Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01 Ran by Sony (administrator) on SONY-VAIO on 11-11-2013 16:21:34 Running from C:\Users\Sony\Desktop\diagnostyka Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe () C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe () C:\Windows\SysWOW64\srvany.exe () C:\Windows\KMService.exe (Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [6325936 2012-11-26] (ESET) HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Sony\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKCU\...\Run: [pwo6] - C:\Users\Sony\AppData\Roaming\pwo6\svchost.exe [7321417 2013-11-08] () HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://sony.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 192.168.1.20 Tcpip\..\Interfaces\{23AF5001-80D9-4C0F-81D6-A096F87C865B}: [NameServer]187.246.38.115,192.168.1.20 FireFox: ======== FF ProfilePath: C:\Users\Sony\AppData\Roaming\Mozilla\Firefox\Profiles\s3f1hagu.default FF Homepage: hxxp://google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Vividas player plugin - C:\Users\Sony\AppData\Roaming\Mozilla\Firefox\Profiles\s3f1hagu.default\Extensions\player@vividas.com FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] () R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-02] (Akamai Technologies, Inc.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) S3 Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [85096 2013-06-04] (Autodesk) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1329304 2012-11-26] (ESET) R2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2013-11-03] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2012-07-14] () R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [211344 2012-10-08] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [149592 2012-10-08] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [189208 2012-10-08] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [59440 2012-10-08] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [57904 2012-11-28] (ESET) S2 Kmm4xNT; No ImagePath R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2012-07-14] () R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-08-26] (Duplex Secure Ltd.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) U3 kxliipob; \??\C:\Users\Sony\AppData\Local\Temp\kxliipob.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-11 16:05 - 2013-11-11 16:05 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-11 16:05 - 2013-11-11 16:05 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-11 16:00 - 2013-04-04 09:55 - 00377856 _____ C:\Users\Sony\Desktop\gmer.exe 2013-11-11 15:57 - 2013-11-11 16:19 - 00000000 ____D C:\Users\Sony\Desktop\diagnostyka 2013-11-11 15:57 - 2013-11-11 15:57 - 00000000 ____D C:\ProgramData\Oracle 2013-11-11 15:57 - 2013-11-11 15:56 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-11 15:57 - 2013-11-11 15:56 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-11 15:57 - 2013-11-11 15:56 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-11 15:57 - 2013-11-11 15:56 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-11-11 15:43 - 2013-11-11 15:43 - 00000000 ___RD C:\Users\Sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-11-11 15:35 - 2013-11-11 15:42 - 00000000 ____D C:\AdwCleaner 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\FRST 2013-11-09 20:31 - 2013-11-09 20:31 - 00000000 ____D C:\Program Files (x86)\Ashampoo 2013-11-09 20:31 - 2009-08-24 22:13 - 00034304 _____ (mst software GmbH, Germany) C:\Windows\system32\DfSdkBt.exe 2013-11-09 20:24 - 2013-11-09 20:24 - 18333624 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Sony\Downloads\ashampoo_hdd_control_2_2.1.0_13968(dobreprogramy.pl).exe 2013-11-08 18:37 - 2013-11-08 18:37 - 00000000 ____D C:\Program Files (x86)\FinalWire 2013-11-08 18:35 - 2013-11-08 18:35 - 00007604 _____ C:\Users\Sony\AppData\Local\Resmon.ResmonCfg 2013-11-08 17:03 - 2013-11-11 15:43 - 00000000 ____D C:\Users\Sony\AppData\Roaming\pwo6 2013-11-03 18:23 - 2013-11-03 18:23 - 00151552 _____ C:\Windows\KMService.exe 2013-11-03 18:23 - 2013-11-03 18:23 - 00008192 _____ C:\Windows\SysWOW64\srvany.exe 2013-11-02 11:51 - 2013-11-02 11:51 - 00000000 ____D C:\kurs 2013-10-30 13:58 - 2013-10-30 15:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 20:15 - 2013-10-28 20:15 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-28 20:13 - 2013-10-28 20:15 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-28 20:13 - 2013-10-28 20:14 - 00000000 ____D C:\Program Files\iTunes 2013-10-28 20:13 - 2013-10-28 20:14 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-28 20:13 - 2013-10-28 20:13 - 00000000 ____D C:\Program Files\iPod ==================== One Month Modified Files and Folders ======= 2060-08-18 19:02 - 2012-11-30 10:48 - 02023424 ____N (Inprise Corporation) C:\Windows\SysWOW64\VCL50.BPL 2060-08-18 19:02 - 2012-11-30 10:48 - 01496064 ____N (Inprise Corporation) C:\Windows\SysWOW64\CC3250MT.DLL 2060-08-18 19:02 - 2012-11-30 10:48 - 00248832 ____N (Inprise Corporation) C:\Windows\SysWOW64\VCLX50.BPL 2060-08-18 18:40 - 2012-11-30 10:48 - 00909824 ____N (Inprise Corporation) C:\Windows\SysWOW64\cp3245mt.dll 2060-08-18 18:40 - 2012-11-30 10:48 - 00024064 ____N (Inprise Corporation) C:\Windows\SysWOW64\borlndmm.dll 2013-11-11 16:19 - 2013-11-11 15:57 - 00000000 ____D C:\Users\Sony\Desktop\diagnostyka 2013-11-11 16:11 - 2012-04-11 08:35 - 02012598 _____ C:\Windows\WindowsUpdate.log 2013-11-11 16:06 - 2012-04-13 08:03 - 00000000 ____D C:\Users\Sony\AppData\Local\Adobe 2013-11-11 16:05 - 2013-11-11 16:05 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-11-11 16:05 - 2013-11-11 16:05 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-11-11 16:05 - 2012-04-11 09:01 - 00000000 ____D C:\ProgramData\Adobe 2013-11-11 15:57 - 2013-11-11 15:57 - 00000000 ____D C:\ProgramData\Oracle 2013-11-11 15:56 - 2013-11-11 15:57 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2013-11-11 15:56 - 2013-11-11 15:57 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2013-11-11 15:56 - 2013-11-11 15:57 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2013-11-11 15:56 - 2013-11-11 15:57 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2013-11-11 15:56 - 2012-04-11 08:48 - 00000000 ____D C:\Program Files\Java 2013-11-11 15:50 - 2009-07-14 05:45 - 00021200 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-11 15:50 - 2009-07-14 05:45 - 00021200 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-11 15:43 - 2013-11-11 15:43 - 00000000 ___RD C:\Users\Sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-11-11 15:43 - 2013-11-08 17:03 - 00000000 ____D C:\Users\Sony\AppData\Roaming\pwo6 2013-11-11 15:42 - 2013-11-11 15:35 - 00000000 ____D C:\AdwCleaner 2013-11-11 15:42 - 2013-07-14 20:06 - 00017420 _____ C:\Windows\setupact.log 2013-11-11 15:42 - 2012-12-02 01:17 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-11 15:42 - 2012-04-11 08:44 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-11 15:42 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-11 15:40 - 2013-09-24 13:48 - 00005686 _____ C:\Windows\PFRO.log 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\FRST 2013-11-10 21:42 - 2012-04-11 08:37 - 00003966 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B17A4171-4A77-48FB-9FF1-B3735D865EEC} 2013-11-09 23:51 - 2013-01-17 19:25 - 00000000 ____D C:\Windows\Minidump 2013-11-09 20:36 - 2013-07-20 21:08 - 00001160 _____ C:\Users\Sony\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2013-11-09 20:31 - 2013-11-09 20:31 - 00000000 ____D C:\Program Files (x86)\Ashampoo 2013-11-09 20:24 - 2013-11-09 20:24 - 18333624 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Sony\Downloads\ashampoo_hdd_control_2_2.1.0_13968(dobreprogramy.pl).exe 2013-11-08 18:37 - 2013-11-08 18:37 - 00000000 ____D C:\Program Files (x86)\FinalWire 2013-11-08 18:35 - 2013-11-08 18:35 - 00007604 _____ C:\Users\Sony\AppData\Local\Resmon.ResmonCfg 2013-11-08 08:35 - 2012-04-12 12:46 - 00809542 _____ C:\test.xml 2013-11-03 18:23 - 2013-11-03 18:23 - 00151552 _____ C:\Windows\KMService.exe 2013-11-03 18:23 - 2013-11-03 18:23 - 00008192 _____ C:\Windows\SysWOW64\srvany.exe 2013-11-03 09:50 - 2011-02-14 21:50 - 00738290 _____ C:\Windows\system32\perfh015.dat 2013-11-03 09:50 - 2011-02-14 21:50 - 00154922 _____ C:\Windows\system32\perfc015.dat 2013-11-03 09:50 - 2009-07-14 06:13 - 01663756 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-03 09:13 - 2012-04-15 12:44 - 00000000 ____D C:\Users\Sony\AppData\Local\Thunderbird 2013-11-03 09:00 - 2012-04-11 08:34 - 00000000 ____D C:\Users\Sony 2013-11-02 11:51 - 2013-11-02 11:51 - 00000000 ____D C:\kurs 2013-10-30 17:16 - 2012-04-26 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-10-30 15:26 - 2013-10-30 13:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-10-28 20:15 - 2013-10-28 20:15 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-10-28 20:15 - 2013-10-28 20:13 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-10-28 20:14 - 2013-10-28 20:13 - 00000000 ____D C:\Program Files\iTunes 2013-10-28 20:14 - 2013-10-28 20:13 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-10-28 20:13 - 2013-10-28 20:13 - 00000000 ____D C:\Program Files\iPod 2013-10-20 15:37 - 2012-04-11 08:37 - 00000000 ____D C:\Users\Sony\Documents\Bluetooth Folder 2013-10-18 22:16 - 2012-07-14 12:07 - 00000000 ____D C:\Users\Sony\AppData\Roaming\Apple Computer 2013-10-18 22:09 - 2012-07-14 12:07 - 00000000 ____D C:\Users\Sony\AppData\Local\Apple Computer 2013-10-12 21:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-10 01:45 ==================== End Of Log ============================