Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2014 01 Ran by Jacek (administrator) on ACER on 15-12-2014 23:55:52 Running from C:\Users\Jacek\Downloads Loaded Profile: Jacek (Available profiles: Jacek) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (ClickCaption) C:\Program Files\ClickCaption_1.10.0.4\Service\ccsvc.exe (Egis Technology Inc.) C:\Program Files\Acer Bio Protection\BASVC.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Egis Technology Inc.) C:\Program Files\Acer Bio Protection\CompPtcVUI.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (AlcorMicro Co., Ltd.) C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe (Egis Technology Inc.) C:\Program Files\Acer Bio Protection\PdtWzd.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.) C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe (Comfort Software Group) C:\Program Files\FreeAlarmClock\FreeAlarmClock.exe (ZTE) C:\Program Files\T-Mobile\InternetManager_Z\Bin\mcserver.exe (Microsoft Corporation) C:\Windows\System32\cmd.exe () C:\Program Files\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe () C:\Program Files\T-Mobile\InternetManager_Z\Bin\db_daemon.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Eyeo GmbH) C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_16_0_0_235_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-11-30] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun] => C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [237568 2009-04-02] (AlcorMicro Co., Ltd.) HKLM\...\Run: [VitaKeyPdtWzd] => C:\Program Files\Acer Bio Protection\PdtWzd.exe [3567616 2009-09-05] (Egis Technology Inc.) HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1537320 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [Sage Komunikator] => C:\Program Files\Sage\Komunikator\SageUpdt.exe [247008 2010-11-15] () HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [2621440 2010-02-09] (Brother Industries, Ltd.) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\RunOnce: [AvgUninstallURL] => cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-app?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANAAzAD (the data entry has 389 more characters). HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\Run: [msnmsgr] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe [3872080 2010-04-16] (Microsoft Corporation) HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\/\KiesTrayAgent.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd) HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\Run: [GameXN GO] => "C:\ProgramData\GameXN\GameXNGO.exe" /startup HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\Run: [FreeAC] => C:\Program Files\FreeAlarmClock\FreeAlarmClock.exe [1553688 2014-02-20] (Comfort Software Group) HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: F - F:\windows\Install\Install.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {143ed2fe-e68f-11e3-b562-001f16c49629} - F:\setup.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {3053bab5-226b-11e1-acbf-001f16c49629} - G:\SETUP.EXE HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {95dd1aa3-60c2-11e3-bba5-001f16c49629} - F:\setup.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {bc5d1aeb-2822-11e3-a06b-001f16c49629} - F:\setup.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {ccb0d6bb-5b4f-11e3-9b0f-001f16c49629} - F:\windows\Install\Install.exe HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\...\MountPoints2: {d6620eba-5813-11e3-88cd-001f16c49629} - F:\setup.exe HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-04-04] (Microsoft Corporation) Lsa: [Notification Packages] C:\Program Files\Acer Bio Protection\PwdFilter Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk ShortcutTarget: mcserver.lnk -> C:\Program Files\T-Mobile\InternetManager_Z\Bin\mcserver.exe (ZTE) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-2949696853-1657588460-2157650677-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus) Toolbar: HKU\S-1-5-21-2949696853-1657588460-2157650677-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_22-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.55.1 FireFox: ======== FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile\InternetManager_Z\Bin\addon [2013-12-02] Chrome: ======= CHR StartupUrls: Default -> "hxxp://myhome.vi-view.com/?type=hp&ts=1418161647&from=cor&uid=HitachiXHTS545050B9A300_090823PB4406Q7C415EAX" CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\39.0.2171.71\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\39.0.2171.71\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\39.0.2171.71\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U25) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Profile: C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Wallet) - C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-31] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed] R2 ccsvc_1.10.0.4; C:\Program Files\ClickCaption_1.10.0.4\Service\ccsvc.exe [277584 2014-12-04] (ClickCaption) R2 IGBASVC; C:\Program Files\Acer Bio Protection\BASVC.exe [3450368 2009-09-05] (Egis Technology Inc.) [File not signed] S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [620544 2008-11-11] (Nokia.) [File not signed] S3 KiesAllShare; C:\Program Files\Samsung\Kies\WiselinkPro\WiselinkPro.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [25728 2011-02-11] (Google Inc) [File not signed] R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [13184 2009-12-15] (Bytemobile, Inc.) [File not signed] S3 BMserDiag; C:\Windows\System32\DRIVERS\BMserDiag.sys [87424 2009-11-26] (Global Wireless Incorporated) [File not signed] S3 BMserNmea; C:\Windows\System32\DRIVERS\BMserNmea.sys [87424 2009-11-26] (Global Wireless Incorporated) [File not signed] S3 BMusbmdm; C:\Windows\System32\DRIVERS\BMusbmdm.sys [87424 2009-11-26] (Global Wireless Incorporated) [File not signed] R1 ccnfd_1_10_0_4; C:\Windows\System32\drivers\ccnfd_1_10_0_4.sys [52728 2014-12-04] (ClickCaption) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2011-12-09] (DT Soft Ltd) S2 FPSensor; C:\Windows\System32\Drivers\FPSensor.sys [29744 2010-07-07] (EgisTec) S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36640 2009-12-22] () [File not signed] R3 hidshim; C:\Windows\System32\DRIVERS\hidshim.sys [5632 2009-07-21] (Windows (R) Win 7 DDK provider) R3 nuvotonhidgeneric; C:\Windows\System32\DRIVERS\nuvotonhidgeneric.sys [22528 2009-07-21] (Nuvoton Technology Corporation) S3 qcusbnet; C:\Windows\System32\DRIVERS\qcusbnet.sys [136192 2012-10-26] (QUALCOMM Incorporated) S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [110080 2012-10-26] (QUALCOMM Incorporated) S0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2011-12-09] (Duplex Secure Ltd.) R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [24192 2009-12-15] (Bytemobile, Inc.) [File not signed] S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [67968 2011-08-10] (ZTE) S3 zte_cpo; C:\Windows\System32\DRIVERS\zte_cpo.sys [9984 2011-08-10] (ZTE) S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X] S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X] U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation) U3 pxldrpob; \??\C:\Users\Jacek\AppData\Local\Temp\pxldrpob.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-15 23:55 - 2014-12-15 23:56 - 00016260 _____ () C:\Users\Jacek\Downloads\FRST.txt 2014-12-15 23:54 - 2014-12-15 23:55 - 00000000 ____D () C:\FRST 2014-12-15 23:54 - 2014-12-15 23:54 - 01111040 _____ (Farbar) C:\Users\Jacek\Downloads\FRST.exe 2014-12-15 23:44 - 2014-12-15 23:53 - 00000000 ____D () C:\Users\Jacek\Desktop\pliki 2014-12-15 23:42 - 2014-12-15 23:42 - 00059670 _____ () C:\Users\Jacek\Downloads\Extras.Txt 2014-12-15 23:40 - 2014-12-15 23:40 - 00075884 _____ () C:\Users\Jacek\Downloads\OTL.Txt 2014-12-15 23:21 - 2014-12-15 23:36 - 00380416 _____ () C:\Users\Jacek\Downloads\m2ggc9w3.exe 2014-12-15 23:20 - 2014-12-15 23:20 - 00602112 _____ (OldTimer Tools) C:\Users\Jacek\Downloads\OTL.exe 2014-12-15 23:02 - 2014-12-15 23:11 - 00000000 ____D () C:\AdwCleaner 2014-12-15 23:02 - 2014-12-15 23:09 - 02166272 _____ () C:\Users\Jacek\Downloads\AdwCleaner.exe 2014-12-15 09:00 - 2014-12-15 09:00 - 00000000 ____D () C:\Program Files\Adblock Plus for IE 2014-12-15 08:57 - 2014-12-15 08:57 - 05952624 _____ ( ) C:\Users\Jacek\Downloads\adblockplusie-1.2.exe 2014-12-12 20:05 - 2014-12-12 20:58 - 734275584 _____ () C:\Users\Jacek\Downloads\Dobrzy.ludzie.2014.PL.BRRip.XviD-KiT.avi 2014-12-11 20:57 - 2014-12-11 20:58 - 00000000 ____D () C:\Users\Jacek\Desktop\play 2014-12-10 11:59 - 2014-12-10 11:59 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-10 09:39 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 07:09 - 2014-12-04 05:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 07:09 - 2014-12-04 05:34 - 00873984 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 07:09 - 2014-12-02 00:28 - 01160872 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 07:09 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 07:09 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 07:09 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 07:09 - 2014-11-22 03:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 07:09 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 07:09 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 07:09 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 07:09 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 07:09 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 07:09 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 07:09 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 07:09 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 07:09 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-10 07:09 - 2014-11-22 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 07:09 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 07:09 - 2014-11-22 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 07:09 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 07:09 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 07:09 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 07:09 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 07:09 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 07:09 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 07:09 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 07:09 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 07:09 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 07:09 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 07:09 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 07:09 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 07:09 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 07:09 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 07:09 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 07:09 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 07:04 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 07:03 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 07:03 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 07:03 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 07:03 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 07:03 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 07:03 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-09 22:47 - 2014-12-09 22:47 - 01729768 _____ (Comfort Software Group ) C:\Users\Jacek\Downloads\FreeAlarmClockSetup.exe 2014-12-09 22:47 - 2014-12-09 22:47 - 00001041 _____ () C:\Users\Jacek\Desktop\Free Alarm Clock.lnk 2014-12-09 22:47 - 2014-12-09 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Alarm Clock 2014-12-09 22:47 - 2014-12-09 22:47 - 00000000 ____D () C:\Program Files\FreeAlarmClock 2014-12-09 22:47 - 2014-12-09 22:47 - 00000000 ____D () C:\Program Files\ClickCaption_1.10.0.4 2014-12-09 22:46 - 2014-12-09 22:46 - 00754240 _____ ( ) C:\Users\Jacek\Downloads\Free-Alarm-Clock(24929)-dp.exe 2014-12-09 17:11 - 2014-12-15 23:37 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-12-09 17:11 - 2014-12-09 22:17 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-12-07 19:40 - 2014-12-07 19:40 - 00000000 ____D () C:\Users\Jacek\Desktop\NR TELEFONÓW 2014-12-06 22:39 - 2014-12-06 22:43 - 00000000 ____D () C:\Users\Jacek\Desktop\PUSZER I TOŚKA PO KĄPIELI 06.12.14 2014-12-06 10:02 - 2014-12-06 10:02 - 00160568 _____ () C:\Windows\Minidump\120614-38532-01.dmp 2014-12-05 19:55 - 2014-12-05 19:56 - 00000000 ____D () C:\Users\Jacek\Desktop\filmik 2014-12-05 19:28 - 2014-12-11 18:08 - 00000000 ____D () C:\Users\Jacek\Desktop\muzyka Malarz 2014-12-04 20:19 - 2014-12-04 20:19 - 00052728 _____ (ClickCaption) C:\Windows\system32\Drivers\ccnfd_1_10_0_4.sys 2014-11-30 17:28 - 2014-11-30 17:28 - 00160520 _____ () C:\Windows\Minidump\113014-38859-01.dmp 2014-11-29 15:45 - 2014-11-29 15:45 - 00018505 _____ () C:\Users\Jacek\Desktop\Grafik Grudzień 2014.odt 2014-11-19 06:31 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-11-19 06:31 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2014-11-18 21:21 - 2014-11-18 21:21 - 00160568 _____ () C:\Windows\Minidump\111814-39452-01.dmp 2014-11-18 14:56 - 2014-11-18 14:56 - 01202848 _____ (Microsoft Corporation) C:\Windows\system32\FM20.DLL ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-15 23:20 - 2009-07-14 05:34 - 00026032 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-15 23:20 - 2009-07-14 05:34 - 00026032 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-15 23:16 - 2010-07-07 10:33 - 01895718 _____ () C:\Windows\WindowsUpdate.log 2014-12-15 23:12 - 2011-07-14 22:42 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-15 23:12 - 2010-07-21 19:32 - 00000000 ____D () C:\Users\Jacek\Tracing 2014-12-15 23:12 - 2010-07-07 13:26 - 02905434 _____ () C:\Windows\PFRO.log 2014-12-15 23:12 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-15 23:12 - 2009-07-14 05:39 - 00453000 _____ () C:\Windows\setupact.log 2014-12-15 22:59 - 2011-07-14 22:42 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-15 12:32 - 2009-07-14 05:53 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-12-11 10:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache 2014-12-11 07:49 - 2012-04-13 14:07 - 00000404 _____ () C:\Windows\BRWMARK.INI 2014-12-10 19:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF 2014-12-10 11:59 - 2014-05-06 21:45 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-10 11:59 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2014-12-10 11:59 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat 2014-12-10 09:40 - 2011-12-09 14:57 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-09 22:17 - 2011-09-18 03:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-12-09 22:15 - 2010-07-26 12:11 - 00000000 ____D () C:\Users\Jacek\AppData\Local\Adobe 2014-12-07 19:41 - 2010-07-07 10:41 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-07 19:41 - 2009-07-14 09:07 - 00740688 _____ () C:\Windows\system32\perfh015.dat 2014-12-07 19:41 - 2009-07-14 09:07 - 00156230 _____ () C:\Windows\system32\perfc015.dat 2014-12-06 10:02 - 2010-09-13 18:56 - 367235328 _____ () C:\Windows\MEMORY.DMP 2014-12-06 10:02 - 2010-09-13 18:56 - 00000000 ____D () C:\Windows\Minidump Some content of TEMP: ==================== C:\Users\Jacek\AppData\Local\Temp\askToolbarInstaller.exe C:\Users\Jacek\AppData\Local\Temp\ezGameXN.dll C:\Users\Jacek\AppData\Local\Temp\GameXNGO.exe C:\Users\Jacek\AppData\Local\Temp\GomEncDnInstaller.exe C:\Users\Jacek\AppData\Local\Temp\iihvrpoj.dll C:\Users\Jacek\AppData\Local\Temp\NSISPromotion.dll C:\Users\Jacek\AppData\Local\Temp\ose00000.exe C:\Users\Jacek\AppData\Local\Temp\Quarantine.exe C:\Users\Jacek\AppData\Local\Temp\Refresh.exe C:\Users\Jacek\AppData\Local\Temp\setup.exe C:\Users\Jacek\AppData\Local\Temp\SkypeSetup.exe C:\Users\Jacek\AppData\Local\Temp\sqlite3.dll C:\Users\Jacek\AppData\Local\Temp\_is9165.exe C:\Users\Jacek\AppData\Local\Temp\_isF056.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-15 08:36 ==================== End Of Log ============================