Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04 Ran by justynka (administrator) on KOMPUTERJUSTYNY on 17-04-2015 17:11:52 Running from C:\Users\justynka\Desktop Loaded Profiles: justynka (Available profiles: justynka) Platform: Windows 8.1 (X64) OS Language: Angielski (Stany Zjednoczone) Internet Explorer Version 11 (Default browser: IE) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2556768 2013-10-09] (TOSHIBA Corporation) HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-22] (TOSHIBA Corporation) HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [179040 2013-10-15] (TOSHIBA Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-21] (Avast Software s.r.o.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2535683076-3279026183-770477073-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-2535683076-3279026183-770477073-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2535683076-3279026183-770477073-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://mystart.toshiba.com/ HKU\S-1-5-21-2535683076-3279026183-770477073-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.toshiba.com SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-21] (Avast Software s.r.o.) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-21] (Avast Software s.r.o.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\justynka\AppData\Roaming\Mozilla\Firefox\Profiles\ii5a63xg.default FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=616_pr__alt__ddc_dsssyctab_bd_com FF SelectedSearchEngine: Yahoo! Search FF Homepage: about:home FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=616_pr__alt__ddc_dss_bd_com&p= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\justynka\AppData\Roaming\Mozilla\Firefox\Profiles\ii5a63xg.default\user.js [2015-03-21] FF SearchPlugin: C:\Users\justynka\AppData\Roaming\Mozilla\Firefox\Profiles\ii5a63xg.default\searchplugins\dsrlte.xml [2015-03-14] FF SearchPlugin: C:\Users\justynka\AppData\Roaming\Mozilla\Firefox\Profiles\ii5a63xg.default\searchplugins\search-simple.xml [2015-03-20] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-21] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-21] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-21] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-21] (Avast Software) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-11-06] () R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-21] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-21] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-21] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-21] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-21] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-21] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-21] () R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [2946264 2013-10-19] (Realtek Semiconductor Corporation ) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-08-06] (Synaptics Incorporated) R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider) R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-02] (Intel Corporation) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-21] (Avast Software) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-17 17:11 - 2015-04-17 17:11 - 00008859 _____ () C:\Users\justynka\Desktop\FRST.txt 2015-04-17 16:54 - 2015-04-17 13:17 - 02097664 _____ (Farbar) C:\Users\justynka\Desktop\FRST64.exe 2015-04-15 19:32 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-04-15 19:32 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-04-15 19:32 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-04-15 19:32 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-04-15 19:32 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-04-15 19:32 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2015-04-15 19:32 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-04-15 19:32 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-04-15 19:32 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-04-15 19:32 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-04-15 19:32 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-04-15 19:32 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-04-15 19:32 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-04-15 19:32 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-04-15 19:32 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-04-15 19:32 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-04-15 19:32 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-04-15 19:32 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-04-15 19:32 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-04-15 19:32 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-04-15 19:32 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-04-15 19:32 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-04-15 19:32 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-04-15 19:32 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-04-15 19:32 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-04-15 19:32 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-04-15 19:32 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2015-04-15 19:32 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-04-15 19:32 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-04-15 19:32 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-04-15 19:32 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-04-15 19:32 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-04-15 19:32 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-04-15 19:32 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-04-15 19:32 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-04-15 19:32 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-04-15 19:32 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2015-04-15 19:32 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll 2015-04-15 19:32 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll 2015-04-15 19:32 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-04-15 19:32 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2015-04-15 19:30 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-04-15 19:30 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-04-15 19:30 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-04-15 19:30 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-04-15 19:30 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-04-15 19:30 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-04-15 19:30 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-04-15 19:30 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-04-15 19:30 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-04-15 19:30 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2015-04-15 19:30 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2015-04-15 19:30 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-04-15 19:30 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-04-15 19:30 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-04-15 19:30 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-04-15 19:30 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-04-15 19:30 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-04-15 19:30 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-04-15 19:30 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-04-15 19:30 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2015-04-11 20:28 - 2015-04-11 20:28 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-04-11 20:28 - 2015-04-11 20:28 - 00000000 ___SD () C:\Windows\system32\GWX 2015-04-09 17:58 - 2015-03-11 04:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 00943104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-04-09 17:58 - 2015-03-11 00:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-04-07 22:31 - 2015-04-07 22:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2015-04-07 20:58 - 2015-03-21 21:57 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe 2015-04-07 16:48 - 2015-04-17 17:11 - 00000000 ____D () C:\FRST 2015-03-28 21:51 - 2015-04-16 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2015-03-28 21:51 - 2015-03-28 21:51 - 00001142 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-03-28 21:51 - 2015-03-28 21:51 - 00001130 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2015-03-28 21:49 - 2015-03-28 21:49 - 00243480 _____ () C:\Users\justynka\Downloads\Firefox Setup Stub 36.0.4.exe 2015-03-28 20:07 - 2015-03-28 20:07 - 00000000 _____ () C:\autoexec.bat 2015-03-22 01:02 - 2015-03-22 01:02 - 00000000 ____D () C:\Windows\SysWOW64\vbox 2015-03-22 01:02 - 2015-03-22 01:02 - 00000000 ____D () C:\Windows\system32\vbox 2015-03-21 22:01 - 2015-03-21 22:01 - 00000000 ____D () C:\Users\justynka\AppData\Roaming\AVAST Software 2015-03-21 21:59 - 2015-04-08 06:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-03-21 21:59 - 2015-04-07 20:58 - 00001949 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2015-03-21 21:58 - 2015-04-16 09:49 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2015-03-21 21:58 - 2015-03-21 21:57 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00441728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00268640 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2015-03-21 21:58 - 2015-03-21 21:57 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2015-03-21 21:57 - 2015-03-21 21:57 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr 2015-03-21 21:53 - 2015-03-21 21:53 - 00000000 ____D () C:\Program Files\AVAST Software 2015-03-21 21:51 - 2015-03-21 21:51 - 00000000 ____D () C:\ProgramData\AVAST Software ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-17 17:09 - 2015-01-17 11:59 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2015-04-17 17:09 - 2013-08-22 16:46 - 00036176 _____ () C:\Windows\setupact.log 2015-04-17 17:09 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-04-17 17:08 - 2014-03-31 20:44 - 01270096 _____ () C:\Windows\WindowsUpdate.log 2015-04-17 17:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI 2015-04-17 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru 2015-04-17 16:58 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\GroupPolicy 2015-04-17 16:57 - 2013-08-22 15:25 - 00000269 _____ () C:\Windows\win.ini 2015-04-17 16:52 - 2014-07-04 22:08 - 00807134 _____ () C:\Windows\system32\perfh015.dat 2015-04-17 16:52 - 2014-07-04 22:08 - 00163478 _____ () C:\Windows\system32\perfc015.dat 2015-04-17 16:52 - 2013-12-03 13:53 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-04-17 15:32 - 2015-01-05 22:20 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-04-17 11:11 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp 2015-04-16 19:38 - 2014-05-30 03:21 - 00003966 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{53F91236-90B3-426B-B46E-D36D9FEB7645} 2015-04-15 22:41 - 2014-12-13 01:59 - 00000000 ____D () C:\Windows\system32\appraiser 2015-04-15 22:41 - 2014-07-14 09:51 - 00000000 ___SD () C:\Windows\system32\CompatTel 2015-04-15 17:51 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness 2015-04-14 20:20 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache 2015-04-14 19:35 - 2015-01-05 22:20 - 00003818 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-04-14 01:24 - 2014-08-17 19:32 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-04-14 01:24 - 2014-08-17 19:32 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-04-12 21:13 - 2014-09-23 18:07 - 00000000 ____D () C:\Users\justynka\Desktop\wszystko 2015-04-11 14:05 - 2014-05-30 03:22 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2535683076-3279026183-770477073-1001 2015-04-09 21:53 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF 2015-04-08 06:48 - 2013-08-22 21:12 - 00000000 ____D () C:\Windows\ShellNew 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 __RSD () C:\Windows\Media 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\ras 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MSDRM 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\icsxml 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\Com 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ras 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MSDRM 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\icsxml 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ias 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Com 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system\Speech 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\L2Schemas 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender 2015-04-08 06:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System 2015-04-08 06:48 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe 2015-04-08 06:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\registration 2015-04-08 06:24 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep 2015-04-08 06:22 - 2014-05-30 03:15 - 00000000 ____D () C:\Users\justynka\AppData\Local\Packages 2015-04-07 21:01 - 2013-12-03 13:43 - 00491674 _____ () C:\Windows\PFRO.log 2015-04-07 20:54 - 2014-05-30 03:15 - 00000000 ____D () C:\Users\justynka 2015-04-07 11:11 - 2014-07-10 20:25 - 00000000 ____D () C:\Users\justynka\AppData\Local\CrashDumps 2015-03-21 21:47 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP 2015-03-21 21:47 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2015-03-21 21:24 - 2015-01-31 19:29 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2015-03-21 19:24 - 2014-07-09 13:15 - 00000000 ____D () C:\Users\justynka\AppData\Local\Adobe 2015-03-21 00:45 - 2015-03-15 23:12 - 00000100 _____ () C:\Users\justynka\AppData\Roaming\WB.CFG ==================== Files in the root of some directories ======= 2015-03-15 23:12 - 2015-03-21 00:45 - 0000100 _____ () C:\Users\justynka\AppData\Roaming\WB.CFG 2014-03-31 20:32 - 2014-03-31 20:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-04-07 10:55 ==================== End Of Log ============================