08-11 18:46 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-02-14 23:15 - 2015-08-11 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-02-14 23:15 - 2015-08-11 18:46 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware 2016-02-12 18:36 - 2015-06-22 18:00 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2016-02-10 20:38 - 2015-06-22 17:16 - 00002164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-09 22:06 - 2015-06-23 15:53 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2016-02-09 22:06 - 2015-06-23 15:53 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2016-02-07 19:58 - 2015-08-11 18:46 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-02-07 19:02 - 2015-06-08 19:43 - 00039304 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys 2016-02-07 18:46 - 2015-07-04 02:18 - 00044728 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2016-02-07 18:38 - 2015-09-21 19:20 - 00000000 ____D C:\Users\Joa� 2016-02-07 18:34 - 2015-08-11 15:10 - 00000000 ____D C:\ProgramData\AVAST Software 2016-02-05 19:33 - 2015-06-28 20:45 - 00000000 ____D C:\ProgramData\Oracle 2016-02-05 19:33 - 2015-06-22 15:52 - 00000000 ____D C:\Users\Joaś 2016-02-05 19:32 - 2015-06-28 20:45 - 00095840 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2016-02-05 19:32 - 2015-06-28 20:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-02-05 19:32 - 2015-06-28 20:45 - 00000000 ____D C:\Program Files\Java 2016-02-04 18:10 - 2016-01-10 16:51 - 00000000 ____D C:\Users\Joaś\Desktop\Nowy folder 2016-01-31 22:40 - 2015-06-27 14:24 - 00004840 _____ C:\Windows\BRRBCOM.INI 2016-01-30 23:22 - 2015-06-28 20:32 - 00000000 ____D C:\Users\Joaś\AppData\Roaming\Skype 2016-01-29 15:55 - 2015-11-18 22:14 - 00000000 ____D C:\Users\Joaś\Desktop\segr Some files in TEMP: ==================== C:\Users\Joaś\AppData\Local\Temp\jre-8u73-windows-au.exe ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-01-21 22:05 ==================== End of FRST.txt ============================