Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 02 Ran by Miszczunio (administrator) on MISZCZU on 13-01-2015 19:16:54 Running from C:\Users\Miszczunio\Desktop Loaded Profile: Miszczunio (Available profiles: Miszczunio) Platform: Windows 8.1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Enigma Software Group USA, LLC.) C:\Config.Msi\141ae.rbf (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2876816 2013-03-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation) HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17097200 2013-11-14] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [193008 2013-11-14] (Lenovo(beijing) Limited) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-08] (AVAST Software) HKLM-x32\...\Run: [NeroFilterCheck] => C:\WINDOWS\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM-x32\...\Run: [gmsd_pl_23] => [X] Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-3970645344-2820115692-2108947873-1001\...\MountPoints2: {bc853721-9699-11e4-bea6-0cd2928efa84} - "F:\SETUP.EXE" HKU\S-1-5-21-3970645344-2820115692-2108947873-1001\...\MountPoints2: {f0e8db08-41ab-11e4-be98-0cd2928efa84} - "F:\Startme.exe" ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => No File ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => No File ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => No File ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3970645344-2820115692-2108947873-1001 -> {3BB91A49-01AB-4EB5-A066-C31ED0DF2636} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2 FireFox: ======== FF ProfilePath: C:\Users\Miszczunio\AppData\Roaming\Mozilla\Firefox\Profiles\rv7yii8b.default FF Homepage: https://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3970645344-2820115692-2108947873-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll No File FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-20] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= CHR Profile: C:\Users\Miszczunio\AppData\Local\Google\Chrome\User Data\Default CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-07] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-07] (AVAST Software) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-20] (Intel Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-11-06] (Intel Corporation) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] () S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-04-18] () R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed] R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3388144 2013-04-18] (Intel® Corporation) S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-07] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-01-07] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-07] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-07] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-07] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-07] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-07] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-07] () R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation) R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-09-05] (Motorola Solutions, Inc.) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-13 19:16 - 2015-01-13 19:17 - 00013331 _____ () C:\Users\Miszczunio\Desktop\FRST.txt 2015-01-13 19:15 - 2015-01-13 19:16 - 00000000 ____D () C:\FRST 2015-01-13 19:13 - 2015-01-13 19:15 - 00000000 ____D () C:\WINDOWS\4FC9DA9DF608454E8191D7EFFDCC5726.TMP 2015-01-13 19:13 - 2015-01-13 19:15 - 00000000 ____D () C:\Users\Miszczunio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter 2015-01-13 19:13 - 2015-01-13 19:13 - 00000000 ____D () C:\Program Files (x86)\Enigma Software Group 2015-01-13 18:59 - 2015-01-13 18:59 - 02124288 _____ (Farbar) C:\Users\Miszczunio\Desktop\FRST64.exe 2015-01-13 18:51 - 2015-01-13 18:51 - 00000000 _____ () C:\autoexec.bat 2015-01-13 18:45 - 2015-01-13 18:45 - 00000149 _____ () C:\WINDOWS\setupact.log 2015-01-13 18:45 - 2015-01-13 18:45 - 00000000 _____ () C:\WINDOWS\setuperr.log 2015-01-13 18:35 - 2015-01-13 18:57 - 00068380 _____ () C:\WINDOWS\WindowsUpdate.log 2015-01-12 23:21 - 2015-01-12 23:21 - 00000000 ____D () C:\Users\Miszczunio\AppData\Local\CrashRpt 2015-01-12 22:31 - 2015-01-12 22:31 - 00003116 _____ () C:\WINDOWS\System32\Tasks\{E8E287BC-ECDB-4804-B02B-84BB70D6C027} 2015-01-12 19:19 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll 2015-01-12 19:19 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll 2015-01-12 19:19 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2015-01-12 19:19 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2015-01-12 19:19 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2015-01-12 19:19 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2015-01-12 19:19 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe 2015-01-12 19:19 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2015-01-12 19:19 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2015-01-12 19:19 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2015-01-12 19:19 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll 2015-01-12 19:19 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll 2015-01-12 19:19 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2015-01-12 19:19 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2015-01-12 18:55 - 2015-01-12 18:55 - 00003164 _____ () C:\WINDOWS\System32\Tasks\{DC414A52-23D2-4D9D-BEC5-9E031B79487D} 2015-01-12 18:53 - 2015-01-12 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-01-12 18:52 - 2015-01-12 18:52 - 00000000 ____D () C:\Users\Miszczunio\AppData\Roaming\Opera Software 2015-01-12 18:52 - 2015-01-12 18:52 - 00000000 ____D () C:\Users\Miszczunio\AppData\Local\Opera Software 2015-01-12 18:51 - 2015-01-12 18:51 - 00000000 ____D () C:\Users\Miszczunio\AppData\Local\Google 2015-01-12 18:51 - 2015-01-12 18:51 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2015-01-12 18:50 - 2015-01-12 18:50 - 00000000 ____D () C:\WINDOWS\PCHEALTH 2015-01-12 18:50 - 2015-01-12 18:50 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2015-01-12 18:50 - 2015-01-12 18:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server 2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2015-01-12 18:48 - 2015-01-12 18:48 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services 2015-01-12 18:47 - 2015-01-12 18:50 - 00000000 ____D () C:\Program Files\Microsoft Office 2015-01-12 18:47 - 2015-01-12 18:47 - 00000000 __RHD () C:\MSOCache 2015-01-12 18:17 - 2015-01-12 18:17 - 00000000 __SHD () C:\Users\Miszczunio\AppData\Local\EmieBrowserModeList 2015-01-12 18:10 - 2015-01-12 19:08 - 00000000 ____D () C:\Users\Miszczunio\AppData\Roaming\DAEMON Tools Lite 2015-01-12 18:10 - 2015-01-12 18:10 - 00004382 _____ () C:\WINDOWS\System32\Tasks\Installer_iwebar 2015-01-12 18:10 - 2015-01-12 18:10 - 00004378 _____ () C:\WINDOWS\System32\Tasks\Installer_sense 2015-01-12 18:09 - 2015-01-12 18:10 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2015-01-07 19:18 - 2014-12-31 12:14 - 00298120 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2015-01-07 19:15 - 2015-01-07 19:15 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2015-01-07 19:15 - 2015-01-07 19:15 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2014-12-29 09:10 - 2014-12-29 09:10 - 00003886 _____ () C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2014-12-16 16:35 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2014-12-16 16:35 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-13 19:15 - 2014-05-20 18:11 - 00000000 ____D () C:\Users\Miszczunio\AppData\Roaming\ClassicShell 2015-01-13 19:12 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2015-01-13 19:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2015-01-13 18:51 - 2014-08-06 22:25 - 00000000 ____D () C:\Users\Miszczunio 2015-01-13 18:40 - 2014-05-20 18:05 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3970645344-2820115692-2108947873-1001 2015-01-12 22:32 - 2013-11-14 05:45 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-01-12 22:21 - 2014-05-20 18:04 - 00000000 ____D () C:\Program Files (x86)\Gadu-Gadu 2015-01-12 22:14 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp 2015-01-12 20:06 - 2014-05-20 18:55 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-01-12 20:05 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-01-12 20:05 - 2012-07-26 06:26 - 00000202 _____ () C:\WINDOWS\win.ini 2015-01-12 20:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-01-12 19:49 - 2014-12-10 17:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-01-12 19:46 - 2014-05-20 17:53 - 00000000 ____D () C:\Users\Miszczunio\AppData\Local\Packages 2015-01-12 19:12 - 2014-05-20 18:55 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2015-01-12 19:06 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy 2015-01-12 19:06 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy 2015-01-12 18:58 - 2013-08-22 15:44 - 00397544 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2015-01-12 18:55 - 2014-08-07 06:32 - 00001477 _____ () C:\Users\Miszczunio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-01-12 18:55 - 2014-05-20 18:03 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-01-12 18:48 - 2014-03-18 10:40 - 00000000 ____D () C:\WINDOWS\ShellNew 2015-01-12 18:23 - 2014-03-18 10:57 - 01828496 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2015-01-12 18:23 - 2014-03-18 10:28 - 00808198 _____ () C:\WINDOWS\system32\perfh015.dat 2015-01-12 18:23 - 2014-03-18 10:28 - 00164014 _____ () C:\WINDOWS\system32\perfc015.dat 2015-01-12 18:18 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2015-01-12 18:17 - 2013-11-14 06:10 - 00000000 ____D () C:\ProgramData\Temp 2015-01-12 15:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2015-01-07 19:15 - 2014-05-20 18:09 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update 2015-01-07 19:15 - 2014-05-20 18:08 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys 2015-01-07 19:15 - 2014-05-20 18:08 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys 2015-01-07 19:15 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-12-16 16:25 - 2014-07-14 20:18 - 00000126 _____ () C:\Users\Miszczunio\Desktop\linki.txt 2014-12-14 20:32 - 2014-08-19 13:10 - 00000000 ____D () C:\Users\Miszczunio\AppData\Local\Adobe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-12 22:11 ==================== End Of Log ============================