Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 01 Ran by Renatka (administrator) on RENATA on 23-09-2014 15:19:19 Running from C:\Users\Renatka\Downloads Platform: Windows 8 (X64) OS Language: Polski (Polska) Internet Explorer Version 10 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe (Object Browser) C:\Program Files (x86)\Senses\eb1d300f-ab15-4910-bfc8-74bd8d84d566-6.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-20] (IDT, Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-30] (Synaptics Incorporated) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285832 2014-04-21] (Intel Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-24] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] => c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.) HKLM-x32\...\Run: [YouCam Mirage] => c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [136488 2012-08-31] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] => c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [167024 2012-08-31] (CyberLink Corp.) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software) HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-10-16] (Hewlett-Packard Company) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [683656 2013-06-05] (PDF Complete Inc) HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [371976 2012-09-19] (IVT Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM\...\RunOnce: [NCPluginUpdater] => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [21720 2014-08-19] (Hewlett-Packard) HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe, Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X] HKU\S-1-5-21-2027644790-2788516113-2572939219-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21646944 2014-07-24] (Skype Technologies S.A.) HKU\S-1-5-21-2027644790-2788516113-2572939219-1002\...\MountPoints2: {3746c5f8-f11f-11e3-be88-b4b52f8486a6} - "G:\WD Drive Unlock.exe" autoplay=true HKU\S-1-5-21-2027644790-2788516113-2572939219-1002\...\MountPoints2: {6120fa84-c2cb-11e3-be7f-9c2a7017ef4e} - "G:\HTC_Sync_Manager_PC.exe" HKU\S-1-5-21-2027644790-2788516113-2572939219-1002\...\MountPoints2: {7a5d84e5-ea53-11e3-be86-b4b52f8486a6} - "I:\HTC_Sync_Manager_PC.exe" HKU\S-1-5-21-2027644790-2788516113-2572939219-1002\...\MountPoints2: {ee152208-3d9b-11e4-be9c-b4b52f8486a6} - "G:\HTC_Sync_Manager_PC.exe" Lsa: [Notification Packages] DPPassFilter scecli Startup: C:\Users\Renatka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1411391917&from=smt&uid=HitachiXHTS547575A9E384_J1140021G1BNZJG1BNZJX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1411391917&from=smt&uid=HitachiXHTS547575A9E384_J1140021G1BNZJG1BNZJX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1411391917&from=smt&uid=HitachiXHTS547575A9E384_J1140021G1BNZJG1BNZJX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1411391917&from=smt&uid=HitachiXHTS547575A9E384_J1140021G1BNZJG1BNZJX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1411391917&from=smt&uid=HitachiXHTS547575A9E384_J1140021G1BNZJG1BNZJX SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS BHO: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar) BHO: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho64.dll (Object Browser) BHO: iWebar -> {11111111-1111-1111-1111-110611511123} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard) BHO-x32: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar) BHO-x32: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho.dll (Object Browser) BHO-x32: iWebar -> {11111111-1111-1111-1111-110611511123} -> C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\SKYPE4~1.DLL (Skype Technologies) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: digitalpersona.com/ChromeDPAgent -> c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll (DigitalPersona, Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-02-03] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-27] Chrome: ======= CHR Profile: C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-27] CHR Extension: (Google Drive) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-27] CHR Extension: (YouTube) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-27] CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-09-23] CHR Extension: (Adblock for Youtube) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\chcdmmijfmoaolnkhmikojenjkajejkj [2014-09-23] CHR Extension: (Google Search) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-27] CHR Extension: (AdBlock) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-23] CHR Extension: (avast! Online Security) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-27] CHR Extension: (DigitalPersona Extension) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab [2014-03-27] CHR Extension: (Cath Kidston) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndlpkmaeinmnbiadacenijnhlolneopm [2014-04-16] CHR Extension: (Google Wallet) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-27] CHR Extension: (Simple Adblock) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ockogkkjjhgjelcddamlnjcfnmiegjfg [2014-09-23] CHR Extension: (Gmail) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-27] CHR Profile: C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1 CHR Extension: (Google Slides) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-23] CHR Extension: (Google Docs) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-23] CHR Extension: (Google Drive) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-23] CHR Extension: (YouTube) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-23] CHR Extension: (Google Search) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-23] CHR Extension: (Google Sheets) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-23] CHR Extension: (avast! Online Security) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-23] CHR Extension: (Skype Click to Call) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-09-23] CHR Extension: (DigitalPersona Extension) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab [2014-09-23] CHR Extension: (Google Wallet) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-23] CHR Extension: (Gmail) - C:\Users\Renatka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-23] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-23] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2012-08-25] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] () R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-23] (AVAST Software) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1612552 2012-09-26] (IVT Corporation) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [146184 2012-09-19] (IVT Corporation) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [488824 2012-08-25] (DigitalPersona, Inc.) S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [477088 2012-08-01] (Hewlett-Packard Company) S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-23] (globalUpdate) [File not signed] S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-23] (globalUpdate) [File not signed] R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed] R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-10-16] (Hewlett-Packard Company) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-04-02] (Nero AG) R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-09-22] (Cherished Technololgy LIMITED) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2014-04-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2014-04-27] (Intel Corporation) R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation) S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed] R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1143432 2013-06-05] (PDF Complete Inc) R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2012-09-20] (IDT, Inc.) [File not signed] S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-23] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-23] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-23] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-23] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-23] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-23] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-23] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-23] () U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) U4 BthAvrcpTg; No ImagePath U4 BthHFEnum; No ImagePath U4 bthhfhid; No ImagePath S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48608 2012-10-02] (Ralink Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 DAMDrv; C:\Windows\system32\DRIVERS\DAMDrv64.sys [64832 2012-07-25] (Hewlett-Packard Company) S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwNe64.sys [11400192 2012-06-02] (Intel Corporation) R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-15] (Synaptics Incorporated) S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated) R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1864328 2012-10-04] () S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr)) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-06-27] (Hewlett-Packard Development Company, L.P.) R1 {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64; C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys [44624 2014-09-22] (StdLib) U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) S3 JMCR; \SystemRoot\System32\drivers\jmcr.sys [X] S3 rtbth; \SystemRoot\System32\drivers\rtbth.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-23 15:19 - 2014-09-23 15:19 - 00027490 _____ () C:\Users\Renatka\Downloads\FRST.txt 2014-09-23 15:18 - 2014-09-23 15:19 - 00000000 ____D () C:\FRST 2014-09-23 15:11 - 2014-09-23 15:11 - 02105856 _____ (Farbar) C:\Users\Renatka\Downloads\FRST64.exe 2014-09-23 15:01 - 2014-09-23 15:16 - 00020055 _____ () C:\Windows\WindowsUpdate.log 2014-09-23 15:00 - 2014-09-23 15:00 - 00021454 _____ () C:\Windows\PFRO.log 2014-09-23 11:14 - 2014-09-23 11:14 - 00895120 _____ (Google Inc.) C:\Users\Renatka\Downloads\ChromeSetup.exe 2014-09-23 10:59 - 2014-09-23 11:14 - 00002277 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-23 10:59 - 2014-09-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-09-23 10:58 - 2014-09-23 15:03 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-23 10:58 - 2014-09-23 15:01 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-23 10:58 - 2014-09-23 10:58 - 00004036 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-09-23 10:58 - 2014-09-23 10:58 - 00003800 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-09-23 10:49 - 2014-08-09 10:30 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-09-23 10:49 - 2014-08-09 10:29 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll 2014-09-23 10:45 - 2014-09-23 10:45 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-09-23 10:45 - 2014-09-23 10:45 - 00000788 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-09-23 10:45 - 2014-09-23 10:45 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-23 10:40 - 2014-09-23 15:01 - 00002778 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5_user.job 2014-09-23 10:40 - 2014-09-23 15:01 - 00002778 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5.job 2014-09-23 10:40 - 2014-09-23 15:01 - 00002434 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-2.job 2014-09-23 10:40 - 2014-09-23 14:54 - 00005784 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5 2014-09-23 10:40 - 2014-09-23 14:54 - 00005440 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-2 2014-09-23 10:39 - 2014-09-23 15:01 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-7.job 2014-09-23 10:39 - 2014-09-23 15:01 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-6.job 2014-09-23 10:39 - 2014-09-23 15:01 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-4.job 2014-09-23 10:39 - 2014-09-23 15:01 - 00003088 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-1.job 2014-09-23 10:39 - 2014-09-23 14:54 - 00007490 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-11 2014-09-23 10:39 - 2014-09-23 14:54 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-7 2014-09-23 10:39 - 2014-09-23 14:54 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-6 2014-09-23 10:39 - 2014-09-23 14:54 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-4 2014-09-23 10:39 - 2014-09-23 14:54 - 00006094 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-1 2014-09-23 10:38 - 2014-09-23 15:01 - 00004484 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-11.job 2014-09-23 02:05 - 2014-09-23 02:05 - 00004328 _____ () C:\Windows\System32\Tasks\Installer_shopperpro 2014-09-23 02:02 - 2014-09-23 02:02 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\IDT 2014-09-22 17:53 - 2014-09-23 15:01 - 00004146 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-4.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00003802 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-7.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00003802 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-6.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00003088 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-1.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00002778 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5_user.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00002778 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5.job 2014-09-22 17:53 - 2014-09-23 15:01 - 00002434 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-2.job 2014-09-22 17:53 - 2014-09-23 14:54 - 00007152 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-4 2014-09-22 17:53 - 2014-09-23 14:54 - 00006808 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-7 2014-09-22 17:53 - 2014-09-23 14:54 - 00006808 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-6 2014-09-22 17:53 - 2014-09-23 14:54 - 00006094 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-1 2014-09-22 17:53 - 2014-09-23 14:54 - 00005784 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5 2014-09-22 17:53 - 2014-09-23 14:54 - 00005440 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-2 2014-09-22 17:52 - 2014-09-23 15:01 - 00004484 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-11.job 2014-09-22 17:52 - 2014-09-23 14:54 - 00007490 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-11 2014-09-22 17:52 - 2014-09-23 10:40 - 00000000 ____D () C:\Program Files (x86)\iWebar 2014-09-22 15:50 - 2014-09-22 15:50 - 00000000 ____D () C:\ProgramData\374311380 2014-09-22 15:46 - 2014-09-22 15:46 - 00000000 ____D () C:\Users\Renatka\Documents\Optimizer Pro 2014-09-22 15:42 - 2014-09-22 15:42 - 03009826 _____ ( ) C:\Users\Renatka\Downloads\FFmpeg_v0.6.2_for_Audacity_on_Windows.exe 2014-09-22 15:36 - 2014-09-22 15:36 - 00188410 _____ () C:\Users\Renatka\Downloads\libmp3lame-win-3.98.2.zip 2014-09-22 15:35 - 2014-09-22 15:36 - 00526023 _____ ( ) C:\Users\Renatka\Downloads\Lame_v3.99.3_for_Windows.exe 2014-09-22 15:34 - 2014-09-23 15:02 - 00002778 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5_user.job 2014-09-22 15:34 - 2014-09-23 15:02 - 00002778 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5.job 2014-09-22 15:34 - 2014-09-23 15:02 - 00002434 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-2.job 2014-09-22 15:34 - 2014-09-23 02:17 - 00006092 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-1 2014-09-22 15:34 - 2014-09-23 02:17 - 00005782 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5 2014-09-22 15:34 - 2014-09-23 02:17 - 00005438 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-2 2014-09-22 15:33 - 2014-09-23 15:16 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-6.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00004828 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-11.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-7.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-4.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00003122 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-3.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00001356 _____ () C:\Windows\Tasks\IXXI.job 2014-09-22 15:33 - 2014-09-23 15:02 - 00001352 _____ () C:\Windows\Tasks\VH.job 2014-09-22 15:33 - 2014-09-23 15:01 - 00003088 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-1.job 2014-09-22 15:33 - 2014-09-23 15:01 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2014-09-22 15:33 - 2014-09-23 10:44 - 00000926 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2014-09-22 15:33 - 2014-09-23 10:39 - 00003898 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA 2014-09-22 15:33 - 2014-09-23 10:39 - 00003662 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore 2014-09-22 15:33 - 2014-09-23 02:17 - 01450392 _____ (Object Browser) C:\Users\Renatka\AppData\Roaming\VH.exe 2014-09-22 15:33 - 2014-09-23 02:17 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-4 2014-09-22 15:33 - 2014-09-23 02:17 - 00004358 _____ () C:\Windows\System32\Tasks\VH 2014-09-22 15:33 - 2014-09-23 02:16 - 01901464 _____ (Object Browser) C:\Users\Renatka\AppData\Roaming\IXXI.exe 2014-09-22 15:33 - 2014-09-23 02:16 - 00007832 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-11 2014-09-22 15:33 - 2014-09-23 02:16 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-7 2014-09-22 15:33 - 2014-09-23 02:16 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-6 2014-09-22 15:33 - 2014-09-23 02:16 - 00006126 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-3 2014-09-22 15:33 - 2014-09-23 02:16 - 00004362 _____ () C:\Windows\System32\Tasks\IXXI 2014-09-22 15:33 - 2014-09-22 15:34 - 00000000 ____D () C:\Program Files (x86)\Senses 2014-09-22 15:33 - 2014-09-22 15:33 - 00000000 ____D () C:\Users\Renatka\AppData\Local\globalUpdate 2014-09-22 15:33 - 2014-09-22 15:33 - 00000000 ____D () C:\Program Files (x86)\globalUpdate 2014-09-22 15:25 - 2014-09-22 02:29 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys 2014-09-22 15:21 - 2014-09-23 02:06 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator 2014-09-22 15:21 - 2014-09-22 15:21 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\SysWOW64\AniGIF.ocx 2014-09-22 15:21 - 2014-09-22 15:21 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-09-22 15:21 - 2014-09-22 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator 2014-09-22 15:20 - 2014-09-22 15:20 - 00000000 ____D () C:\Users\Renatka\AppData\Local\CrashRpt 2014-09-22 15:19 - 2014-09-23 15:00 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-09-22 15:19 - 2014-09-23 10:56 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2014-09-22 15:19 - 2014-09-22 15:19 - 00000000 ____D () C:\ProgramData\IePluginServices 2014-09-22 15:16 - 2014-09-22 15:16 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-09-22 15:08 - 2014-09-22 15:09 - 01578704 _____ (Koyote-Lab Inc) C:\Users\Renatka\Downloads\Niepotwierdzony 973133.crdownload 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Users\Renatka\Desktop\WSiP 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Users\Renatka\Desktop\Piosenki z MACA KL I 2014-09-22 14:55 - 2014-09-22 15:44 - 00000000 ____D () C:\Users\Renatka\Desktop\Ślubowanie 2014-09-22 14:48 - 2014-09-22 15:44 - 00000000 ____D () C:\Users\Renatka\Desktop\Muzyka 2014-09-22 14:47 - 2014-09-22 15:43 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Audacity 2014-09-22 14:47 - 2014-09-22 14:47 - 00001035 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2014-09-22 14:47 - 2014-09-22 14:47 - 00001023 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-09-22 14:47 - 2014-09-22 14:47 - 00000000 ____D () C:\Program Files (x86)\Audacity 2014-09-22 14:46 - 2014-09-22 14:46 - 00000000 ____D () C:\Users\Renatka\AppData\Local\Nero 2014-09-22 14:44 - 2014-09-22 14:45 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Nero 2014-09-22 14:44 - 2014-09-22 14:44 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-09-22 14:42 - 2014-09-22 14:42 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2015.lnk 2014-09-22 14:41 - 2014-09-22 14:44 - 00000000 ____D () C:\ProgramData\Nero 2014-09-22 14:41 - 2014-09-22 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2014-09-22 14:41 - 2014-09-22 14:42 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-09-22 14:40 - 2014-09-22 14:40 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-22 14:30 - 2014-09-22 15:27 - 00000000 ____D () C:\Program Files (x86)\NCH Software 2014-09-22 14:30 - 2014-09-22 14:48 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software 2014-09-22 14:30 - 2014-09-22 14:30 - 00000000 ____D () C:\ProgramData\NCH Software 2014-09-21 12:33 - 2014-09-21 12:33 - 00000162 ____H () C:\Users\Renatka\Desktop\~$ZUTA - Legenda - Szkoło, jak się masz.htm 2014-09-21 12:05 - 2014-09-21 12:05 - 00752808 _____ () C:\Users\Renatka\Downloads\02 ślubowanie pierwszaków.wma 2014-09-20 12:30 - 2014-09-20 12:30 - 00076756 _____ () C:\Users\Renatka\Desktop\embargo.jpeg 2014-09-20 07:50 - 2014-09-20 07:50 - 00252928 _____ () C:\Users\Renatka\Downloads\ZLZ.Malopolska.xls 2014-09-18 13:42 - 2014-09-23 10:57 - 00000000 ____D () C:\Users\Renatka\Desktop\belka 2014-09-18 06:24 - 2014-09-18 06:24 - 01897984 _____ () C:\Users\Renatka\Downloads\Prawa Dziecka.ppt 2014-09-14 12:35 - 2014-09-14 12:35 - 01401588 _____ () C:\Users\Renatka\Downloads\jestem uczniem.wma 2014-09-14 11:28 - 2014-09-22 14:35 - 00000000 ____D () C:\Users\Renatka\Desktop\Piosenki z Nowej Ery 2014-09-13 06:29 - 2014-09-13 06:29 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (3).wma 2014-09-13 06:28 - 2014-09-13 06:29 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (2).wma 2014-09-13 06:25 - 2014-09-13 06:25 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa.wma 2014-09-13 06:25 - 2014-09-13 06:25 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (1).wma 2014-09-10 08:49 - 2014-08-16 11:34 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-10 08:49 - 2014-08-16 11:34 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-10 08:49 - 2014-08-16 11:34 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-09-10 08:49 - 2014-08-16 11:34 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-10 08:49 - 2014-08-16 11:33 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-10 08:49 - 2014-08-16 11:33 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-10 08:49 - 2014-08-16 11:32 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-10 08:49 - 2014-08-16 11:32 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-10 08:49 - 2014-08-16 09:37 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-10 08:49 - 2014-08-16 09:37 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 13757440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-10 08:49 - 2014-08-16 09:36 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-10 08:49 - 2014-08-16 09:35 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-10 08:49 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-10 08:49 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-09-10 08:49 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-09-10 08:49 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-10 08:49 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-10 08:49 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-09-10 08:49 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-10 08:49 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-10 08:49 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-10 08:49 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-09-10 08:49 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-10 08:49 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-09-10 08:49 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-10 08:49 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-10 08:49 - 2012-07-26 05:06 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-10 08:48 - 2014-08-16 11:33 - 19280384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-10 08:48 - 2014-08-16 09:36 - 14369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-10 08:46 - 2014-08-28 13:34 - 00059400 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-09-10 08:46 - 2014-08-28 08:05 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-09-10 08:46 - 2014-08-28 08:05 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-09-10 08:46 - 2014-08-28 08:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-09-10 08:46 - 2014-08-28 08:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-09-10 08:46 - 2014-08-28 08:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-09-10 08:46 - 2014-08-28 08:01 - 03285504 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 01623552 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-09-10 08:46 - 2014-08-28 08:01 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll 2014-09-10 08:46 - 2014-08-01 01:40 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-09-10 08:46 - 2014-06-05 03:12 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll 2014-09-10 08:46 - 2014-06-04 01:12 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll 2014-09-10 08:45 - 2014-09-05 00:36 - 00755712 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 08:45 - 2014-09-03 03:49 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-10 08:45 - 2014-07-24 05:33 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2014-09-10 08:45 - 2014-07-24 05:33 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2014-09-07 20:26 - 2014-09-07 20:27 - 11803437 _____ () C:\Users\Renatka\Downloads\Emocje - uczucia - 14 plików.7z 2014-09-07 20:26 - 2014-09-07 20:26 - 11341899 _____ () C:\Users\Renatka\Downloads\Emocje - uczucia3 - 18 plików.7z 2014-09-07 20:01 - 2014-09-07 20:01 - 01843812 _____ () C:\Users\Renatka\Downloads\w Literkowie.wma 2014-09-04 18:15 - 2014-09-04 18:19 - 241541156 _____ () C:\Users\Renatka\Downloads\multibook_naszelementarz_cz1.exe 2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Renatka\AppData\Roaming\VH 2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Renatka\AppData\Roaming\IXXI 2014-08-31 11:13 - 2014-08-31 11:14 - 111725634 _____ () C:\Users\Renatka\Downloads\2012 - Łąki Łan - Armanda.zip 2014-08-28 14:18 - 2014-08-23 08:47 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-23 15:19 - 2014-09-23 15:19 - 00027490 _____ () C:\Users\Renatka\Downloads\FRST.txt 2014-09-23 15:19 - 2014-09-23 15:18 - 00000000 ____D () C:\FRST 2014-09-23 15:19 - 2014-06-14 11:57 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Skype 2014-09-23 15:16 - 2014-09-23 15:01 - 00020055 _____ () C:\Windows\WindowsUpdate.log 2014-09-23 15:16 - 2014-09-22 15:33 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-6.job 2014-09-23 15:11 - 2014-09-23 15:11 - 02105856 _____ (Farbar) C:\Users\Renatka\Downloads\FRST64.exe 2014-09-23 15:08 - 2012-11-21 20:31 - 00828664 _____ () C:\Windows\system32\perfh015.dat 2014-09-23 15:08 - 2012-11-21 20:31 - 00176570 _____ () C:\Windows\system32\perfc015.dat 2014-09-23 15:08 - 2012-11-21 20:26 - 00765430 _____ () C:\Windows\system32\perfh00E.dat 2014-09-23 15:08 - 2012-11-21 20:26 - 00192190 _____ () C:\Windows\system32\perfc00E.dat 2014-09-23 15:08 - 2012-11-21 20:22 - 00579782 _____ () C:\Windows\system32\perfh008.dat 2014-09-23 15:08 - 2012-11-21 20:22 - 00106026 _____ () C:\Windows\system32\perfc008.dat 2014-09-23 15:08 - 2012-11-21 20:17 - 00733412 _____ () C:\Windows\system32\perfh01F.dat 2014-09-23 15:08 - 2012-11-21 20:17 - 00161288 _____ () C:\Windows\system32\perfc01F.dat 2014-09-23 15:08 - 2012-07-26 09:28 - 04477082 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-23 15:07 - 2014-03-27 18:23 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2027644790-2788516113-2572939219-1002 2014-09-23 15:04 - 2014-03-27 21:36 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-09-23 15:03 - 2014-09-23 10:58 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-23 15:02 - 2014-09-22 15:34 - 00002778 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5_user.job 2014-09-23 15:02 - 2014-09-22 15:34 - 00002778 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5.job 2014-09-23 15:02 - 2014-09-22 15:34 - 00002434 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-2.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00004828 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-11.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-7.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00003802 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-4.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00003122 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-3.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00001356 _____ () C:\Windows\Tasks\IXXI.job 2014-09-23 15:02 - 2014-09-22 15:33 - 00001352 _____ () C:\Windows\Tasks\VH.job 2014-09-23 15:02 - 2014-06-06 10:55 - 00000000 ____D () C:\Users\Renatka\AppData\Local\HTC MediaHub 2014-09-23 15:02 - 2014-04-17 17:59 - 01694720 ___SH () C:\Users\Renatka\Desktop\Thumbs.db 2014-09-23 15:02 - 2012-11-21 19:52 - 00000000 ____D () C:\ProgramData\PDFC 2014-09-23 15:01 - 2014-09-23 10:58 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-23 15:01 - 2014-09-23 10:40 - 00002778 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5_user.job 2014-09-23 15:01 - 2014-09-23 10:40 - 00002778 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5.job 2014-09-23 15:01 - 2014-09-23 10:40 - 00002434 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-2.job 2014-09-23 15:01 - 2014-09-23 10:39 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-7.job 2014-09-23 15:01 - 2014-09-23 10:39 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-6.job 2014-09-23 15:01 - 2014-09-23 10:39 - 00003802 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-4.job 2014-09-23 15:01 - 2014-09-23 10:39 - 00003088 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-1.job 2014-09-23 15:01 - 2014-09-23 10:38 - 00004484 _____ () C:\Windows\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-11.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00004146 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-4.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00003802 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-7.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00003802 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-6.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00003088 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-1.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00002778 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5_user.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00002778 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5.job 2014-09-23 15:01 - 2014-09-22 17:53 - 00002434 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-2.job 2014-09-23 15:01 - 2014-09-22 17:52 - 00004484 _____ () C:\Windows\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-11.job 2014-09-23 15:01 - 2014-09-22 15:33 - 00003088 _____ () C:\Windows\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-1.job 2014-09-23 15:01 - 2014-09-22 15:33 - 00000922 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2014-09-23 15:01 - 2012-09-26 09:53 - 00000950 _____ () C:\Windows\SysWOW64\bscs.ini 2014-09-23 15:01 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-23 15:00 - 2014-09-23 15:00 - 00021454 _____ () C:\Windows\PFRO.log 2014-09-23 15:00 - 2014-09-22 15:19 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-09-23 15:00 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-09-23 14:54 - 2014-09-23 10:40 - 00005784 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-5 2014-09-23 14:54 - 2014-09-23 10:40 - 00005440 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-2 2014-09-23 14:54 - 2014-09-23 10:39 - 00007490 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-11 2014-09-23 14:54 - 2014-09-23 10:39 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-7 2014-09-23 14:54 - 2014-09-23 10:39 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-6 2014-09-23 14:54 - 2014-09-23 10:39 - 00006808 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-4 2014-09-23 14:54 - 2014-09-23 10:39 - 00006094 _____ () C:\Windows\System32\Tasks\00a46f62-8f6a-4f75-899b-9a82c3ee6a4b-1 2014-09-23 14:54 - 2014-09-22 17:53 - 00007152 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-4 2014-09-23 14:54 - 2014-09-22 17:53 - 00006808 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-7 2014-09-23 14:54 - 2014-09-22 17:53 - 00006808 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-6 2014-09-23 14:54 - 2014-09-22 17:53 - 00006094 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-1 2014-09-23 14:54 - 2014-09-22 17:53 - 00005784 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-5 2014-09-23 14:54 - 2014-09-22 17:53 - 00005440 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-2 2014-09-23 14:54 - 2014-09-22 17:52 - 00007490 _____ () C:\Windows\System32\Tasks\a9027b17-e2f1-4381-8382-728f2f90d7e8-11 2014-09-23 14:48 - 2014-04-11 20:24 - 00157696 ___SH () C:\Users\Renatka\Downloads\Thumbs.db 2014-09-23 14:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-09-23 13:51 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-09-23 11:14 - 2014-09-23 11:14 - 00895120 _____ (Google Inc.) C:\Users\Renatka\Downloads\ChromeSetup.exe 2014-09-23 11:14 - 2014-09-23 10:59 - 00002277 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-09-23 11:12 - 2013-02-03 17:41 - 00000000 ____D () C:\Windows\SysWOW64\SDA 2014-09-23 10:59 - 2014-09-23 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-09-23 10:59 - 2014-03-27 18:31 - 00000000 ____D () C:\Program Files (x86)\Google 2014-09-23 10:58 - 2014-09-23 10:58 - 00004036 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-09-23 10:58 - 2014-09-23 10:58 - 00003800 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-09-23 10:58 - 2014-03-27 18:30 - 00000000 ____D () C:\Users\Renatka\AppData\Local\Deployment 2014-09-23 10:57 - 2014-09-18 13:42 - 00000000 ____D () C:\Users\Renatka\Desktop\belka 2014-09-23 10:56 - 2014-09-22 15:19 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2014-09-23 10:50 - 2014-08-11 00:43 - 00000000 ____D () C:\Windows\Minidump 2014-09-23 10:50 - 2014-04-18 12:13 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\uTorrent 2014-09-23 10:50 - 2014-04-05 17:56 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-23 10:50 - 2012-08-02 00:22 - 00000000 ____D () C:\Windows\Panther 2014-09-23 10:45 - 2014-09-23 10:45 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-09-23 10:45 - 2014-09-23 10:45 - 00000788 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-09-23 10:45 - 2014-09-23 10:45 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-23 10:44 - 2014-09-22 15:33 - 00000926 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2014-09-23 10:40 - 2014-09-22 17:52 - 00000000 ____D () C:\Program Files (x86)\iWebar 2014-09-23 10:39 - 2014-09-22 15:33 - 00003898 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA 2014-09-23 10:39 - 2014-09-22 15:33 - 00003662 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore 2014-09-23 02:17 - 2014-09-22 15:34 - 00006092 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-1 2014-09-23 02:17 - 2014-09-22 15:34 - 00005782 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-5 2014-09-23 02:17 - 2014-09-22 15:34 - 00005438 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-2 2014-09-23 02:17 - 2014-09-22 15:33 - 01450392 _____ (Object Browser) C:\Users\Renatka\AppData\Roaming\VH.exe 2014-09-23 02:17 - 2014-09-22 15:33 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-4 2014-09-23 02:17 - 2014-09-22 15:33 - 00004358 _____ () C:\Windows\System32\Tasks\VH 2014-09-23 02:16 - 2014-09-22 15:33 - 01901464 _____ (Object Browser) C:\Users\Renatka\AppData\Roaming\IXXI.exe 2014-09-23 02:16 - 2014-09-22 15:33 - 00007832 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-11 2014-09-23 02:16 - 2014-09-22 15:33 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-7 2014-09-23 02:16 - 2014-09-22 15:33 - 00006806 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-6 2014-09-23 02:16 - 2014-09-22 15:33 - 00006126 _____ () C:\Windows\System32\Tasks\eb1d300f-ab15-4910-bfc8-74bd8d84d566-3 2014-09-23 02:16 - 2014-09-22 15:33 - 00004362 _____ () C:\Windows\System32\Tasks\IXXI 2014-09-23 02:06 - 2014-09-22 15:21 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator 2014-09-23 02:05 - 2014-09-23 02:05 - 00004328 _____ () C:\Windows\System32\Tasks\Installer_shopperpro 2014-09-23 02:02 - 2014-09-23 02:02 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\IDT 2014-09-22 15:51 - 2013-02-03 17:54 - 00000000 ____D () C:\ProgramData\Temp 2014-09-22 15:50 - 2014-09-22 15:50 - 00000000 ____D () C:\ProgramData\374311380 2014-09-22 15:46 - 2014-09-22 15:46 - 00000000 ____D () C:\Users\Renatka\Documents\Optimizer Pro 2014-09-22 15:44 - 2014-09-22 14:55 - 00000000 ____D () C:\Users\Renatka\Desktop\Ślubowanie 2014-09-22 15:44 - 2014-09-22 14:48 - 00000000 ____D () C:\Users\Renatka\Desktop\Muzyka 2014-09-22 15:43 - 2014-09-22 14:47 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Audacity 2014-09-22 15:42 - 2014-09-22 15:42 - 03009826 _____ ( ) C:\Users\Renatka\Downloads\FFmpeg_v0.6.2_for_Audacity_on_Windows.exe 2014-09-22 15:36 - 2014-09-22 15:36 - 00188410 _____ () C:\Users\Renatka\Downloads\libmp3lame-win-3.98.2.zip 2014-09-22 15:36 - 2014-09-22 15:35 - 00526023 _____ ( ) C:\Users\Renatka\Downloads\Lame_v3.99.3_for_Windows.exe 2014-09-22 15:34 - 2014-09-22 15:33 - 00000000 ____D () C:\Program Files (x86)\Senses 2014-09-22 15:33 - 2014-09-22 15:33 - 00000000 ____D () C:\Users\Renatka\AppData\Local\globalUpdate 2014-09-22 15:33 - 2014-09-22 15:33 - 00000000 ____D () C:\Program Files (x86)\globalUpdate 2014-09-22 15:29 - 2014-03-27 18:16 - 00001442 _____ () C:\Users\Renatka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-22 15:27 - 2014-09-22 14:30 - 00000000 ____D () C:\Program Files (x86)\NCH Software 2014-09-22 15:25 - 2012-07-26 07:26 - 00000269 _____ () C:\Windows\win.ini 2014-09-22 15:21 - 2014-09-22 15:21 - 00172032 _____ (Jin Hui E-mail: jinhui@jcomsoft.com Web: http://www.jcomsoft.com) C:\Windows\SysWOW64\AniGIF.ocx 2014-09-22 15:21 - 2014-09-22 15:21 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper 2014-09-22 15:21 - 2014-09-22 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator 2014-09-22 15:20 - 2014-09-22 15:20 - 00000000 ____D () C:\Users\Renatka\AppData\Local\CrashRpt 2014-09-22 15:19 - 2014-09-22 15:19 - 00000000 ____D () C:\ProgramData\IePluginServices 2014-09-22 15:17 - 2014-06-13 13:41 - 00000000 ____D () C:\Users\Renatka\Downloads\Pobrane 2014-09-22 15:16 - 2014-09-22 15:16 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-09-22 15:15 - 2014-09-22 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-09-22 15:09 - 2014-09-22 15:08 - 01578704 _____ (Koyote-Lab Inc) C:\Users\Renatka\Downloads\Niepotwierdzony 973133.crdownload 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Users\Renatka\Desktop\WSiP 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Users\Renatka\Desktop\Piosenki z MACA KL I 2014-09-22 14:48 - 2014-09-22 14:30 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software 2014-09-22 14:47 - 2014-09-22 14:47 - 00001035 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2014-09-22 14:47 - 2014-09-22 14:47 - 00001023 _____ () C:\Users\Public\Desktop\Audacity.lnk 2014-09-22 14:47 - 2014-09-22 14:47 - 00000000 ____D () C:\Program Files (x86)\Audacity 2014-09-22 14:46 - 2014-09-22 14:46 - 00000000 ____D () C:\Users\Renatka\AppData\Local\Nero 2014-09-22 14:45 - 2014-09-22 14:44 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\Nero 2014-09-22 14:44 - 2014-09-22 14:44 - 00000000 ____D () C:\Windows\System32\Tasks\Nero 2014-09-22 14:44 - 2014-09-22 14:41 - 00000000 ____D () C:\ProgramData\Nero 2014-09-22 14:42 - 2014-09-22 14:42 - 00002913 _____ () C:\Users\Public\Desktop\Nero 2015.lnk 2014-09-22 14:42 - 2014-09-22 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2014-09-22 14:42 - 2014-09-22 14:41 - 00000000 ____D () C:\Program Files (x86)\Nero 2014-09-22 14:40 - 2014-09-22 14:40 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-22 14:35 - 2014-09-14 11:28 - 00000000 ____D () C:\Users\Renatka\Desktop\Piosenki z Nowej Ery 2014-09-22 14:30 - 2014-09-22 14:30 - 00000000 ____D () C:\ProgramData\NCH Software 2014-09-22 13:33 - 2014-03-31 17:06 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log 2014-09-22 13:32 - 2014-03-31 17:06 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-09-22 05:13 - 2014-04-08 15:53 - 00000354 _____ () C:\Windows\Tasks\HPCeeScheduleForRenatka.job 2014-09-22 02:29 - 2014-09-22 15:25 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys 2014-09-21 17:46 - 2014-04-08 15:53 - 00003172 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForRenatka 2014-09-21 17:46 - 2014-03-27 18:16 - 00000000 ____D () C:\Users\Renatka 2014-09-21 14:09 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-21 12:33 - 2014-09-21 12:33 - 00000162 ____H () C:\Users\Renatka\Desktop\~$ZUTA - Legenda - Szkoło, jak się masz.htm 2014-09-21 12:05 - 2014-09-21 12:05 - 00752808 _____ () C:\Users\Renatka\Downloads\02 ślubowanie pierwszaków.wma 2014-09-20 12:30 - 2014-09-20 12:30 - 00076756 _____ () C:\Users\Renatka\Desktop\embargo.jpeg 2014-09-20 07:50 - 2014-09-20 07:50 - 00252928 _____ () C:\Users\Renatka\Downloads\ZLZ.Malopolska.xls 2014-09-18 06:24 - 2014-09-18 06:24 - 01897984 _____ () C:\Users\Renatka\Downloads\Prawa Dziecka.ppt 2014-09-17 18:11 - 2014-07-23 23:59 - 00000000 ____D () C:\Users\Renatka\AppData\Local\Battle.net 2014-09-16 20:17 - 2014-04-18 07:39 - 00000000 ____D () C:\Users\Renatka\Desktop\Tymuś 2014-09-16 07:21 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-09-14 12:35 - 2014-09-14 12:35 - 01401588 _____ () C:\Users\Renatka\Downloads\jestem uczniem.wma 2014-09-14 11:46 - 2014-04-11 20:23 - 00000000 ____D () C:\Users\Renatka\Documents\OBUT 2014-09-13 06:29 - 2014-09-13 06:29 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (3).wma 2014-09-13 06:29 - 2014-09-13 06:28 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (2).wma 2014-09-13 06:25 - 2014-09-13 06:25 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa.wma 2014-09-13 06:25 - 2014-09-13 06:25 - 02587328 _____ () C:\Users\Renatka\Downloads\01Ekstra klasa, I klasa (1).wma 2014-09-12 06:31 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-09-11 22:46 - 2014-07-10 08:09 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 22:45 - 2014-03-28 21:10 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 22:40 - 2014-03-28 21:10 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-10 19:04 - 2014-03-30 12:19 - 00000000 ___RD () C:\Users\Renatka\Desktop\Renata 2014-09-10 08:53 - 2014-03-27 19:02 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-07 20:27 - 2014-09-07 20:26 - 11803437 _____ () C:\Users\Renatka\Downloads\Emocje - uczucia - 14 plików.7z 2014-09-07 20:26 - 2014-09-07 20:26 - 11341899 _____ () C:\Users\Renatka\Downloads\Emocje - uczucia3 - 18 plików.7z 2014-09-07 20:01 - 2014-09-07 20:01 - 01843812 _____ () C:\Users\Renatka\Downloads\w Literkowie.wma 2014-09-05 00:36 - 2014-09-10 08:45 - 00755712 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-04 18:19 - 2014-09-04 18:15 - 241541156 _____ () C:\Users\Renatka\Downloads\multibook_naszelementarz_cz1.exe 2014-09-03 03:49 - 2014-09-10 08:45 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-02 21:32 - 2014-07-10 08:13 - 00705480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-02 21:32 - 2014-07-10 08:13 - 00104904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-01 16:06 - 2014-06-06 10:56 - 00000000 ____D () C:\Users\Renatka\AppData\Roaming\HTC 2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\Renatka\AppData\Roaming\VH 2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\Renatka\AppData\Roaming\IXXI 2014-08-31 11:14 - 2014-08-31 11:13 - 111725634 _____ () C:\Users\Renatka\Downloads\2012 - Łąki Łan - Armanda.zip 2014-08-30 08:30 - 2014-07-11 19:51 - 00439432 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-29 06:38 - 2014-03-30 12:15 - 00000000 ____D () C:\Users\Renatka\Desktop\Renata- dokumenty 2014-08-28 13:34 - 2014-09-10 08:46 - 00059400 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-28 08:05 - 2014-09-10 08:46 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-28 08:05 - 2014-09-10 08:46 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-28 08:05 - 2014-09-10 08:46 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-28 08:05 - 2014-09-10 08:46 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-28 08:02 - 2014-09-10 08:46 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-28 08:01 - 2014-09-10 08:46 - 03285504 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 01623552 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-28 08:01 - 2014-09-10 08:46 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-18 06:07 ==================== End Of Log ============================