Witam. Od jakiś dwóch tygodni mam problem z wysakującymi reklamami w przeglądarce. Pojawiają się one w nowych oknach. Często pojawia się też komunikat, że oprogramowanie java jest przestarzałe, po czym gdy je zamykam przekierowuje mnie na inną jakąś stronę. A od wczoraj przeglądarka Chrom nie chce się otworzyć. Czyściłam ADW Cleanerem i kilkoma innymi programami antywirusowymi ale nic nie pomogło. Siedzę na tym od kilku godzin i już nie wiem co robić. Bardzo proszę o pomoc.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Magda (ATTENTION: The logged in user is not administrator) on LAPTOPXD on 20-09-2014 12:57:48
Running from C:\Users\Magda\Desktop
Platform: Windows 8 (X64) OS Language: Polski (Polska)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] = & gt; C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] = & gt; C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1260256 2013-01-04] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] = & gt; C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Bitcasa] = & gt; C:\Program Files\Bitcasa\Bitcasa.exe [4365824 2012-12-27] (Bitcasa, Inc)
HKLM-x32\...\Run: [RemoteControl10] = & gt; C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] = & gt; C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] = & gt; C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = & gt; C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(SM) center] = & gt; C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] = & gt; C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-07] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [HP Software Update] = & gt; C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] = & gt; [X]
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] = & gt; C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-24] ( (Atheros Communications))
HKU\S-1-5-21-3691044786-844057909-788077212-1001\...\Run: [Skype] = & gt; C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-3691044786-844057909-788077212-1005\...\Run: [GoogleChromeAutoLaunch_76E6F1E6CD9BBCD65C275B24BF29DFB4] = & gt; C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-3691044786-844057909-788077212-1005\...\MountPoints2: {b692b3c3-1805-11e4-bfdd-1867b07ea23e} - " E:\LGAutoRun.exe "
Startup: C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk - & gt; C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: 00avast - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; No File
ShellIconOverlayIdentifiers: 1EldosIconOverlay - & gt; {CF19CBDD-4B4E-4313-ACC7-D5CABF65CE6C} = & gt; C:\windows\SYSTEM32\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: BitcasaIconOverlay - & gt; {A6975448-A999-49BB-B3E4-7730CF6A82C0} = & gt; C:\Program Files\Bitcasa\ExplorerMenu.dll (Bitcasa, Inc)
ShellIconOverlayIdentifiers: BitcasaProgressOverlay - & gt; {6FB8D52A-0064-45B2-B687-F596FEAD09C2} = & gt; C:\Program Files\Bitcasa\ExplorerMenu.dll (Bitcasa, Inc)
ShellIconOverlayIdentifiers: DropboxExt1 - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers: DropboxExt2 - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers: DropboxExt3 - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers: DropboxExt4 - & gt; {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers: EldosIconOverlay - & gt; {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} = & gt; C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: 1EldosIconOverlay - & gt; {CF19CBDD-4B4E-4313-ACC7-D5CABF65CE6C} = & gt; C:\windows\SysWOW64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: DropboxExt1 - & gt; {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 - & gt; {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 - & gt; {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = & gt; No File
ShellIconOverlayIdentifiers-x32: EldosIconOverlay - & gt; {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} = & gt; C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung13.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung13.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp1
SearchScopes: HKLM - {6D94B9F1-0F62-42F7-B0B3-CFEFB55A7E97} URL = http://www.bing.com/search?q={searchTerms} & form=IE10TR & src=IE10TR & pc=MASMJS
SearchScopes: HKLM-x32 - {6D94B9F1-0F62-42F7-B0B3-CFEFB55A7E97} URL = http://www.bing.com/search?q={searchTerms} & form=IE10TR & src=IE10TR & pc=MASMJS
SearchScopes: HKCU - {6D94B9F1-0F62-42F7-B0B3-CFEFB55A7E97} URL =
BHO: TermTutor - & gt; {6CB99040-7828-4C37-AC01-F15758F43E4D} - & gt; C:\Program Files\TermTutor\IE\TermTutorClientIE.dll (Term Tutor)
BHO: CIESpeechBHO Class - & gt; {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - & gt; C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Adobe PDF Link Helper - & gt; {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - & gt; C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: TermTutor - & gt; {6CB99040-7828-4C37-AC01-F15758F43E4D} - & gt; C:\Program Files (x86)\TermTutor\IE\TermTutorClientIE.dll (Term Tutor)
BHO-x32: No Name - & gt; {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - & gt; No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - & gt; {DBC80044-A445-435b-BC74-9C25C1C588A9} - & gt; C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{CCEE1E7A-E679-48F9-AE19-EA2715185A2E}: [NameServer] 8.8.8.8,8.8.4.4
FireFox:
========
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - & gt; C:\Users\Ogólny\Desktop\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - & gt; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_45 - & gt; C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - & gt; C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - & gt; C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - & gt; C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - & gt; C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
Chrome:
=======
Error reading preferences. Please check " preferences " file for possible corruption. & lt; ======= ATTENTION
CHR Profile: C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-11]
CHR Extension: (Google Drive) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-11]
CHR Extension: (YouTube) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-11]
CHR Extension: (Google Search) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-11]
CHR Extension: (avast! Online Security) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-19]
CHR Extension: (Website Blocker (Beta)) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2014-09-20]
CHR Extension: (AnviAdblock) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmiofmipcpmhgihiecmpiekcacigpgb [2014-09-19]
CHR Extension: (Google Wallet) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-11]
CHR Extension: (Gmail) - C:\Users\Magda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-11]
CHR HKLM-x32\...\Chrome\Extension: [lhmiofmipcpmhgihiecmpiekcacigpgb] - C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\chrome.crx [2014-04-30]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction & lt; ======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated)
R2 ASD2Svc; C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe [1206504 2014-08-20] (Anvisoft)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-24] (Qualcomm Atheros Commnucations)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1594416 2013-02-01] (Samsung Electronics CO., LTD.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [23040 2012-09-20] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [23040 2012-09-20] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R2 nsi; C:\Windows\SysWOW64\svchost.exe [23040 2012-09-20] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
R2 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2883120 2013-01-25] (Samsung Electronics CO., LTD.)
R2 ttsvc; C:\Program Files (x86)\TermTutor\Service\ttsvc.exe [276048 2014-09-04] (Term Tutor)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 asd2fsm; C:\Windows\System32\DRIVERS\asd2fsm.sys [48656 2014-08-20] (Anvisoft)
R1 Asdids; C:\Windows\system32\DRIVERS\asdids.sys [47632 2014-08-20] (Anvisoft)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222952 2013-01-24] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 BthMtpEnum; C:\Windows\system32\DRIVERS\BthMtpEnum.sys [64512 2012-07-26] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [14872 2014-01-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R1 ttnfd; C:\Windows\System32\drivers\ttnfd.sys [58232 2014-09-04] (Term Tutor)
S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
S3 pccsmcfd; \SystemRoot\system32\DRIVERS\pccsmcfdx64.sys [X]
S3 SBIOSIO; \??\C:\Windows\Temp\SBIOSIO64.SYS [X]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 12:57 - 2014-09-20 12:58 - 00016896 _____ () C:\Users\Magda\Desktop\FRST.txt
2014-09-20 12:57 - 2014-09-20 12:57 - 02105856 _____ (Farbar) C:\Users\Magda\Desktop\FRST64.exe
2014-09-20 12:57 - 2014-09-20 12:57 - 00000000 ____D () C:\FRST
2014-09-20 12:43 - 2014-09-20 12:43 - 00602112 _____ (OldTimer Tools) C:\Users\Magda\Desktop\OTL.exe
2014-09-20 12:41 - 2014-09-20 12:41 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Magda\Desktop\SpyHunter-Installer.exe
2014-09-20 12:39 - 2014-09-20 12:39 - 00000004 _____ () C:\Users\Magda\AppData\Roaming\appdataFr2.bin
2014-09-20 12:31 - 2014-09-20 12:31 - 00000000 ___RD () C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-20 11:52 - 2014-09-20 11:52 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-20 11:52 - 2014-09-20 11:52 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\Mozilla
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-20 11:51 - 2014-09-20 11:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-20 00:40 - 2014-09-20 00:40 - 00000004 _____ () C:\Users\Ogólny\AppData\Roaming\appdataFr2.bin
2014-09-19 16:39 - 2014-09-19 16:39 - 00001191 _____ () C:\Users\Public\Desktop\Anvi Smart Defender.lnk
2014-09-19 16:39 - 2014-09-19 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
2014-09-19 16:38 - 2014-08-20 08:52 - 00048656 _____ (Anvisoft) C:\windows\system32\Drivers\asd2fsm.sys
2014-09-19 16:37 - 2014-09-19 16:37 - 00000000 ____D () C:\ProgramData\Anvisoft
2014-09-19 16:37 - 2014-09-19 16:37 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-09-19 16:35 - 2014-09-19 16:36 - 36024808 _____ (Anvisoft) C:\Users\Magda\Downloads\asdsetup.exe
2014-09-19 16:31 - 2014-09-19 16:31 - 00747456 _____ ( ) C:\Users\Magda\Downloads\Anvi-Smart-Defender(31911)-dp.exe
2014-09-19 16:26 - 2014-09-19 16:27 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\Dropbox
2014-09-19 16:07 - 2014-09-20 10:51 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-09-19 16:07 - 2014-09-19 16:07 - 04862664 _____ (AVAST Software) C:\Users\Magda\Downloads\avast_free_antivirus_setup_online.exe
2014-09-19 16:01 - 2014-09-19 16:01 - 00010312 _____ () C:\windows\DPINST.LOG
2014-09-19 15:52 - 2014-09-19 15:53 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Magda\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-09-19 15:51 - 2014-09-19 15:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Magda\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-19 15:19 - 2014-09-19 15:20 - 01373475 _____ () C:\Users\Magda\Desktop\AdwCleaner.exe
2014-09-15 18:37 - 2014-09-15 18:37 - 00000000 ____D () C:\ProgramData\RandomDealApp
2014-09-14 18:56 - 2014-09-14 19:31 - 00000113 ____H () C:\Users\Magda\Desktop\.~lock.transport morski.odt#
2014-09-14 18:41 - 2014-09-14 18:41 - 00000000 ____D () C:\windows\Hewlett-Packard
2014-09-13 17:16 - 2014-09-13 17:16 - 00016874 _____ () C:\Users\Magda\Desktop\Zagadnienia Budowa wnętrza Ziemi + skały + datowanie dziejów Ziemi.odt
2014-09-11 18:01 - 2014-08-16 11:34 - 01407488 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-09-11 18:01 - 2014-08-16 11:34 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-09-11 18:01 - 2014-08-16 11:33 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-09-11 18:01 - 2014-08-16 11:33 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-09-11 18:01 - 2014-08-16 11:32 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-09-11 18:01 - 2014-08-16 11:32 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-09-11 18:01 - 2014-08-16 11:32 - 00451584 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-09-11 18:01 - 2014-08-16 11:32 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-09-11 18:01 - 2014-08-16 09:37 - 01180672 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-09-11 18:01 - 2014-08-16 09:36 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-09-11 18:01 - 2014-08-16 09:36 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-09-11 18:01 - 2014-08-16 09:36 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-09-11 18:01 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-09-11 18:01 - 2014-08-16 09:36 - 00080384 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-09-11 18:01 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-09-11 18:01 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-09-11 18:01 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-09-11 18:01 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-09-11 18:01 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-09-11 18:01 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-09-11 18:01 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-09-11 18:01 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-09-11 18:01 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-09-11 18:01 - 2012-07-26 05:06 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-09-11 18:00 - 2014-08-16 11:34 - 02239488 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-09-11 18:00 - 2014-08-16 11:34 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-09-11 18:00 - 2014-08-16 11:33 - 19280384 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-09-11 18:00 - 2014-08-16 11:32 - 15399424 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-09-11 18:00 - 2014-08-16 11:32 - 02655232 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-09-11 18:00 - 2014-08-16 11:32 - 01508864 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-09-11 18:00 - 2014-08-16 11:32 - 00255488 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-09-11 18:00 - 2014-08-16 09:37 - 01766400 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-09-11 18:00 - 2014-08-16 09:36 - 13757440 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-09-11 18:00 - 2014-08-16 09:36 - 02861568 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-09-11 18:00 - 2014-08-16 09:36 - 02055168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-09-11 18:00 - 2014-08-16 09:36 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-09-11 18:00 - 2014-08-16 09:35 - 01440768 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-09-11 18:00 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-09-11 18:00 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-09-11 18:00 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-09-11 18:00 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-09-11 18:00 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-09-11 17:59 - 2014-08-16 09:36 - 14369280 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-09-11 16:38 - 2014-09-11 16:39 - 21360800 _____ (Mooii) C:\Users\Magda\Desktop\PhotoScape_V3.7.exe
2014-09-10 18:52 - 2014-08-01 01:40 - 01287680 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2014-09-10 18:52 - 2014-06-05 03:12 - 00678600 _____ (Microsoft Corporation) C:\windows\system32\msvcp120_clr0400.dll
2014-09-10 18:52 - 2014-06-04 01:12 - 00536776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp120_clr0400.dll
2014-09-10 18:51 - 2014-08-28 13:34 - 00059400 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-09-10 18:51 - 2014-08-28 08:05 - 00630272 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-09-10 18:51 - 2014-08-28 08:05 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-09-10 18:51 - 2014-08-28 08:05 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-09-10 18:51 - 2014-08-28 08:05 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-09-10 18:51 - 2014-08-28 08:02 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-09-10 18:51 - 2014-08-28 08:01 - 03285504 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 01623552 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-09-10 18:51 - 2014-08-28 08:01 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-09-10 18:50 - 2014-09-05 00:36 - 00755712 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-10 18:50 - 2014-09-03 03:49 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-10 18:50 - 2014-07-24 05:33 - 00875688 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2014-09-10 18:50 - 2014-07-24 05:33 - 00869544 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2014-09-09 18:17 - 2014-09-09 18:17 - 00000000 ____D () C:\Program Files\TermTutor
2014-09-09 18:16 - 2014-09-09 18:17 - 00000000 ____D () C:\Program Files (x86)\TermTutor
2014-09-05 23:51 - 2014-09-05 23:51 - 00000000 ____D () C:\ProgramData\e9f99976c2f74b87
2014-09-04 19:22 - 2014-09-04 19:22 - 00058232 _____ (Term Tutor) C:\windows\system32\Drivers\ttnfd.sys
2014-08-31 23:38 - 2014-08-31 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2014-08-27 17:26 - 2014-09-18 17:17 - 00000000 ____D () C:\Users\Magda\Desktop\Originals
2014-08-26 18:37 - 2014-08-26 18:37 - 512551277 _____ () C:\windows\MEMORY.DMP
2014-08-26 18:37 - 2014-08-26 18:37 - 00000000 ____D () C:\windows\Minidump
2014-08-23 22:25 - 2014-08-23 22:25 - 00000113 ____H () C:\Users\Magda\Desktop\.~lock.hotel king-recenzja.txt#
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 12:58 - 2014-09-20 12:57 - 00016896 _____ () C:\Users\Magda\Desktop\FRST.txt
2014-09-20 12:58 - 2014-01-22 22:53 - 00000962 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3691044786-844057909-788077212-1002UA.job
2014-09-20 12:57 - 2014-09-20 12:57 - 02105856 _____ (Farbar) C:\Users\Magda\Desktop\FRST64.exe
2014-09-20 12:57 - 2014-09-20 12:57 - 00000000 ____D () C:\FRST
2014-09-20 12:56 - 2014-06-05 23:55 - 00000000 ____D () C:\AdwCleaner
2014-09-20 12:49 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\system32\sru
2014-09-20 12:47 - 2013-11-10 21:06 - 00001066 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-20 12:43 - 2014-09-20 12:43 - 00602112 _____ (OldTimer Tools) C:\Users\Magda\Desktop\OTL.exe
2014-09-20 12:42 - 2013-11-12 00:51 - 00402944 ___SH () C:\Users\Magda\Downloads\Thumbs.db
2014-09-20 12:41 - 2014-09-20 12:41 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Magda\Desktop\SpyHunter-Installer.exe
2014-09-20 12:39 - 2014-09-20 12:39 - 00000004 _____ () C:\Users\Magda\AppData\Roaming\appdataFr2.bin
2014-09-20 12:36 - 2013-03-10 06:01 - 00794946 _____ () C:\windows\system32\perfh015.dat
2014-09-20 12:36 - 2013-03-10 06:01 - 00159530 _____ () C:\windows\system32\perfc015.dat
2014-09-20 12:36 - 2013-03-10 05:51 - 00741800 _____ () C:\windows\system32\perfh007.dat
2014-09-20 12:36 - 2013-03-10 05:51 - 00155360 _____ () C:\windows\system32\perfc007.dat
2014-09-20 12:36 - 2013-03-10 05:40 - 00790022 _____ () C:\windows\system32\perfh00C.dat
2014-09-20 12:36 - 2013-03-10 05:40 - 00155084 _____ () C:\windows\system32\perfc00C.dat
2014-09-20 12:36 - 2013-03-10 05:30 - 00785550 _____ () C:\windows\system32\perfh013.dat
2014-09-20 12:36 - 2013-03-10 05:30 - 00158586 _____ () C:\windows\system32\perfc013.dat
2014-09-20 12:36 - 2012-07-26 09:28 - 04579878 _____ () C:\windows\system32\PerfStringBackup.INI
2014-09-20 12:31 - 2014-09-20 12:31 - 00000000 ___RD () C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-20 12:29 - 2013-11-10 21:06 - 00001062 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-20 12:29 - 2013-03-09 15:10 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-09-20 12:29 - 2012-07-26 09:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-09-20 12:28 - 2014-08-01 01:21 - 00847652 _____ () C:\windows\PFRO.log
2014-09-20 11:59 - 2013-11-11 01:42 - 00000000 ____D () C:\Users\Magda\AppData\Local\Google
2014-09-20 11:59 - 2013-11-10 21:06 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-20 11:52 - 2014-09-20 11:52 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-20 11:52 - 2014-09-20 11:52 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\Mozilla
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-20 11:52 - 2014-09-20 11:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-20 11:52 - 2014-09-20 11:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-20 11:03 - 2014-02-01 20:27 - 00000000 ____D () C:\Users\Magda\Downloads\Zapach Śmierci - Reeker 2005 DVDRip.XviD.lek.pl
2014-09-20 10:51 - 2014-09-19 16:07 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-09-20 02:56 - 2013-12-08 17:36 - 00001107 _____ () C:\Users\Magda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\the best of k-pop.lnk
2014-09-20 00:40 - 2014-09-20 00:40 - 00000004 _____ () C:\Users\Ogólny\AppData\Roaming\appdataFr2.bin
2014-09-19 23:55 - 2013-11-11 03:31 - 06599680 ___SH () C:\Users\Magda\Desktop\Thumbs.db
2014-09-19 23:54 - 2013-11-11 01:40 - 00000000 ____D () C:\Users\Magda\AppData\Roaming\Atheros
2014-09-19 20:37 - 2014-07-27 00:03 - 00000000 ____D () C:\Users\Magda\Desktop\blog
2014-09-19 20:28 - 2014-08-01 01:23 - 01146805 _____ () C:\windows\WindowsUpdate.log
2014-09-19 20:20 - 2013-11-11 01:40 - 00000000 ____D () C:\Users\Magda\Documents\Bluetooth Folder
2014-09-19 20:11 - 2012-07-26 09:59 - 00000000 ____D () C:\windows\CbsTemp
2014-09-19 16:39 - 2014-09-19 16:39 - 00001191 _____ () C:\Users\Public\Desktop\Anvi Smart Defender.lnk
2014-09-19 16:39 - 2014-09-19 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
2014-09-19 16:37 - 2014-09-19 16:37 - 00000000 ____D () C:\ProgramData\Anvisoft
2014-09-19 16:37 - 2014-09-19 16:37 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-09-19 16:36 - 2014-09-19 16:35 - 36024808 _____ (Anvisoft) C:\Users\Magda\Downloads\asdsetup.exe
2014-09-19 16:31 - 2014-09-19 16:31 - 00747456 _____ ( ) C:\Users\Magda\Downloads\Anvi-Smart-Defender(31911)-dp.exe
2014-09-19 16:27 - 2014-09-19 16:26 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\Dropbox
2014-09-19 16:14 - 2013-11-12 14:50 - 00000000 ____D () C:\Users\Magda\AppData\Local\CrashDumps
2014-09-19 16:07 - 2014-09-19 16:07 - 04862664 _____ (AVAST Software) C:\Users\Magda\Downloads\avast_free_antivirus_setup_online.exe
2014-09-19 16:04 - 2013-12-22 22:15 - 00000000 ____D () C:\Program Files (x86)\Coolspot BV
2014-09-19 16:02 - 2013-03-09 15:11 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-09-19 16:01 - 2014-09-19 16:01 - 00010312 _____ () C:\windows\DPINST.LOG
2014-09-19 15:59 - 2013-12-15 00:32 - 00000000 __SHD () C:\windows\SysWOW64\AI_RecycleBin
2014-09-19 15:53 - 2014-09-19 15:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Magda\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-09-19 15:52 - 2014-09-19 15:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Magda\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-19 15:20 - 2014-09-19 15:19 - 01373475 _____ () C:\Users\Magda\Desktop\AdwCleaner.exe
2014-09-18 17:17 - 2014-08-27 17:26 - 00000000 ____D () C:\Users\Magda\Desktop\Originals
2014-09-18 17:16 - 2013-12-04 18:30 - 00020480 ____H () C:\Users\Magda\Desktop\photothumb.db
2014-09-17 21:58 - 2014-01-22 22:53 - 00000940 _____ () C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3691044786-844057909-788077212-1002Core.job
2014-09-17 17:47 - 2014-01-24 04:56 - 00000000 ____D () C:\Users\Magda\Desktop\inspirations
2014-09-16 16:53 - 2013-12-13 19:31 - 00000000 ____D () C:\Users\Magda\Desktop\geografia
2014-09-15 20:09 - 2013-03-09 14:59 - 00000000 ____D () C:\ProgramData\WinClon
2014-09-15 18:53 - 2014-04-20 12:55 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\Skype
2014-09-15 18:37 - 2014-09-15 18:37 - 00000000 ____D () C:\ProgramData\RandomDealApp
2014-09-15 17:57 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\rescache
2014-09-14 19:31 - 2014-09-14 18:56 - 00000113 ____H () C:\Users\Magda\Desktop\.~lock.transport morski.odt#
2014-09-14 18:43 - 2013-11-12 19:48 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\HpUpdate
2014-09-14 18:43 - 2013-11-12 19:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-09-14 18:43 - 2013-11-12 19:48 - 00000000 ____D () C:\Program Files (x86)\HP
2014-09-14 18:41 - 2014-09-14 18:41 - 00000000 ____D () C:\windows\Hewlett-Packard
2014-09-14 18:41 - 2013-11-19 20:52 - 00000000 ____D () C:\Users\Magda\AppData\Roaming\HpUpdate
2014-09-14 18:33 - 2014-08-08 17:23 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-09-13 17:16 - 2014-09-13 17:16 - 00016874 _____ () C:\Users\Magda\Desktop\Zagadnienia Budowa wnętrza Ziemi + skały + datowanie dziejów Ziemi.odt
2014-09-11 17:29 - 2014-07-27 01:36 - 00000000 ____D () C:\Users\Ogólny\AppData\Roaming\PhotoScape
2014-09-11 17:09 - 2013-11-12 19:25 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-09-11 16:39 - 2014-09-11 16:38 - 21360800 _____ (Mooii) C:\Users\Magda\Desktop\PhotoScape_V3.7.exe
2014-09-10 20:08 - 2014-06-05 18:04 - 00000000 ____D () C:\Users\Magda\Desktop\łii
2014-09-10 16:44 - 2012-07-26 10:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-09-09 18:17 - 2014-09-09 18:17 - 00000000 ____D () C:\Program Files\TermTutor
2014-09-09 18:17 - 2014-09-09 18:16 - 00000000 ____D () C:\Program Files (x86)\TermTutor
2014-09-08 19:50 - 2014-07-06 23:05 - 00000000 ____D () C:\Users\wiki__000\AppData\Roaming\GG
2014-09-05 23:55 - 2013-11-23 12:55 - 00000000 ____D () C:\Users\Magda\Desktop\the best of k-pop
2014-09-05 23:51 - 2014-09-05 23:51 - 00000000 ____D () C:\ProgramData\e9f99976c2f74b87
2014-09-05 20:42 - 2013-11-11 00:02 - 00000000 ____D () C:\Users\wiki__000\AppData\Roaming\Atheros
2014-09-05 00:36 - 2014-09-10 18:50 - 00755712 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-09-04 19:22 - 2014-09-04 19:22 - 00058232 _____ (Term Tutor) C:\windows\system32\Drivers\ttnfd.sys
2014-09-04 17:33 - 2013-11-11 01:21 - 00000000 ____D () C:\Users\Magda
2014-09-03 22:06 - 2013-12-29 23:12 - 00000000 ____D () C:\output
2014-09-03 03:49 - 2014-09-10 18:50 - 00556544 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-09-02 21:32 - 2014-08-20 17:15 - 00705480 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-09-02 21:32 - 2014-08-20 17:15 - 00104904 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-31 23:38 - 2014-08-31 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2014-08-28 13:34 - 2014-09-10 18:51 - 00059400 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2014-08-28 08:05 - 2014-09-10 18:51 - 00630272 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2014-08-28 08:05 - 2014-09-10 18:51 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2014-08-28 08:05 - 2014-09-10 18:51 - 00086528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2014-08-28 08:05 - 2014-09-10 18:51 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2014-08-28 08:02 - 2014-09-10 18:51 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2014-08-28 08:01 - 2014-09-10 18:51 - 03285504 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 01623552 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00775168 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00253440 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00176640 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2014-08-28 08:01 - 2014-09-10 18:51 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\wuaext.dll
2014-08-26 18:37 - 2014-08-26 18:37 - 512551277 _____ () C:\windows\MEMORY.DMP
2014-08-26 18:37 - 2014-08-26 18:37 - 00000000 ____D () C:\windows\Minidump
2014-08-23 22:25 - 2014-08-23 22:25 - 00000113 ____H () C:\Users\Magda\Desktop\.~lock.hotel king-recenzja.txt#
2014-08-21 17:51 - 2014-08-08 17:34 - 00003492 _____ () C:\windows\setupact.log
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
Some content of TEMP:
====================
C:\Users\Magda\AppData\Local\Temp\NOSEventMessages.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
ATTENTION: == & gt; Could not access BCD, see Addition.txt for additional information.
==================== End Of Log ============================