Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-01-2015 01 Ran by Aleksandra (administrator) on VAIO on 17-01-2015 17:45:43 Running from C:\Users\Aleksandra\Downloads Loaded Profiles: Aleksandra (Available profiles: Aleksandra) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe (Spotify Ltd) C:\Users\Aleksandra\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (XTab system) C:\Program Files (x86)\XTab\ProtectService.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (SearchProtect) C:\Program Files (x86)\XTab\CmdShell.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (XTab system) C:\Program Files (x86)\XTab\HPNotify.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VCM Manager Settings\VcmMgrNotification64.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe () C:\Program Files (x86)\Dynamo Combo\updateDynamoCombo.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.exe () C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter64.exe () C:\Program Files (x86)\Dynamo Combo\bin\DynamoCombo.BrowserAdapter.exe (McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-10-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-12] (AVAST Software) HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\Run: [GoogleChromeAutoLaunch_5D4B8C781D318A4316D7D8360CB9DC27] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2015-01-09] (Google Inc.) HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\Run: [Elbserver] => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [83344 2011-04-02] (Sony Corporation) HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\Run: [Spotify] => C:\Users\Aleksandra\AppData\Roaming\Spotify\Spotify.exe [6737976 2015-01-08] (Spotify Ltd) HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\Run: [Spotify Web Helper] => C:\Users\Aleksandra\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-08] (Spotify Ltd) HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\MountPoints2: {3ba64436-a940-11e3-97c2-642737a5a7dc} - E:\LaunchU3.exe -a HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\...\MountPoints2: {d62db33c-3f75-11e4-b6c0-642737a5a7dc} - E:\LGAutoRun.exe ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hp&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://sony.msn.com HKU\S-1-5-21-1474587180-1992122563-1668890296-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://sony.msn.com URLSearchHook: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) URLSearchHook: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=ds&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J&q={searchTerms} SearchScopes: HKU\S-1-5-21-1474587180-1992122563-1668890296-1000 -> {5934B0F9-CD40-450D-982F-1AAD23A5FB1B} URL = http://services.zinio.com/search?s={searchTerms}&rf=sonyslices BHO: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL No File BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: McAfee Phishing Filter -> {27B4851A-3207-45A2-B947-BE8AFE6163AB} -> c:\Program Files\mcafee\msk\mskapbho.dll () BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Dynamo Combo 1.0.0.6 -> {986c37a1-7b65-476f-80dc-54f80bd4b0d6} -> C:\Program Files (x86)\Dynamo Combo\DynamoCombobho.dll (Dynamo Combo) BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.) Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll () FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-03-11] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-12] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-03-11] Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "https://isearch.avg.com/?cid={4F6E390F-0F9E-4E93-9EEA-F221E5A50B87}&mid=c00462772e7d47d091dfb56e71414e2f-5be15036b4b18f7a63a0b866fb5980363b6aea2d&lang=pl&ds=xn011&pr=sa&d=2012-09-06%2023:06:04&v=12.2.0.5&sap=hp", "hxxp://google.pl/", "hxxp://isearch.omiga-plus.com/?type=hp&ts=1421016171&from=cor&uid=ST9500325AS_5VEQGH9JXXXX5VEQGH9J" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Dokumenty Google) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-11] CHR Extension: (Dysk Google) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-11] CHR Extension: (YouTube) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-11] CHR Extension: (Szukaj w Google) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-11] CHR Extension: (Dynamo Combo) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkiapdenkapkopffbikbjbjamhklgikd [2015-01-15] CHR Extension: (SiteAdvisor) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-03-13] CHR Extension: (AdBlock) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-03-11] CHR Extension: (Avast Online Security) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-12] CHR Extension: (Photo Hack for Facebook) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfolibbobnddfcjbjnfiikjgdefiejpl [2014-12-23] CHR Extension: (Google Wallet) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-11] CHR Extension: (Gmail) - C:\Users\Aleksandra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-11] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-01-15] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - No Path CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-01-12] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) [File not signed] R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [91296 2011-04-29] (Atheros Commnucations) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-01-12] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2015-01-12] (AVAST Software) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2361344 2011-03-29] (Realsil Microelectronics Inc.) [File not signed] R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158864 2014-12-29] (XTab system) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [154320 2014-12-03] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.) S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [220528 2010-08-09] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [602944 2013-08-02] (McAfee, Inc.) S4 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [355440 2010-03-10] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [200056 2010-10-13] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-03-18] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.) R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.) R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R2 Update Dynamo Combo; C:\Program Files (x86)\Dynamo Combo\updateDynamoCombo.exe [529656 2015-01-17] () R2 Util Dynamo Combo; C:\Program Files (x86)\Dynamo Combo\bin\utilDynamoCombo.exe [529656 2015-01-17] () R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1021112 2011-03-30] (Sony Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [473088 2015-01-11] (Fuyu LIMITED) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-12] () R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2015-01-12] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-01-12] (AVAST Software) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2015-01-12] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-12] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-12] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-12] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-12] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-12] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-12] () R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.) U3 mfeapfk01; No ImagePath R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.) U3 mfeavfk01; No ImagePath R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [441264 2014-03-18] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96592 2014-03-18] (McAfee, Inc.) S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [94864 2010-10-13] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.) R1 {f81878fa-25e9-442d-8ada-79658b6520f2}Gw64; C:\Windows\System32\drivers\{f81878fa-25e9-442d-8ada-79658b6520f2}Gw64.sys [48792 2015-01-11] (StdLib) U3 pxldypog; \??\C:\Users\ALEKSA~1\AppData\Local\Temp\pxldypog.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-17 17:38 - 2015-01-17 17:38 - 00772846 _____ () C:\Users\Public\Documents\GMER.txt 2015-01-17 16:47 - 2015-01-17 16:47 - 00464410 _____ () C:\Users\Aleksandra\Downloads\GMER (1).txt 2015-01-17 16:43 - 2015-01-17 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2015-01-17 16:40 - 2015-01-17 16:40 - 00380416 _____ () C:\Users\Aleksandra\Downloads\9bnxt96w.exe 2015-01-17 16:02 - 2015-01-17 16:02 - 00000000 ___RD () C:\Users\Aleksandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2015-01-17 16:01 - 2015-01-17 16:02 - 00471288 _____ () C:\Windows\Minidump\011715-23259-01.dmp 2015-01-17 14:54 - 2015-01-17 14:54 - 00803622 _____ () C:\Users\Public\Documents\abc.txt 2015-01-17 14:08 - 2015-01-17 14:08 - 00003119 _____ () C:\Users\Aleksandra\Downloads\GMER.txt 2015-01-17 13:47 - 2015-01-17 13:47 - 00380416 _____ () C:\Users\Aleksandra\Downloads\t28fcyoo.exe 2015-01-17 13:45 - 2015-01-17 13:45 - 00370943 _____ () C:\Users\Aleksandra\Downloads\gmer.zip 2015-01-17 13:42 - 2015-01-17 13:42 - 00380416 _____ () C:\Users\Aleksandra\Downloads\ejv3hqpw.exe 2015-01-17 13:35 - 2015-01-17 13:35 - 00038476 _____ () C:\Users\Aleksandra\Downloads\Shortcut.txt 2015-01-17 13:33 - 2015-01-17 17:45 - 00025947 _____ () C:\Users\Aleksandra\Downloads\Addition.txt 2015-01-17 13:31 - 2015-01-17 17:46 - 00031118 _____ () C:\Users\Aleksandra\Downloads\FRST.txt 2015-01-17 12:47 - 2015-01-17 12:47 - 00380416 _____ () C:\Users\Aleksandra\Downloads\k2yhr43x.exe 2015-01-17 12:35 - 2015-01-17 17:44 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-17 12:35 - 2015-01-17 12:35 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-01-17 12:35 - 2015-01-17 12:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-17 12:35 - 2015-01-17 12:35 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-01-17 12:35 - 2015-01-17 12:35 - 00000000 ____D () C:\Windows\system32\Macromed 2015-01-17 12:35 - 2015-01-17 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2015-01-17 12:35 - 2015-01-17 12:35 - 00000000 ____D () C:\Program Files\7-Zip 2015-01-17 12:03 - 2015-01-17 12:03 - 02186752 _____ () C:\Users\Aleksandra\Downloads\AdwCleaner.exe 2015-01-17 11:51 - 2015-01-17 17:45 - 00000000 ____D () C:\FRST 2015-01-17 11:49 - 2015-01-17 11:49 - 02125824 _____ (Farbar) C:\Users\Aleksandra\Downloads\FRST64.exe 2015-01-16 19:38 - 2015-01-17 12:56 - 00000266 __RSH () C:\ProgramData\ntuser.pol 2015-01-16 10:43 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-16 10:43 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-01-16 10:43 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-01-16 10:43 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-01-16 10:43 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-01-16 10:43 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-01-16 10:43 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-01-16 10:43 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-01-15 02:26 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-15 02:26 - 2014-12-11 18:47 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-01-15 02:26 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-15 02:26 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2015-01-15 02:26 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2015-01-12 01:30 - 2015-01-12 01:30 - 00002231 _____ () C:\Users\Aleksandra\AppData\Local\recently-used.xbel 2015-01-12 01:20 - 2015-01-12 01:20 - 00194048 _____ () C:\Users\Aleksandra\Downloads\dane_przyklad.xls 2015-01-12 01:20 - 2015-01-12 01:20 - 00194048 _____ () C:\Users\Aleksandra\Downloads\dane_przyklad (1).xls 2015-01-12 00:15 - 2015-01-12 01:29 - 00003069 _____ () C:\Users\Aleksandra\Documents\CV.html~ 2015-01-12 00:15 - 2015-01-12 01:29 - 00003069 _____ () C:\Users\Aleksandra\Documents\CV.html 2015-01-12 00:12 - 2015-01-12 00:12 - 00000000 ____D () C:\Users\Aleksandra\AppData\Roaming\Dropbox 2015-01-12 00:07 - 2015-01-12 00:07 - 00001970 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk 2015-01-12 00:07 - 2015-01-12 00:07 - 00000871 _____ () C:\Users\Aleksandra\Downloads\zadanie3.html 2015-01-12 00:07 - 2015-01-12 00:07 - 00000871 _____ () C:\Users\Aleksandra\Documents\zadanie3.html 2015-01-12 00:06 - 2015-01-12 00:06 - 00449936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2015-01-12 00:06 - 2015-01-12 00:06 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2015-01-12 00:06 - 2015-01-12 00:00 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-01-12 00:02 - 2015-01-12 00:02 - 00000000 ____D () C:\Users\Aleksandra\AppData\Roaming\AVAST Software 2015-01-12 00:01 - 2015-01-12 00:01 - 00001316 _____ () C:\Users\Aleksandra\Documents\zadanie1.html 2015-01-12 00:00 - 2015-01-17 10:48 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2015-01-12 00:00 - 2015-01-12 00:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-01-12 00:00 - 2015-01-12 00:00 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00087912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2015-01-12 00:00 - 2015-01-12 00:00 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-01-12 00:00 - 2015-01-12 00:00 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2015-01-11 23:56 - 2015-01-11 23:56 - 00000000 ____D () C:\ProgramData\AVAST Software 2015-01-11 23:56 - 2015-01-11 23:56 - 00000000 ____D () C:\Program Files\AVAST Software 2015-01-11 23:55 - 2015-01-11 23:56 - 05006864 _____ (AVAST Software) C:\Users\Aleksandra\Downloads\avast_free_antivirus_setup_online.exe 2015-01-11 23:52 - 2015-01-11 03:40 - 00048792 _____ (StdLib) C:\Windows\system32\Drivers\{f81878fa-25e9-442d-8ada-79658b6520f2}Gw64.sys 2015-01-11 23:49 - 2015-01-12 01:30 - 00000000 ____D () C:\Users\Aleksandra\.bluefish 2015-01-11 23:49 - 2015-01-11 23:49 - 00000000 ____D () C:\Users\Aleksandra\AppData\Local\enchant 2015-01-11 23:45 - 2015-01-11 23:45 - 00001017 _____ () C:\Users\Public\Desktop\Bluefish.lnk 2015-01-11 23:44 - 2015-01-11 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluefish 2015-01-11 23:44 - 2015-01-11 23:44 - 00000000 ____D () C:\Program Files (x86)\Bluefish 2015-01-11 23:43 - 2015-01-12 00:04 - 00000000 ____D () C:\Program Files (x86)\XTab 2015-01-11 23:43 - 2015-01-11 23:43 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2015-01-11 23:43 - 2015-01-11 23:43 - 00000000 ____D () C:\ProgramData\IHProtectUpDate 2015-01-11 23:42 - 2015-01-17 17:10 - 00000000 ____D () C:\Program Files (x86)\Dynamo Combo 2015-01-11 23:42 - 2015-01-11 23:42 - 04508606 _____ () C:\Users\Aleksandra\Downloads\Bluefish-2.2.6-setup.exe 2015-01-11 23:42 - 2015-01-11 23:42 - 00000000 ____D () C:\Users\Aleksandra\AppData\Roaming\omiga-plus 2015-01-11 23:41 - 2015-01-11 23:41 - 00730528 _____ ( ) C:\Users\Aleksandra\Downloads\Bluefish(33929)-dp.exe 2015-01-11 23:40 - 2015-01-11 23:40 - 00003309 _____ () C:\Users\Aleksandra\Downloads\cv.html 2015-01-11 23:40 - 2015-01-11 23:40 - 00001805 _____ () C:\Users\Aleksandra\Downloads\tabela_1.html 2015-01-11 23:40 - 2015-01-11 23:40 - 00001472 _____ () C:\Users\Aleksandra\Downloads\tabela_3.html 2015-01-08 21:00 - 2015-01-17 16:03 - 00000000 ____D () C:\Users\Aleksandra\AppData\Local\Spotify 2015-01-08 21:00 - 2015-01-08 21:00 - 00001826 _____ () C:\Users\Aleksandra\Desktop\Spotify.lnk 2015-01-08 21:00 - 2015-01-08 21:00 - 00001812 _____ () C:\Users\Aleksandra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2015-01-08 20:58 - 2015-01-17 16:03 - 00000000 ____D () C:\Users\Aleksandra\AppData\Roaming\Spotify 2015-01-08 20:57 - 2015-01-08 20:57 - 00137888 _____ (Spotify Ltd) C:\Users\Aleksandra\Downloads\SpotifySetup.exe 2014-12-18 21:26 - 2014-12-18 21:26 - 00000000 ____D () C:\output 2014-12-18 00:20 - 2014-12-18 00:20 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-12-18 00:20 - 2014-12-18 00:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-12-18 00:20 - 2014-12-18 00:20 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-12-18 00:20 - 2014-12-18 00:20 - 00000000 ____D () C:\Program Files\iTunes 2014-12-18 00:20 - 2014-12-18 00:20 - 00000000 ____D () C:\Program Files\iPod 2014-12-18 00:20 - 2014-12-18 00:20 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-12-18 00:01 - 2014-12-18 00:06 - 122418480 _____ (Apple Inc.) C:\Users\Aleksandra\Downloads\iTunes64Setup.exe ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-17 17:45 - 2014-08-28 20:34 - 00000000 ____D () C:\Users\Aleksandra\AppData\Local\CrashDumps 2015-01-17 17:36 - 2014-03-11 18:12 - 01952811 _____ () C:\Windows\WindowsUpdate.log 2015-01-17 17:15 - 2014-03-11 18:30 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-17 16:12 - 2009-07-14 05:45 - 00028848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-17 16:12 - 2009-07-14 05:45 - 00028848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-17 16:11 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini 2015-01-17 16:02 - 2014-03-11 18:30 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-17 16:02 - 2014-03-11 18:23 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-01-17 16:02 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-17 16:01 - 2014-04-04 23:08 - 1224231362 _____ () C:\Windows\MEMORY.DMP 2015-01-17 16:01 - 2014-04-04 23:08 - 00000000 ____D () C:\Windows\Minidump 2015-01-17 16:01 - 2010-11-21 04:47 - 00251016 _____ () C:\Windows\PFRO.log 2015-01-17 16:01 - 2009-07-14 05:51 - 00068630 _____ () C:\Windows\setupact.log 2015-01-17 13:57 - 2011-02-14 21:50 - 00741124 _____ () C:\Windows\system32\perfh015.dat 2015-01-17 13:57 - 2011-02-14 21:50 - 00156408 _____ () C:\Windows\system32\perfc015.dat 2015-01-17 13:57 - 2009-07-14 06:13 - 01672070 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-01-17 13:28 - 2014-03-11 18:27 - 00000000 ____D () C:\ProgramData\McAfee 2015-01-17 11:13 - 2014-03-11 18:15 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8FFE9A2E-7DCD-484D-903C-3A1872DE3B84} 2015-01-16 19:37 - 2014-03-11 18:28 - 00000000 ____D () C:\Program Files (x86)\McAfee 2015-01-15 02:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy 2015-01-11 23:49 - 2014-03-11 18:13 - 00000000 ____D () C:\Users\Aleksandra 2015-01-09 21:28 - 2014-03-19 15:46 - 00017408 ____H () C:\Users\Aleksandra\Desktop\photothumb.db 2015-01-06 00:28 - 2014-05-12 10:19 - 00071976 _____ () C:\test.xml 2015-01-05 23:45 - 2014-03-11 18:14 - 00000000 ____D () C:\ProgramData\Sony Corporation 2014-12-19 11:37 - 2014-06-21 10:58 - 00000000 ____D () C:\Users\Aleksandra\Desktop\[] 2014-12-18 22:24 - 2014-03-11 18:15 - 00000000 ____D () C:\Users\Aleksandra\Documents\Bluetooth Folder 2014-12-18 00:20 - 2014-08-05 18:54 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-12-18 00:20 - 2014-03-13 23:29 - 00000000 ____D () C:\Program Files\Common Files\Apple ==================== Files in the root of some directories ======= 2014-09-05 12:05 - 2014-09-05 12:06 - 0004608 _____ () C:\Users\Aleksandra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-01-12 01:30 - 2015-01-12 01:30 - 0002231 _____ () C:\Users\Aleksandra\AppData\Local\recently-used.xbel Some content of TEMP: ==================== C:\Users\Aleksandra\AppData\Local\Temp\drm_dialogs.dll C:\Users\Aleksandra\AppData\Local\Temp\drm_dyndata_7330014.dll C:\Users\Aleksandra\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-16 21:09 ==================== End Of Log ============================