Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2014 Ran by Bożena (administrator) on BOZENA-KOMPUTER on 05-12-2014 10:18:27 Running from F:\64 Loaded Profile: Bożena (Available profiles: Bożena) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ASUS) C:\Program Files\P4G\BatteryLife.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-11-28] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.) ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll (eCareme Technologies, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2010112955-1264138697-2364430108-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2010112955-1264138697-2364430108-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-2010112955-1264138697-2364430108-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT SearchScopes: HKU\S-1-5-21-2010112955-1264138697-2364430108-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Tcpip\Parameters: [DhcpNameServer] 94.249.192.82 8.8.8.8 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.6.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation) FF Plugin HKU\S-1-5-21-2010112955-1264138697-2364430108-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Bożena\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} [2014-09-02] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-28] Chrome: ======= CHR Profile: C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-11] CHR Extension: (Dysk Google) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-11] CHR Extension: (Adblock Plus) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-11] CHR Extension: (Avast SafePrice) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-12-03] CHR Extension: (Avast Online Security) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-11-28] CHR Extension: (Google Wallet) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-11] CHR Extension: (Gmail) - C:\Users\Bożena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-11] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-28] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-28] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-06-08] (Advanced Micro Devices, Inc.) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-28] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-28] (Avast Software) S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-28] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-28] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-28] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-28] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-28] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-28] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-28] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-28] () R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 SG762_64; C:\Windows\System32\DRIVERS\WlanBZ64.sys [493440 2006-01-19] (ZyDAS Technology Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-28] (Avast Software) S3 catchme; \??\C:\rewrewr\catchme.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-05 10:17 - 2014-12-05 10:18 - 00000000 ____D () C:\FRST 2014-12-04 23:11 - 2014-12-04 23:11 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{266B8C4D-57C8-44FF-9713-140D390E8EDE} 2014-12-01 21:36 - 2014-12-01 21:36 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{270CB4C5-2F73-46C2-AEC2-9AE9FCEC54DD} 2014-11-28 16:18 - 2014-11-28 16:18 - 00000247 _____ () C:\Windows\system32\2014-11-28-15-18-18.009-aswFe.exe-3428.log 2014-11-28 16:18 - 2014-11-28 16:18 - 00000197 _____ () C:\Windows\system32\2014-11-28-15-18-12.051-AvastVBoxSVC.exe-4752.log 2014-11-28 16:10 - 2014-11-28 16:10 - 00000247 _____ () C:\Windows\system32\2014-11-28-15-10-23.071-aswFe.exe-3496.log 2014-11-28 16:10 - 2014-11-28 16:10 - 00000197 _____ () C:\Windows\system32\2014-11-28-15-10-18.012-AvastVBoxSVC.exe-1744.log 2014-11-28 16:02 - 2014-11-28 16:02 - 00000247 _____ () C:\Windows\system32\2014-11-28-15-02-17.070-aswFe.exe-3212.log 2014-11-28 16:02 - 2014-11-28 16:02 - 00000197 _____ () C:\Windows\system32\2014-11-28-15-02-12.002-AvastVBoxSVC.exe-4332.log 2014-11-28 15:56 - 2014-11-28 15:57 - 00000000 ____D () C:\Users\Bożena\AppData\Roaming\Dropbox 2014-11-28 15:46 - 2014-11-28 15:46 - 00000000 ____D () C:\Users\Bożena\AppData\Roaming\AVAST Software 2014-11-28 15:45 - 2014-12-04 23:03 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-11-28 15:45 - 2014-11-28 15:46 - 00000000 ____D () C:\Windows\SysWOW64\vbox 2014-11-28 15:45 - 2014-11-28 15:46 - 00000000 ____D () C:\Windows\system32\vbox 2014-11-28 15:45 - 2014-11-28 15:45 - 00001926 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-11-28 15:45 - 2014-11-28 15:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-11-28 15:45 - 2014-11-28 15:44 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-11-28 15:45 - 2014-11-28 15:44 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-11-28 15:45 - 2014-11-28 15:44 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-11-28 15:45 - 2014-11-28 15:44 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-11-28 15:45 - 2014-11-28 15:44 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-11-28 15:44 - 2014-11-28 15:45 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-11-28 15:44 - 2014-11-28 15:44 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-11-28 15:44 - 2014-11-28 15:44 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-11-28 15:44 - 2014-11-28 15:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-11-28 15:44 - 2014-11-28 15:44 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-11-28 15:41 - 2014-11-28 15:41 - 00000000 ____D () C:\Program Files\AVAST Software 2014-11-28 15:37 - 2014-11-28 15:38 - 05006864 _____ (AVAST Software) C:\Users\Bożena\Downloads\avast_free_antivirus_setup_online.exe 2014-11-28 12:44 - 2014-11-28 12:44 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{6195A944-7A72-4BF0-A704-E63EE9B7A962} 2014-11-27 15:23 - 2014-11-27 15:23 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{FEEC2FEE-8F8F-4C1B-BA08-02B5DB63C491} 2014-11-25 16:43 - 2014-11-25 16:43 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{3081072B-7875-4CEE-8E6F-7522D7211A69} 2014-11-22 19:15 - 2014-11-22 19:15 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{F680078A-2062-4355-B6A3-DE80B6229EBB} 2014-11-22 10:39 - 2014-11-22 10:39 - 00000097 _____ () C:\Users\Bożena\Desktop\kalkulator.url 2014-11-22 00:30 - 2014-11-22 00:30 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{9F16491C-E1E4-4ABF-8487-D97092407130} 2014-11-21 23:54 - 2014-11-21 23:54 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{1A5F48D8-7BDA-42DE-B39A-614053F06E8F} 2014-11-18 22:08 - 2014-11-18 22:08 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{725B7267-1DC6-42C7-BAAD-1D68988093F6} 2014-11-17 17:42 - 2014-11-17 17:42 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{86E159A8-D535-49DD-B612-B3B3AB07AFB9} 2014-11-13 17:45 - 2014-11-13 17:45 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{457239C6-7C4D-41A9-81F2-689A11D619C8} 2014-11-11 22:52 - 2014-11-11 22:52 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{E55CAAC2-E4B3-408D-AFD6-0A406C73266F} 2014-11-11 17:33 - 2014-11-04 14:30 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-11-08 22:37 - 2014-11-08 22:37 - 00000000 ____D () C:\Users\Bożena\AppData\Local\{B7DD0A4C-4244-4050-8ACF-4A348345302C} 2014-11-06 16:21 - 2014-11-06 16:21 - 00000165 ____H () C:\Users\Bożena\Desktop\~$zaliczka.xlsx 2014-11-06 15:36 - 2014-11-06 15:36 - 00000578 _____ () C:\Users\Bożena\Downloads\how to install.txt 2014-11-06 15:34 - 2014-11-06 15:34 - 00008683 _____ () C:\Users\Bożena\Downloads\ReadMe.txt ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-05 10:17 - 2011-02-19 06:31 - 00752552 _____ () C:\Windows\system32\perfh015.dat 2014-12-05 10:17 - 2011-02-19 06:31 - 00160176 _____ () C:\Windows\system32\perfc015.dat 2014-12-05 10:17 - 2009-07-14 06:13 - 01702902 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-05 10:16 - 2014-10-11 17:38 - 00009114 _____ () C:\Windows\setupact.log 2014-12-05 10:12 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-05 10:12 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-05 10:08 - 2014-01-03 18:42 - 01057545 _____ () C:\Windows\WindowsUpdate.log 2014-12-05 10:05 - 2014-10-11 18:09 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-05 10:05 - 2011-08-20 06:19 - 00045056 _____ () C:\Windows\system32\acovcnt.exe 2014-12-05 10:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-04 23:53 - 2013-03-30 22:14 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-12-04 23:20 - 2014-10-11 18:09 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-28 21:56 - 2011-08-20 06:17 - 00001352 _____ () C:\Windows\system32\ServiceFilter.ini 2014-11-28 21:54 - 2014-10-11 19:32 - 00938704 _____ () C:\Windows\PFRO.log 2014-11-28 21:54 - 2014-10-11 18:11 - 00000000 ____D () C:\ProgramData\Norton 2014-11-28 15:41 - 2011-11-04 19:18 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-11-20 22:14 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-11-14 17:48 - 2012-04-06 13:57 - 00000000 ____D () C:\Users\Bożena\AppData\Roaming\SoftGrid Client 2014-11-14 10:15 - 2014-10-11 18:09 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-14 10:15 - 2014-10-11 18:09 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-25 11:32 ==================== End Of Log ============================