Witam, Podczas aktualizacji Windowsa z 8 na 8.1, wkradł mi się jakiś wirus.. Gdy chce odpalić normalnie system, to wyskakuje czarny ekran i w lewym górnym roku jest aktualizacja plików SYSWOW64. Avast i Adware niczego nie znalazł. Z góry dziękuję za pomoc. Poniżej logi.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-02-2015
Ran by Bosislaw (administrator) on BARTOSZPC on 17-02-2015 18:05:53
Running from C:\Users\Bosislaw\Desktop
Loaded Profiles: Bosislaw (Available profiles: Bosislaw)
Platform: Windows 8.1 Pro (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
() C:\Program Files (x86)\Opera\27.0.1689.66\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [AvastUI.exe] = & gt; C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-08] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] = & gt; C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] = & gt; C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKU\S-1-5-21-3053287757-3440453260-2842034110-1001\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
ShellIconOverlayIdentifiers: [00avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3053287757-3440453260-2842034110-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7 & rlz=
SearchScopes: HKU\.DEFAULT - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - & gt; {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - & gt; C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - & gt; C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @nvidia.com/3DVision - & gt; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - & gt; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
Chrome:
=======
CHR Profile: C:\Users\Bosislaw\AppData\Local\Google\Chrome\User Data\Default
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-11-21] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-11-21] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-27] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-27] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-27] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-27] ()
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-01-11] (Disc Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-07-21] (LogMeIn Inc.)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation )
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-11-21] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2019-11-01 14:22 - 2014-07-25 09:42 - 00000000 ____D () C:\Users\Bosislaw\Documents\Steinberg
2019-11-01 14:21 - 2014-04-29 13:01 - 00000000 ____D () C:\Users\Bosislaw\Documents\VST3 Presets
2019-11-01 14:19 - 2019-11-01 14:19 - 00000000 ____D () C:\ProgramData\Steinberg
2019-11-01 14:19 - 2019-11-01 14:19 - 00000000 ____D () C:\Program Files\Common Files\Steinberg
2019-11-01 14:17 - 2019-11-01 14:17 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software
2019-11-01 14:16 - 2019-11-01 14:17 - 00000000 ____D () C:\Program Files\Steinberg
2019-11-01 14:16 - 2019-11-01 14:16 - 00002892 _____ () C:\WINDOWS\SysWOW64\audcon.sys
2019-11-01 14:16 - 2019-11-01 14:16 - 00000049 _____ () C:\WINDOWS\SysWOW64\SYNSOPOS.exe.cfg
2019-11-01 14:16 - 2019-11-01 14:16 - 00000000 ____D () C:\ProgramData\Syncrosoft
2019-11-01 14:16 - 2019-11-01 14:16 - 00000000 ____D () C:\ProgramData\eLicenser
2019-11-01 14:16 - 2019-11-01 14:16 - 00000000 ____D () C:\Program Files\eLicenser
2019-11-01 14:16 - 2019-11-01 14:16 - 00000000 ____D () C:\Program Files (x86)\Syncrosoft
2019-11-01 14:16 - 2015-02-08 23:30 - 00000000 ____D () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase LE AI Elements 7 64bit
2019-11-01 14:16 - 2015-02-08 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser
2019-11-01 14:16 - 2014-03-09 14:29 - 00020632 _____ () C:\WINDOWS\DPINST.LOG
2019-11-01 14:16 - 2012-12-07 16:48 - 01714176 _____ (Steinberg Media Technologies GmbH) C:\WINDOWS\system32\SYNSOACC.dll
2019-11-01 14:16 - 2012-12-07 16:48 - 01277952 _____ (Steinberg Media Technologies GmbH) C:\WINDOWS\SysWOW64\SYNSOACC.dll
2019-11-01 14:16 - 2011-12-14 20:21 - 00086016 _____ () C:\WINDOWS\SysWOW64\SYNSOPOS.exe
2019-11-01 14:15 - 2019-11-01 14:16 - 00000000 ____D () C:\Program Files (x86)\eLicenser
2015-02-17 18:05 - 2015-02-17 18:06 - 00007086 _____ () C:\Users\Bosislaw\Desktop\FRST.txt
2015-02-17 18:04 - 2015-02-17 18:05 - 00602112 _____ (OldTimer Tools) C:\Users\Bosislaw\Desktop\OTL.exe
2015-02-17 18:04 - 2015-02-17 18:04 - 02085888 _____ (Farbar) C:\Users\Bosislaw\Desktop\FRST64.exe
2015-02-17 18:01 - 2015-02-17 18:01 - 00000446 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1389450763.job
2015-02-09 22:22 - 2015-02-09 22:33 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2015-02-09 19:38 - 2015-02-09 22:03 - 00000000 ____D () C:\WINDOWS\pss
2015-02-09 08:28 - 2015-02-09 08:28 - 00000020 ___SH () C:\Users\Bosislaw\ntuser.ini
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Ustawienia lokalne
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Szablony
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Moje dokumenty
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Menu Start
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Documents\Moje wideo
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Documents\Moje obrazy
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Documents\Moja muzyka
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\Dane aplikacji
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Historia
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dane aplikacji
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje wideo
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje obrazy
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\Documents\Moja muzyka
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Historia
2015-02-08 23:48 - 2015-02-08 23:48 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dane aplikacji
2015-02-08 23:47 - 2015-02-08 23:47 - 00023660 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-02-08 23:46 - 2015-02-08 23:47 - 00129842 _____ () C:\plugin000.dmp
2015-02-08 23:28 - 2015-02-08 23:28 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-08 23:25 - 2015-02-08 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-02-08 23:24 - 2015-02-09 22:06 - 00000000 ____D () C:\Users\Bosislaw
2015-02-08 23:24 - 2015-02-08 23:47 - 00022809 _____ () C:\WINDOWS\diagwrn.xml
2015-02-08 23:24 - 2015-02-08 23:47 - 00022809 _____ () C:\WINDOWS\diagerr.xml
2015-02-08 23:24 - 2015-02-08 23:25 - 00000000 ___RD () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Ustawienia lokalne
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Szablony
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Moje dokumenty
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Menu Start
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Documents\Moje wideo
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Documents\Moje obrazy
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Documents\Moja muzyka
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\Dane aplikacji
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\AppData\Local\Historia
2015-02-08 23:24 - 2015-02-08 23:24 - 00000000 _SHDL () C:\Users\Bosislaw\AppData\Local\Dane aplikacji
2015-02-08 23:24 - 2014-11-21 10:00 - 00000000 ___RD () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-08 23:24 - 2014-11-21 10:00 - 00000000 ___RD () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-02-08 23:24 - 2014-11-21 05:46 - 00000369 _____ () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-02-08 23:24 - 2014-11-21 05:46 - 00000369 _____ () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-02-08 23:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-08 23:17 - 2015-02-09 22:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-08 23:16 - 2015-02-17 17:57 - 00065406 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-08 23:16 - 2015-02-08 23:27 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-02-08 23:16 - 2015-02-08 23:27 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-02-08 23:16 - 2014-07-02 19:55 - 06783776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-02-08 23:16 - 2014-07-02 19:55 - 03522392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-02-08 23:16 - 2014-07-02 19:55 - 02559960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-02-08 23:16 - 2014-07-02 19:55 - 00935368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-02-08 23:16 - 2014-07-02 19:55 - 00386520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-02-08 23:16 - 2014-07-02 19:55 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-02-08 23:16 - 2014-07-02 11:14 - 03826628 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-02-08 23:13 - 2015-02-09 08:29 - 00000000 ___DC () C:\WINDOWS\Panther
2015-02-08 23:08 - 2015-02-08 23:08 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-08 23:08 - 2015-02-08 23:08 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-08 23:08 - 2015-02-08 23:08 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-08 23:08 - 2015-02-08 23:08 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-02-08 23:08 - 2015-02-08 23:08 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-02-08 23:08 - 2015-02-08 23:08 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-08 23:08 - 2015-02-08 23:08 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-02-08 23:08 - 2015-02-08 23:08 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-02-08 23:08 - 2015-02-08 23:08 - 00000000 ____D () C:\Windows.old
2015-02-08 23:06 - 2015-02-08 23:06 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-02-08 23:06 - 2015-02-08 23:06 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-02-08 23:06 - 2015-02-08 23:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-02-08 23:06 - 2015-02-08 23:06 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-02-08 23:06 - 2015-02-08 23:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-02-08 23:06 - 2015-02-08 23:06 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-02-08 23:06 - 2015-02-08 23:06 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-02-08 23:06 - 2015-02-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-02-08 23:06 - 2015-02-08 23:06 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-02-08 23:05 - 2015-02-08 23:05 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-02-08 23:03 - 2015-02-08 23:03 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2015-02-08 23:03 - 2015-02-08 23:03 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-02-08 23:03 - 2015-02-08 23:03 - 00000000 ____D () C:\Program Files\MSBuild
2015-02-08 23:03 - 2015-02-08 23:03 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-02-08 23:03 - 2015-02-08 23:03 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-02-08 23:02 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-02-08 23:02 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-02-08 23:02 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-02-08 23:02 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-02-08 23:02 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-02-08 23:02 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-02-08 19:02 - 2015-02-08 19:02 - 00006024 _____ () C:\Users\Bosislaw\Desktop\WOKAL DOBRY.l6t
2015-02-08 18:52 - 2015-02-08 18:52 - 00573350 _____ () C:\Users\Bosislaw\Desktop\Szmaragdy.cpr
2015-02-08 18:51 - 2015-02-08 18:51 - 01662656 _____ () C:\Users\Bosislaw\Desktop\szm.wma
2015-02-08 16:26 - 2015-02-08 16:26 - 00563607 _____ () C:\Users\Bosislaw\Desktop\Ona jest piękna.cpr
2015-02-08 16:24 - 2015-02-08 16:25 - 07208671 _____ () C:\Users\Bosislaw\Desktop\Ona jest piękna.wma
2015-02-07 20:38 - 2015-02-07 20:39 - 01867306 _____ () C:\Users\Bosislaw\Desktop\Wino3.wma
2015-02-07 17:14 - 2015-02-07 17:15 - 01867306 _____ () C:\Users\Bosislaw\Desktop\aab.wma
2015-02-06 22:06 - 2015-02-08 23:47 - 00009795 _____ () C:\WINDOWS\comsetup.log
2015-02-03 23:35 - 2015-02-08 23:27 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-02-03 23:34 - 2015-02-09 18:56 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2015-02-02 21:57 - 2014-10-22 04:34 - 00010777 _____ () C:\WINDOWS\system32\AutoconfigV2.cab
2015-02-02 21:42 - 2014-12-05 02:41 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-02-02 21:42 - 2014-12-05 02:41 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-02-02 16:33 - 2015-02-02 18:01 - 00000091 _____ () C:\Users\Bosislaw\Desktop\Nowy dokument tekstowy.txt
2015-02-02 10:53 - 2015-02-07 22:45 - 00000000 ____D () C:\Users\Bosislaw\Desktop\CC
2015-01-29 22:53 - 2015-02-08 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazing Slow Downer
2015-01-29 22:53 - 2015-01-29 22:53 - 00002146 _____ () C:\Users\Bosislaw\Desktop\Amazing Slow Downer.lnk
2015-01-29 22:53 - 2015-01-29 22:53 - 00000000 ____D () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazing Slow Downer
2015-01-29 22:52 - 2012-03-04 23:41 - 00000000 ____D () C:\Users\Bosislaw\Downloads\Amazing Slow Downer 3.2.3 for Windows
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-17 18:05 - 2014-04-27 18:49 - 00000000 ____D () C:\FRST
2015-02-17 18:03 - 2014-11-21 05:46 - 01852280 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-17 18:03 - 2014-11-21 05:07 - 00815144 _____ () C:\WINDOWS\system32\perfh015.dat
2015-02-17 18:03 - 2014-11-21 05:07 - 00168428 _____ () C:\WINDOWS\system32\perfc015.dat
2015-02-17 18:01 - 2014-01-11 15:32 - 00001151 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-17 18:01 - 2014-01-11 15:32 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-17 17:58 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-09 22:01 - 2013-08-22 15:46 - 00314411 _____ () C:\WINDOWS\setupact.log
2015-02-09 22:01 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-09 21:38 - 2014-09-21 09:26 - 00000000 ____D () C:\Users\Bosislaw\Downloads\MP3
2015-02-09 19:38 - 2014-01-11 15:58 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-09 19:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-09 08:34 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-09 08:30 - 2014-11-21 22:49 - 00000000 ___HD () C:\$Windows.~BT
2015-02-09 08:29 - 2014-01-10 19:23 - 00000000 ____D () C:\Users\Bosislaw\AppData\Local\Packages
2015-02-08 23:49 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-02-08 23:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-02-08 23:48 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-02-08 23:48 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2015-02-08 23:40 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-02-08 23:40 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-08 23:32 - 2013-08-22 15:44 - 00339224 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-08 23:30 - 2014-12-27 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-02-08 23:30 - 2014-08-22 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-08 23:30 - 2014-06-21 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 5
2015-02-08 23:30 - 2014-04-27 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2015-02-08 23:30 - 2014-03-09 15:25 - 00000000 ____D () C:\Users\Bosislaw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-02-08 23:30 - 2014-01-11 00:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-02-08 23:30 - 2014-01-11 00:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-02-08 23:30 - 2014-01-10 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-02-08 23:30 - 2013-08-22 14:25 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-08 23:28 - 2014-11-21 10:00 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-02-08 23:28 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-02-08 23:28 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-02-08 23:28 - 2014-11-21 05:07 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-02-08 23:28 - 2013-08-22 16:37 - 00005217 _____ () C:\WINDOWS\DtcInstall.log
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-02-08 23:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-02-08 23:28 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-02-08 23:28 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2015-02-08 23:27 - 2014-08-20 15:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-02-08 23:27 - 2014-05-14 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope
2015-02-08 23:27 - 2014-04-26 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camel Audio
2015-02-08 23:27 - 2014-03-09 14:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Line 6
2015-02-08 23:27 - 2014-03-09 13:33 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2015-02-08 23:27 - 2014-01-21 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCi
2015-02-08 23:27 - 2014-01-10 19:23 - 00000000 ____D () C:\ProgramData\PRICache
2015-02-08 23:27 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-02-08 23:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-02-08 23:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-02-08 23:19 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-02-08 23:14 - 2014-11-20 20:36 - 00004716 _____ () C:\WINDOWS\PFRO.log
2015-02-08 23:08 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-02-08 23:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-02-08 23:06 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-02-08 22:53 - 2014-01-10 19:23 - 01667979 _____ () C:\WINDOWS\WindowsUpdate (1).log
2015-02-08 16:38 - 2014-03-11 22:28 - 00000000 ____D () C:\Users\Bosislaw\Desktop\moje nagrywki
2015-02-08 15:58 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-07 22:45 - 2014-04-02 18:36 - 00000000 ____D () C:\Users\Bosislaw\Desktop\AUDIO
2015-02-04 20:38 - 2014-01-11 15:58 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-03 22:57 - 2014-07-22 20:43 - 00003874 _____ () C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1389450763
2015-02-03 20:45 - 2014-01-11 22:15 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-02 18:32 - 2014-03-09 16:35 - 00000000 ____D () C:\Users\Bosislaw\Documents\Cubase LE AI Elements Projects
2015-02-02 10:55 - 2014-09-20 16:35 - 00000000 ____D () C:\Users\Bosislaw\Desktop\ZDJĘCIA
2015-02-02 00:35 - 2014-04-27 16:26 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-01-29 22:53 - 2014-01-10 19:23 - 00000000 ____D () C:\Users\Bosislaw\AppData\Local\VirtualStore
2015-01-29 13:51 - 2014-12-26 19:57 - 00000000 ____D () C:\Users\Bosislaw\Desktop\FOTY IPHONE
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2015-02-08 23:14
==================== End Of Log ============================