Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05 Ran by FOD (administrator) on FOD-KOMPUTER on 19-12-2013 10:23:40 Running from C:\Users\FOD\Downloads Windows 7 Professional Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe () C:\Program Files (x86)\Przyspiesz Komputer\PCSUService.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Just Develop It) C:\Program Files (x86)\MyPC Backup\BackupStack.exe (Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\TimeMgmtDaemon.exe (ClickMeIn Limited) C:\Program Files (x86)\VuuPC\Connectivity.exe (ClickMeIn Limited) C:\Program Files (x86)\VuuPC\RemoteEngine.exe (Gigabyte Technology CO.) C:\Program Files\GIGABYTE\SMART6\Recovery\RPMDaemon.exe () C:\Users\FOD\AppData\Local\tuto4pc_pl_17\upt4pc_pl_17.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Yontoo LLC) C:\Users\FOD\AppData\Roaming\Yontoo\YontooDesktop.exe () C:\Users\FOD\Qtrax\Player\Notification.exe (MyPCBackup.com) C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Gigabyte Technology CO., LTD.) C:\Program Files (x86)\GIGABYTE\smart6\timelock\AlarmClock.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe (ClickMeIn Limited) C:\Program Files (x86)\VuuPC\RemoteEngineHelper.exe (ClickMeIn Limited) C:\Program Files (x86)\VuuPC\RemoteEngineHelper.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11772520 2011-01-04] (Realtek Semiconductor) HKLM\...\RunOnce: [RPMKickstart] - C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe [2552320 2010-08-23] (Gigabyte Technology CO., LTD.) HKLM-x32\...\RunOnce: [upt4pc_pl_17.exe] - C:\Users\FOD\AppData\Local\tuto4pc_pl_17\upt4pc_pl_17.exe -runonce [3154416 2013-08-26] () HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-01-11] (Google Inc.) HKCU\...\Run: [Google Update] - C:\Users\FOD\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-01-11] (Google Inc.) HKCU\...\Run: [Yontoo Desktop] - C:\Users\FOD\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-01-31] (Yontoo LLC) HKCU\...\Run: [PCSpeedUp] - C:\Program Files (x86)\Przyspiesz Komputer\PCSUNotifier.exe [259888 2013-05-23] () HKCU\...\Run: [QtraxNotification] - C:\Users\FOD\Qtrax\Player\Notification.exe [118568 2013-07-30] () MountPoints2: F - F:\laucher.exe HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-09-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-10-04] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\avastui.exe [3567800 2013-10-24] (AVAST Software) HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\9a92f151-ccdb-4550-937d-4643615c204e.exe [180184 2013-11-25] (AVAST Software) AppInit_DLLs-x32: c:\progra~3\bitguard\261694~1.246\{c16c1~1\bitguard.dll [ ] () Startup: C:\Users\FOD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk ShortcutTarget: MyPC Backup.lnk -> C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) Startup: C:\Users\FOD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=3ECE50E5493C72E6&affID=119357&tt=180613_ndtc&tsp=4919 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?babsrc=HP_ss_wls&mntrId=3ECE50E5493C72E6&affID=125034&tsp=5032 SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={DA375A44-74BD-4BB4-8ED6-1AED8DA86794} SearchScopes: HKLM-x32 - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CKCOtoDu47ECFYaEDgodOmgA7A&ptb=ADF357F2-C7C7-4C75-8024-7752B892308A&ind=2012081703&n=77edee27&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10005&barid={DA375A44-74BD-4BB4-8ED6-1AED8DA86794} SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3ECE50E5493C72E6&affID=120699&tsp=5032 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=3ECE50E5493C72E6&affID=120699&tsp=5032 SearchScopes: HKCU - {B141C441-159A-4D64-BC8D-DE9CBB3E1A91} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=&apn_ptnrs=^U3&apn_dtid=^YYYYYY^YY^PL&apn_uid=B355F912-CFBF-4F9E-900E-55B40591A659&apn_sauid=129A21FC-8240-476B-B1F5-1356B16A8092 SearchScopes: HKCU - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CKCOtoDu47ECFYaEDgodOmgA7A&ptb=ADF357F2-C7C7-4C75-8024-7752B892308A&ind=2012081703&n=77edee27&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={DA375A44-74BD-4BB4-8ED6-1AED8DA86794} BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: GBHO.BHO - {45d30484-7ded-43d9-957a-d2fd1f046511} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC) Toolbar: HKLM - Smart Recovery 2 - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\System32\mscoree.dll (Microsoft Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1 FireFox: ======== FF ProfilePath: C:\Users\FOD\AppData\Roaming\Mozilla\Firefox\Profiles\l6p7et65.default-1387442440635 FF Homepage: www.google.pl FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\FOD\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\FOD\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\RelevantKnowledge\firefox FF Extension: RelevantKnowledge - C:\Program Files (x86)\RelevantKnowledge\firefox FF HKCU\...\Firefox\Extensions: [{dde15e35-c9b3-4c30-b055-730c5f4a45d3}] - C:\Program Files (x86)\Lyrmix\133.xpi Chrome: ======= CHR HomePage: hxxp://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=3ECE50E5493C72E6&affID=119357&tt=180613_ndtc&tsp=4919 CHR RestoreOnStartup: "hxxp://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=3ECE50E5493C72E6&affID=119357&tt=180613_ndtc&tsp=4919", "hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=3ECE50E5493C72E6&affID=119357&tt=180613_ndtc&tsp=4919" CHR DefaultSearchKeyword: babylon.com CHR DefaultSearchProvider: Babylon CHR DefaultSearchURL: http://search.babylon.com/?q={searchTerms}&babsrc=SP_ss_din2g&mntrId=3ECE50E5493C72E6&affID=119357&tt=180613_ndtc&tsp=4919 CHR DefaultNewTabURL: CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\FOD\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\FOD\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Users\FOD\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File CHR Extension: (Ask Toolbar) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo\7.15.27.55142_0 CHR Extension: (Search-Gol Toolbar) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac\1.0_0 CHR Extension: (YouTube) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Delta Toolbar) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.6.2_0 CHR Extension: (avast! Online Security) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0 CHR Extension: (InfoBird Pro) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\icanoneicgaahjbilcgdmnhoocddknbl\3.0.0.0_0 CHR Extension: (SweetIM for Facebook) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0 CHR Extension: (Yontoo) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.3_0 CHR Extension: (Google Wallet) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (SweetPacks Chrome Extension) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_0 CHR Extension: (Gmail) - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 CHR HKLM\...\Chrome\Extension: [icanoneicgaahjbilcgdmnhoocddknbl] - C:\Users\FOD\AppData\Local\InfoBirdPro.crx CHR HKLM-x32\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\FOD\AppData\Roaming\BabSolution\CR\searchgol.crx CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\FOD\AppData\Roaming\BabSolution\CR\Delta.crx CHR HKLM-x32\...\Chrome\Extension: [icanoneicgaahjbilcgdmnhoocddknbl] - C:\Users\FOD\AppData\Local\InfoBirdPro.crx CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx CHR HKLM-x32\...\Chrome\Extension: [kidmhllhjmmmnpbiaihafgchacpmokof] - C:\Program Files (x86)\Lyrmix\133.crx CHR HKLM-x32\...\Chrome\Extension: [mkndcbhcgphcfkkddanakjiepeknbgle] - C:\Program Files (x86)\RelevantKnowledge\rlcm.crx CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\FOD\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx CHR StartMenuInternet: Google Chrome - C:\Users\FOD\AppData\Local\Google\Chrome\Application\chrome.exe CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-10-23] (AVAST Software) R2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [32808 2013-05-31] (Just Develop It) R2 PCSUService; C:\Program Files (x86)\Przyspiesz Komputer\PCSUService.exe [388912 2013-05-23] () R2 RemoteEngineService; C:\Program Files (x86)\VuuPC\remoteengine.exe [2967568 2013-12-14] (ClickMeIn Limited) R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [114688 2009-10-13] (Gigabyte Technology CO., LTD.) R2 VuuPCConnectivity; C:\Program Files (x86)\VuuPC\Connectivity.exe [4747280 2013-12-14] (ClickMeIn Limited) ==================== Drivers (Whitelisted) ==================== S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [296576 2012-06-06] (SafeNet Inc.) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-10-23] (AVAST Software) R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-10-23] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-10-23] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-10-23] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-10-23] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-12] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-10-23] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-10-23] () S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [119680 2009-08-10] (Gemalto) S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2012-08-17] () R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [321536 2011-09-28] (SafeNet Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-19 10:23 - 2013-12-19 10:23 - 00021026 _____ C:\Users\FOD\Downloads\FRST.txt 2013-12-19 10:22 - 2013-12-19 10:22 - 00000000 ____D C:\FRST 2013-12-19 10:20 - 2013-12-19 10:20 - 02192805 _____ (Farbar) C:\Users\FOD\Downloads\FRST64.exe 2013-12-19 09:40 - 2013-12-19 09:40 - 00006978 _____ C:\Users\FOD\Desktop\bookmarks-2013-12-19.json 2013-12-19 09:40 - 2013-12-19 09:40 - 00000000 ____D C:\Users\FOD\Desktop\Stare dane programu Firefox 2013-12-19 09:30 - 2013-12-19 09:30 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-18 12:27 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-18 12:24 - 2013-12-18 12:24 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-18 12:24 - 2013-12-18 12:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-18 12:24 - 2013-12-18 12:24 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-18 12:24 - 2013-12-18 12:24 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-18 12:24 - 2013-12-18 12:24 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-18 12:24 - 2013-12-18 12:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-18 12:24 - 2013-12-18 12:24 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-18 12:24 - 2013-12-18 12:24 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-18 12:24 - 2013-12-18 12:24 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-18 12:24 - 2013-12-18 12:24 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-18 12:24 - 2013-12-18 12:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-18 12:23 - 2013-12-18 12:27 - 00009961 _____ C:\Windows\IE11_main.log 2013-12-12 14:31 - 2013-12-12 14:32 - 13798021 _____ C:\Users\FOD\Downloads\2011-09-28_EMO_videoE_01.wmv 2013-12-12 14:25 - 2013-12-12 14:25 - 00000000 ____D C:\Users\FOD\Downloads\Narzędzia 2013-12-11 14:34 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-11 14:34 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-11 14:34 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-11 14:34 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-11 09:40 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 09:40 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 09:40 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 09:40 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 09:40 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 09:39 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 09:39 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 09:39 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 09:39 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 09:39 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 09:39 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 09:39 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 09:39 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 09:39 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 09:39 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 09:39 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 09:39 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 09:39 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 09:39 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-11-20 09:25 - 2013-12-11 14:17 - 00000000 ____D C:\Program Files (x86)\tuto4pc_pl_32 2013-11-20 09:25 - 2013-11-20 09:25 - 00000000 ____D C:\Users\FOD\AppData\Local\tuto4pc_pl_32 ==================== One Month Modified Files and Folders ======= 2013-12-19 10:23 - 2013-12-19 10:23 - 00021026 _____ C:\Users\FOD\Downloads\FRST.txt 2013-12-19 10:22 - 2013-12-19 10:22 - 00000000 ____D C:\FRST 2013-12-19 10:20 - 2013-12-19 10:20 - 02192805 _____ (Farbar) C:\Users\FOD\Downloads\FRST64.exe 2013-12-19 10:04 - 2013-06-20 10:04 - 00000278 _____ C:\Windows\Tasks\DSite.job 2013-12-19 10:02 - 2009-07-14 05:45 - 00022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-19 10:02 - 2009-07-14 05:45 - 00022096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-19 10:00 - 2012-01-11 13:31 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-19 10:00 - 2011-04-12 14:21 - 00697896 _____ C:\Windows\system32\perfh015.dat 2013-12-19 10:00 - 2011-04-12 14:21 - 00135006 _____ C:\Windows\system32\perfc015.dat 2013-12-19 10:00 - 2009-07-14 06:13 - 01549932 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-19 09:58 - 2013-10-11 08:26 - 00000000 ____D C:\Users\FOD\AppData\Local\tuto4pc_pl_17 2013-12-19 09:58 - 2012-01-02 14:05 - 02005764 _____ C:\Windows\WindowsUpdate.log 2013-12-19 09:55 - 2013-06-20 10:10 - 00000000 ____D C:\Program Files (x86)\Przyspiesz Komputer 2013-12-19 09:55 - 2013-02-04 14:03 - 00000000 ____D C:\Users\FOD\AppData\Roaming\Yontoo 2013-12-19 09:55 - 2012-01-02 14:39 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys 2013-12-19 09:54 - 2013-10-11 08:26 - 00000358 _____ C:\Windows\Tasks\Lyrmix Update.job 2013-12-19 09:54 - 2012-01-11 13:31 - 00001038 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-19 09:54 - 2010-11-21 04:47 - 00131788 _____ C:\Windows\PFRO.log 2013-12-19 09:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-19 09:54 - 2009-07-14 05:51 - 00079286 _____ C:\Windows\setupact.log 2013-12-19 09:40 - 2013-12-19 09:40 - 00006978 _____ C:\Users\FOD\Desktop\bookmarks-2013-12-19.json 2013-12-19 09:40 - 2013-12-19 09:40 - 00000000 ____D C:\Users\FOD\Desktop\Stare dane programu Firefox 2013-12-19 09:37 - 2013-06-20 10:10 - 00000368 _____ C:\Windows\Tasks\PC SpeedUp Service Deactivator.job 2013-12-19 09:34 - 2012-01-16 12:05 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2111863740-738112462-1760865691-1000UA.job 2013-12-19 09:30 - 2013-12-19 09:30 - 00000000 ____D C:\Windows\system32\appmgmt 2013-12-19 09:30 - 2012-01-11 13:31 - 00000000 ____D C:\Users\FOD\AppData\Local\Google 2013-12-19 09:29 - 2012-04-03 06:44 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-19 09:04 - 2013-07-29 09:04 - 00000114 _____ C:\Users\FOD\AppData\Roaming\WB.CFG 2013-12-19 09:04 - 2013-06-21 09:04 - 00000006 _____ C:\Users\FOD\AppData\Roaming\WBPU-TTL.DAT 2013-12-18 14:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-18 12:45 - 2012-01-02 14:05 - 00001421 _____ C:\Users\FOD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-18 12:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-18 12:27 - 2013-12-18 12:23 - 00009961 _____ C:\Windows\IE11_main.log 2013-12-18 12:24 - 2013-12-18 12:24 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-18 12:24 - 2013-12-18 12:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-18 12:24 - 2013-12-18 12:24 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-18 12:24 - 2013-12-18 12:24 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-18 12:24 - 2013-12-18 12:24 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-18 12:24 - 2013-12-18 12:24 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-18 12:24 - 2013-12-18 12:24 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-18 12:24 - 2013-12-18 12:24 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-18 12:24 - 2013-12-18 12:24 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-18 12:24 - 2013-12-18 12:24 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-18 12:24 - 2013-12-18 12:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-18 12:24 - 2013-12-18 12:24 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-18 12:24 - 2013-12-18 12:24 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-18 12:23 - 2013-08-14 13:48 - 00000000 ____D C:\Windows\system32\MRT 2013-12-18 12:21 - 2012-01-02 15:04 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-17 13:22 - 2013-10-11 08:25 - 00003306 _____ C:\Windows\System32\Tasks\VuuPCUpdate 2013-12-17 13:22 - 2013-10-11 08:25 - 00003120 _____ C:\Windows\System32\Tasks\VuuPCUpdateLogin 2013-12-17 13:22 - 2013-10-11 08:25 - 00000000 ____D C:\Program Files (x86)\VuuPC 2013-12-17 13:16 - 2012-07-12 12:46 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-12 15:21 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-12 14:32 - 2013-12-12 14:31 - 13798021 _____ C:\Users\FOD\Downloads\2011-09-28_EMO_videoE_01.wmv 2013-12-12 14:25 - 2013-12-12 14:25 - 00000000 ____D C:\Users\FOD\Downloads\Narzędzia 2013-12-12 11:53 - 2012-01-25 11:32 - 00000000 ____D C:\Users\FOD\Desktop\PROGRAMY NA VB4020 2013-12-12 07:33 - 2009-07-14 05:45 - 00417016 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-11 14:33 - 2012-01-03 14:29 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-11 14:17 - 2013-11-20 09:25 - 00000000 ____D C:\Program Files (x86)\tuto4pc_pl_32 2013-12-11 14:17 - 2013-10-11 08:26 - 00000000 ____D C:\Users\FOD\AppData\Local\eorezo 2013-12-11 10:29 - 2012-04-03 06:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-11 10:29 - 2012-04-03 06:44 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-11 10:29 - 2012-01-09 07:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 12:23 - 2012-02-16 13:30 - 00000000 ____D C:\Users\FOD\Documents\Pliki programu Outlook 2013-12-10 06:48 - 2012-01-16 12:05 - 00000998 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2111863740-738112462-1760865691-1000Core.job 2013-12-10 06:29 - 2012-01-16 12:05 - 00004016 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2111863740-738112462-1760865691-1000UA 2013-12-10 06:29 - 2012-01-16 12:05 - 00003620 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2111863740-738112462-1760865691-1000Core 2013-12-06 14:56 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini 2013-12-06 14:01 - 2012-01-16 12:07 - 00002364 _____ C:\Users\FOD\Desktop\Google Chrome.lnk 2013-12-04 08:55 - 2012-01-11 13:31 - 00004038 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-04 08:55 - 2012-01-11 13:31 - 00003786 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-11-23 19:26 - 2013-12-11 09:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-11-23 18:47 - 2013-12-11 09:40 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-11-21 14:42 - 2012-01-11 13:32 - 00000000 ____D C:\Users\FOD\AppData\Local\Adobe 2013-11-20 09:25 - 2013-11-20 09:25 - 00000000 ____D C:\Users\FOD\AppData\Local\tuto4pc_pl_32 2013-11-19 09:15 - 2012-08-30 05:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Some content of TEMP: ==================== C:\Users\FOD\AppData\Local\Temp\7za.exe C:\Users\FOD\AppData\Local\Temp\APNStub.exe C:\Users\FOD\AppData\Local\Temp\BackupSetup.exe C:\Users\FOD\AppData\Local\Temp\ezLooker-S-Setup_Suite1.exe C:\Users\FOD\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\FOD\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe C:\Users\FOD\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe C:\Users\FOD\AppData\Local\Temp\ICReinstall_nsvEF78.tmp.exe C:\Users\FOD\AppData\Local\Temp\ICReinstall_VideoConverterSetup.exe C:\Users\FOD\AppData\Local\Temp\ICReinstall_VuuPC_Setup.exe C:\Users\FOD\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\FOD\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\FOD\AppData\Local\Temp\mgsqlite3.dll C:\Users\FOD\AppData\Local\Temp\Notification.exe C:\Users\FOD\AppData\Local\Temp\nsf2BBD.tmp.exe C:\Users\FOD\AppData\Local\Temp\OptChrome.exe C:\Users\FOD\AppData\Local\Temp\QtraxNotification.exe C:\Users\FOD\AppData\Local\Temp\setup.exe C:\Users\FOD\AppData\Local\Temp\setup_fsu_cid.exe C:\Users\FOD\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe C:\Users\FOD\AppData\Local\Temp\Shortcut_InstallerSIM.exe C:\Users\FOD\AppData\Local\Temp\SIMEEI2Installer.exe C:\Users\FOD\AppData\Local\Temp\SIMEEIInstaller.exe C:\Users\FOD\AppData\Local\Temp\sqlite3.exe C:\Users\FOD\AppData\Local\Temp\vcredist_x64.exe C:\Users\FOD\AppData\Local\Temp\YontooIEClient.dll C:\Users\FOD\AppData\Local\Temp\YontooSetup-S.exe C:\Users\FOD\AppData\Local\Temp\_is400B.exe C:\Users\FOD\AppData\Local\Temp\{7DEB43BA-BBDD-4595-9B29-06D52FC35587}-25.0.1364.97_24.0.1312.57_chrome_updater.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-11 11:01 ==================== End Of Log ============================