Użyłem AdwCleanera, wklejam też logi z FRST.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Maciej (administrator) on STACJONARNY on 01-04-2015 11:18:55
Running from C:\Users\Maciej\Desktop
Loaded Profiles: Maciej (Available profiles: Maciej & Rodzice & Dorota)
Platform: Windows 7 Enterprise Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Windows\iwnesmbqlyqpuuyao.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Google Inc.) C:\Users\Maciej\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
() C:\Program Files (x86)\PLAY ONLINE\PLAY ONLINE.exe
(Thong Nguyen) C:\Program Files (x86)\PowerMenu\PowerMenu.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Google Inc.) C:\Users\Maciej\AppData\Local\Google\Update\GoogleUpdate.exe
() C:\Users\Maciej\AppData\Local\Temp\cgnuyin.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
() C:\Users\Maciej\AppData\Local\Temp\cgnuyin.exe
(Google Inc.) C:\Users\Maciej\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] = & gt; C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] = & gt; C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [HDAudDeck] = & gt; C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2000-01-01] (VIA)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] = & gt; C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [35736 2011-01-30] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] = & gt; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ControlCenter4] = & gt; C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2011-04-20] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] = & gt; C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2011-05-19] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [wepaiwfodkw] = & gt; C:\Windows\iwnesmbqlyqpuuyao.exe [483328 2015-03-31] ()
HKLM-x32\...\Run: [iwnesmbqlyqpuuyao] = & gt; C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyqpuuyao.exe [483328 2015-03-31] () & lt; ===== ATTENTION
HKLM-x32\...\Run: [wepaiwfodki] = & gt; C:\Windows\iwnesmbqlyciddhzl.exe [483328 2015-04-01] ()
HKLM-x32\...\Run: [iwnesmbqlyciddhzl] = & gt; C:\Users\Maciej\AppData\Local\Temp\boeuhaocwilqkjmd.exe [483328 2015-04-01] () & lt; ===== ATTENTION
HKLM-x32\...\RunOnce: [tcoajyisiqpq] = & gt; ewrmecvonemwvzhdthaoi.exe .
HKLM-x32\...\RunOnce: [boeuhaocwilqkjmd] = & gt; C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyciddhzl.exe [483328 2015-04-01] () & lt; ===== ATTENTION
HKLM\...\Policies\Explorer\Run: [scpcmcnypymhi] = & gt; C:\Windows\iwnesmbqlyqpuuyao.exe [483328 2015-03-31] ( ())
HKLM\...\Policies\Explorer\Run: [biscjwemag] = & gt; C:\Users\Maciej\AppData\Local\Temp\csleuqhyvkqyvxdxlxo.exe [483328 2015-04-01] ( ())
HKLM\...\Policies\Explorer\Run: [scpcmcnypyyar] = & gt; C:\Windows\pgauliasqgnwuxezobtg.exe [483328 2015-04-01] ( ())
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [Google Update] = & gt; C:\Users\Maciej\AppData\Local\Google\Update\GoogleUpdate.exe [107848 2015-02-20] (Google Inc.)
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [DAEMON Tools Lite] = & gt; C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [OscarEditor] = & gt; C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe [3345408 2012-08-17] ()
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [tesgriugyixtvs] = & gt; C:\Windows\rgyqfaqgcqjjpqvynb.exe [483328 2015-03-31] ()
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [wepaiwfodkw] = & gt; C:\Users\Maciej\AppData\Local\Temp\pgauliasqgbdlovarhlc.exe [483328 2015-03-31] () & lt; ===== ATTENTION
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [Mobile Partner] = & gt; C:\Program Files (x86)\PLAY ONLINE\PLAY ONLINE.exe [514048 2015-03-21] ()
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [tesgriugyijmeb] = & gt; C:\Windows\csleuqhyvkqyvxdxlxo.exe [483328 2015-04-01] ()
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Run: [wepaiwfodki] = & gt; C:\Users\Maciej\AppData\Local\Temp\ewrmecvonemwvzhdthaoi.exe [483328 2015-04-01] () & lt; ===== ATTENTION
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\RunOnce: [wixmyqdqjuwatrt] = & gt; boeuhaocwilqkjmd.exe .
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\RunOnce: [tcoajyisiqpq] = & gt; C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyciddhzl.exe [483328 2015-04-01] () & lt; ===== ATTENTION
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\Policies\system: [DisableRegistryTools] 1
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {01849044-ba8f-11e4-8a79-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {0d07ae53-b9af-11e4-b0e0-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {3d5388d6-bdf4-11e4-803b-001e101f3315} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {3d5388f4-bdf4-11e4-803b-001e101f3315} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {4bfc8dc4-d090-11e4-9d33-001e101fe70e} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {4dd744c3-ced9-11e4-9a93-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {4dd744e1-ced9-11e4-9a93-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {784f48ff-c02e-11e4-a845-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {7d234700-b922-11e4-8d61-001e101f8ed0} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {7d23470d-b922-11e4-8d61-001e101f8ed0} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {b0e2ada5-be67-11e4-93ec-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {b0e2ae18-be67-11e4-93ec-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {b74ff47a-cecf-11e4-ab8b-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c2742cc2-cfb1-11e4-90ce-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c2742cd7-cfb1-11e4-90ce-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c2742ce2-cfb1-11e4-90ce-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c2742cee-cfb1-11e4-90ce-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c647fa43-b8ec-11e4-a68c-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {c647fa56-b8ec-11e4-a68c-001e101f82a0} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {d9277d5f-cfcb-11e4-852d-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {db2ada01-b8dc-11e4-8cf2-bcaec59984cc} - F:\AutoRun.exe
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\...\MountPoints2: {db2ada10-b8dc-11e4-8cf2-bcaec59984cc} - F:\AutoRun.exe
Startup: C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerMenu.lnk
ShortcutTarget: PowerMenu.lnk - & gt; C:\Program Files (x86)\PowerMenu\PowerMenu.exe (Thong Nguyen)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1129333802-2774138510-927257799-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.winclub.pl
SearchScopes: HKU\.DEFAULT - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 - & gt; DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - & gt; {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - & gt; C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer - & gt; {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - & gt; C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\..\Interfaces\{30B80F27-596F-4DB7-A2C9-7A2958027786}: [NameServer] 89.108.195.21 89.108.202.21
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - & gt; C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-03-08] ()
FF Plugin: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - & gt; C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-03-08] ()
FF Plugin-x32: @microsoft.com/GENUINE - & gt; disabled No File
FF Plugin-x32: @nvidia.com/3DVision - & gt; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - & gt; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-1129333802-2774138510-927257799-1000: @tools.google.com/Google Update;version=3 - & gt; C:\Users\Maciej\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-20] (Google Inc.)
FF Plugin HKU\S-1-5-21-1129333802-2774138510-927257799-1000: @tools.google.com/Google Update;version=9 - & gt; C:\Users\Maciej\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-20] (Google Inc.)
Chrome:
=======
CHR HomePage: Default - & gt; hxxp://www.google.pl/
CHR StartupUrls: Default - & gt; " https://www.google.pl/ "
CHR Profile: C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-20]
CHR Extension: (YouTube) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-20]
CHR Extension: (Google Search) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-20]
CHR Extension: (AdBlock) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-20]
CHR Extension: (FVD Downloader) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2015-02-20]
CHR Extension: (Google Wallet) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-20]
CHR Extension: (Gmail) - C:\Users\Maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-20]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
StartMenuInternet: Google Chrome.5QUEQCBTH3URGOZKFREJE6PWQA - C:\Users\Maciej\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2015-03-21] ()
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [569024 2014-09-16] (Valve Corporation) [File not signed]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2000-01-01] (VIA Technologies, Inc.)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-20] (Disc Soft Ltd)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2015-03-21] (Huawei Technologies Co., Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13920 2015-04-01] ()
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-01 11:18 - 2015-04-01 11:19 - 00016843 _____ () C:\Users\Maciej\Desktop\FRST.txt
2015-04-01 11:18 - 2015-04-01 11:18 - 00000000 ____D () C:\FRST
2015-04-01 11:17 - 2015-04-01 11:16 - 02095616 _____ (Farbar) C:\Users\Maciej\Desktop\FRST64.exe
2015-04-01 11:14 - 2015-04-01 11:12 - 02208768 _____ () C:\Users\Maciej\Desktop\adwcleaner_4.200.exe
2015-03-31 23:26 - 2015-03-31 23:26 - 00001802 _____ () C:\Users\Public\Desktop\The Witcher 2 - Assassins of Kings Enhanced Edition.lnk
2015-03-31 23:26 - 2015-03-31 23:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-03-31 22:59 - 2015-03-31 22:59 - 00000000 ____D () C:\GOG Games
2015-03-31 22:51 - 2015-04-01 11:15 - 00000000 ____D () C:\AdwCleaner
2015-03-31 22:51 - 2015-03-31 22:51 - 00000000 ____D () C:\Users\Maciej\AppData\Local\Avg2015
2015-03-31 22:46 - 2015-03-31 22:51 - 00498784 _____ () C:\avgremover.log
2015-03-31 22:46 - 2015-03-31 22:11 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\avg_remover_stf_x64_2015_5501.exe
2015-03-31 22:41 - 2015-03-31 22:27 - 00602112 _____ (OldTimer Tools) C:\Users\Maciej\Desktop\OTL.exe
2015-03-31 21:55 - 2015-03-31 22:19 - 00000000 ____D () C:\Users\Maciej\Desktop\Wiedźmin 2
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\vokgzysmmenyydmjapjytp.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\rgyqfaqgcqvcyzexkv.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\pgauliasqgnwuxezobtg.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\iwnesmbqlyciddhzl.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\ewrmecvonemwvzhdthaoi.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\csleuqhyvkqyvxdxlxo.exe
2015-03-31 21:48 - 2015-04-01 11:18 - 00483328 __RSH () C:\Windows\boeuhaocwilqkjmd.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\vokgzysmmenyydmjapjytp.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\pgauliasqgnwuxezobtg.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\iwnesmbqlyciddhzl.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\ewrmecvonemwvzhdthaoi.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\csleuqhyvkqyvxdxlxo.exe
2015-03-31 21:48 - 2015-04-01 11:16 - 00483328 __RSH () C:\Windows\SysWOW64\boeuhaocwilqkjmd.exe
2015-03-31 21:48 - 2015-04-01 11:11 - 00483328 __RSH () C:\Windows\SysWOW64\rgyqfaqgcqvcyzexkv.exe
2015-03-31 21:48 - 2015-03-31 23:23 - 00000280 ____H () C:\Windows\SysWOW64\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 23:23 - 00000280 ____H () C:\Windows\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 23:23 - 00000280 ____H () C:\Users\Maciej\AppData\Local\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 23:23 - 00000280 ____H () C:\Program Files (x86)\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 21:48 - 00004248 ____H () C:\Windows\SysWOW64\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
2015-03-31 21:48 - 2015-03-31 21:48 - 00004248 ____H () C:\Windows\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
2015-03-31 21:48 - 2015-03-31 21:48 - 00004248 ____H () C:\Users\Maciej\AppData\Local\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
2015-03-31 21:48 - 2015-03-31 21:48 - 00004248 ____H () C:\Program Files (x86)\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
2015-03-27 01:23 - 2015-03-27 01:25 - 00000000 ____D () C:\Users\Dorota\Documents\wiersze
2015-03-24 22:09 - 2015-03-24 22:09 - 00000000 _____ () C:\Users\Dorota\Sti_Trace.log
2015-03-23 03:27 - 2015-03-23 03:27 - 00001006 _____ () C:\Users\Dorota\Desktop\Raport ankiety dla rodziców -G.Remiszewska — skrót.lnk
2015-03-21 23:50 - 2015-03-21 23:50 - 00000000 ____D () C:\Users\Maciej\AppData\Local\Adobe
2015-03-21 12:10 - 2015-03-21 12:10 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00439808 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00229376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00073216 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2015-03-21 12:10 - 2015-03-21 12:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE
2015-03-19 16:05 - 2015-03-19 16:05 - 00013942 _____ () C:\Program.RPT
2015-03-19 15:20 - 2015-03-19 15:20 - 00004096 _____ () C:\Windows\d3dx.dat
2015-03-19 15:19 - 2015-03-19 15:19 - 00000000 ____D () C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-03-19 15:02 - 2015-03-19 15:02 - 00002232 _____ () C:\Users\Maciej\Desktop\Gothic II Złota Edycja.lnk
2015-03-19 15:00 - 2015-03-19 15:00 - 00000000 ____D () C:\Users\Maciej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWood
2015-03-19 14:58 - 2015-03-19 14:58 - 00000000 ____D () C:\Program Files (x86)\JoWood
2015-03-19 14:43 - 2015-03-24 22:17 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-19 14:43 - 2015-03-19 14:43 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-03-19 14:43 - 2015-03-19 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-19 00:04 - 2015-03-19 00:04 - 00000000 ____D () C:\Users\Maciej\Documents\The Witcher 2
2015-03-18 23:27 - 2015-03-18 23:27 - 00000000 ____D () C:\Users\Maciej\Documents\My Games
2015-03-18 23:27 - 2015-03-18 23:27 - 00000000 ____D () C:\Users\Maciej\AppData\Local\Steam
2015-03-18 23:27 - 2015-03-18 23:27 - 00000000 ____D () C:\Users\Maciej\AppData\Local\Skyrim
2015-03-18 22:33 - 2015-03-18 23:22 - 00000000 ____D () C:\Users\Maciej\Documents\Witcher 2
2015-03-18 22:33 - 2015-03-18 22:33 - 00000000 ____D () C:\Users\Maciej\AppData\Local\The Witcher 2
2015-03-18 22:33 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2015-03-18 22:33 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2015-03-18 22:33 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2015-03-18 22:33 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2015-03-18 22:33 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2015-03-18 22:33 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2015-03-18 22:33 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2015-03-18 22:33 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2015-03-18 22:33 - 2009-09-04 18:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2015-03-18 22:33 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2015-03-18 22:33 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2015-03-18 22:33 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-03-18 22:33 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2015-03-18 22:33 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2015-03-18 22:33 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-03-18 22:33 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-03-18 22:33 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-03-18 22:33 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-03-18 22:33 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-03-18 22:33 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-03-18 22:33 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-03-18 22:33 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2015-03-18 22:33 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-03-18 22:33 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2015-03-18 22:33 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-03-18 22:33 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2015-03-18 21:39 - 2015-03-23 03:25 - 00000280 ____H () C:\Users\Maciej\AppData\Local\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-18 16:56 - 2015-03-29 23:40 - 00000280 ____H () C:\Users\Rodzice\AppData\Local\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-16 01:35 - 2015-03-16 01:35 - 00000000 ____D () C:\Users\Dorota\AppData\Roaming\WinRAR
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\vokgzysmmebfpudkdvbuqm.exe
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\rgyqfaqgcqjjpqvynb.exe
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\pgauliasqgbdlovarhlc.exe
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\iwnesmbqlyqpuuyao.exe
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\ewrmecvoneadmqyewnskf.exe
2015-03-16 01:22 - 2015-03-31 21:46 - 00483328 __RSH () C:\Windows\csleuqhyvkefmouyodg.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\vokgzysmmebfpudkdvbuqm.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\rgyqfaqgcqjjpqvynb.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\iwnesmbqlyqpuuyao.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\ewrmecvoneadmqyewnskf.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\csleuqhyvkefmouyodg.exe
2015-03-16 01:22 - 2015-03-31 21:40 - 00483328 __RSH () C:\Windows\SysWOW64\boeuhaocwizxbade.exe
2015-03-16 01:22 - 2015-03-31 20:55 - 00000280 ____H () C:\Windows\SysWOW64\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-16 01:22 - 2015-03-31 20:55 - 00000280 ____H () C:\Windows\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-16 01:22 - 2015-03-31 20:55 - 00000280 ____H () C:\Users\Dorota\AppData\Local\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-16 01:22 - 2015-03-31 20:55 - 00000280 ____H () C:\Program Files (x86)\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-16 01:22 - 2015-03-31 20:53 - 00483328 __RSH () C:\Windows\boeuhaocwizxbade.exe
2015-03-16 01:22 - 2015-03-30 23:16 - 00483328 __RSH () C:\Windows\SysWOW64\pgauliasqgbdlovarhlc.exe
2015-03-16 01:22 - 2015-03-16 01:22 - 00004248 ____H () C:\Windows\SysWOW64\boeuhaocwizxbaderddqgwjcqeykbzdcfgtffs.yle
2015-03-16 01:22 - 2015-03-16 01:22 - 00004248 ____H () C:\Windows\boeuhaocwizxbaderddqgwjcqeykbzdcfgtffs.yle
2015-03-16 01:22 - 2015-03-16 01:22 - 00004248 ____H () C:\Users\Dorota\AppData\Local\boeuhaocwizxbaderddqgwjcqeykbzdcfgtffs.yle
2015-03-16 01:22 - 2015-03-16 01:22 - 00004248 ____H () C:\Program Files (x86)\boeuhaocwizxbaderddqgwjcqeykbzdcfgtffs.yle
2015-03-11 21:11 - 2015-03-11 21:11 - 00000000 ____D () C:\Users\Rodzice\AppData\Roaming\Macromedia
2015-03-11 21:11 - 2015-03-11 21:11 - 00000000 ____D () C:\Users\Rodzice\AppData\Local\Macromedia
2015-03-08 18:44 - 2015-03-08 18:44 - 00000000 ____D () C:\Users\Dorota\Tracing
2015-03-08 18:43 - 2015-03-31 20:26 - 00000000 ____D () C:\Users\Dorota\AppData\Roaming\Skype
2015-03-08 18:43 - 2015-03-08 18:43 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-03-08 18:43 - 2015-03-08 18:43 - 00000000 ____D () C:\Users\Dorota\AppData\Local\Skype
2015-03-08 18:43 - 2015-03-08 18:43 - 00000000 ____D () C:\ProgramData\Skype
2015-03-08 18:43 - 2015-03-08 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-03-06 00:16 - 2015-03-06 00:16 - 00000000 ____D () C:\Users\Dorota\AppData\Roaming\Macromedia
2015-03-06 00:14 - 2015-04-01 00:51 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-06 00:14 - 2015-03-08 02:56 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-06 00:14 - 2015-03-08 02:56 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-06 00:14 - 2015-03-06 00:14 - 00000000 ____D () C:\Windows\system32\Macromed
2015-03-02 20:41 - 2015-03-02 20:41 - 00000000 ____D () C:\Users\Dorota\AppData\Roaming\TuneUp Software
2015-03-02 20:40 - 2015-03-02 20:40 - 00000000 ____D () C:\Users\Dorota\AppData\Local\MFAData
2015-03-02 20:27 - 2015-03-02 20:27 - 00000000 ____D () C:\Users\Dorota\AppData\Local\Deployment
2015-03-02 20:27 - 2015-03-02 20:27 - 00000000 ____D () C:\Users\Dorota\AppData\Local\Apps\2.0
2015-03-02 20:07 - 2015-03-21 22:51 - 03655744 _____ () C:\Windows\SysWOW64\debug.log
2015-03-02 20:07 - 2015-03-02 20:07 - 00000000 ____D () C:\Users\Dorota\AppData\Local\Google
2015-03-02 20:06 - 2015-03-21 22:51 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-04-01 11:18 - 2015-02-19 22:50 - 00366984 _____ () C:\Windows\WindowsUpdate.log
2015-04-01 11:16 - 2015-02-20 14:17 - 00013920 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2015-04-01 11:16 - 2015-02-20 14:17 - 00002840 _____ () C:\Windows\System32\Tasks\SlimDrivers Startup
2015-04-01 11:16 - 2015-02-20 14:17 - 00000412 _____ () C:\Windows\Tasks\SlimDrivers Startup.job
2015-04-01 11:16 - 2015-02-19 23:01 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-01 11:16 - 2013-10-09 18:13 - 00118867 _____ () C:\Windows\setupact.log
2015-04-01 11:16 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-01 11:15 - 2009-07-14 06:45 - 00017264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-01 11:15 - 2009-07-14 06:45 - 00017264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-01 11:06 - 2015-02-20 12:47 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1129333802-2774138510-927257799-1000UA.job
2015-04-01 11:04 - 2011-04-12 15:07 - 00740196 _____ () C:\Windows\system32\perfh015.dat
2015-04-01 11:04 - 2011-04-12 15:07 - 00155770 _____ () C:\Windows\system32\perfc015.dat
2015-04-01 11:04 - 2009-07-14 07:13 - 01669606 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-31 23:26 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-03-31 22:47 - 2013-10-09 18:13 - 00033826 _____ () C:\Windows\PFRO.log
2015-03-29 22:59 - 2015-02-23 23:02 - 00000000 ____D () C:\Users\Rodzice\AppData\Local\Mozilla Firefox
2015-03-29 22:48 - 2009-07-14 07:08 - 00032520 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-28 00:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-24 22:09 - 2015-02-22 16:06 - 00000000 ____D () C:\Users\Dorota
2015-03-21 23:50 - 2015-02-19 22:55 - 00000000 ____D () C:\Users\Maciej\AppData\Roaming\Adobe
2015-03-21 12:13 - 2015-02-20 10:47 - 00000000 ____D () C:\ProgramData\DatacardService
2015-03-21 12:13 - 2015-02-20 10:47 - 00000000 ____D () C:\Program Files (x86)\PLAY ONLINE
2015-03-21 12:10 - 2015-02-26 22:53 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2015-03-21 12:10 - 2015-02-26 22:53 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2015-03-20 14:06 - 2015-02-20 12:47 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1129333802-2774138510-927257799-1000Core.job
2015-03-19 16:52 - 2015-02-19 23:21 - 00122113 _____ () C:\Windows\DirectX.log
2015-03-19 14:58 - 2015-02-19 23:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-19 14:31 - 2015-02-20 13:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-08 02:56 - 2015-02-20 13:11 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-06 00:06 - 2015-02-25 00:06 - 00000000 ____D () C:\Users\Dorota\AppData\Local\Adobe
2015-03-02 16:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
==================== Files in the root of some directories =======
2015-03-16 01:22 - 2015-03-16 01:22 - 0004248 ____H () C:\Program Files (x86)\boeuhaocwizxbaderddqgwjcqeykbzdcfgtffs.yle
2015-03-16 01:22 - 2015-03-31 20:55 - 0000280 ____H () C:\Program Files (x86)\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-31 21:48 - 2015-03-31 23:23 - 0000280 ____H () C:\Program Files (x86)\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 21:48 - 0004248 ____H () C:\Program Files (x86)\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
2015-03-18 21:39 - 2015-03-23 03:25 - 0000280 ____H () C:\Users\Maciej\AppData\Local\eglqsadgpqwjcqiyabqsxcempsb.ivo
2015-03-31 21:48 - 2015-03-31 23:23 - 0000280 ____H () C:\Users\Maciej\AppData\Local\jikmlqqqwujagrgjgbbwxzya.bgg
2015-03-31 21:48 - 2015-03-31 21:48 - 0004248 ____H () C:\Users\Maciej\AppData\Local\scpcmcnypyyarnnbjpagsfpcpzpalcllnea.owc
Files to move or delete:
====================
C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyqpuuyao.exe
C:\Users\Maciej\AppData\Local\Temp\boeuhaocwilqkjmd.exe
C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyciddhzl.exe
C:\Users\Maciej\AppData\Local\Temp\pgauliasqgbdlovarhlc.exe
C:\Users\Maciej\AppData\Local\Temp\ewrmecvonemwvzhdthaoi.exe
Some content of TEMP:
====================
C:\Users\Dorota\AppData\Local\Temp\boeuhaocwizxbade.exe
C:\Users\Dorota\AppData\Local\Temp\cgnuyin.exe
C:\Users\Dorota\AppData\Local\Temp\csleuqhyvkefmouyodg.exe
C:\Users\Dorota\AppData\Local\Temp\ewrmecvoneadmqyewnskf.exe
C:\Users\Dorota\AppData\Local\Temp\iwnesmbqlyqpuuyao.exe
C:\Users\Dorota\AppData\Local\Temp\pgauliasqgbdlovarhlc.exe
C:\Users\Dorota\AppData\Local\Temp\qjicawelats.exe
C:\Users\Dorota\AppData\Local\Temp\rgyqfaqgcqjjpqvynb.exe
C:\Users\Dorota\AppData\Local\Temp\vokgzysmmebfpudkdvbuqm.exe
C:\Users\Maciej\AppData\Local\Temp\boeuhaocwilqkjmd.exe
C:\Users\Maciej\AppData\Local\Temp\boeuhaocwizxbade.exe
C:\Users\Maciej\AppData\Local\Temp\ccrljvbfosc.exe
C:\Users\Maciej\AppData\Local\Temp\cgnuyin.exe
C:\Users\Maciej\AppData\Local\Temp\csleuqhyvkefmouyodg.exe
C:\Users\Maciej\AppData\Local\Temp\csleuqhyvkqyvxdxlxo.exe
C:\Users\Maciej\AppData\Local\Temp\ewrmecvoneadmqyewnskf.exe
C:\Users\Maciej\AppData\Local\Temp\ewrmecvonemwvzhdthaoi.exe
C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyciddhzl.exe
C:\Users\Maciej\AppData\Local\Temp\iwnesmbqlyqpuuyao.exe
C:\Users\Maciej\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Maciej\AppData\Local\Temp\nvStInst.exe
C:\Users\Maciej\AppData\Local\Temp\ose00000.exe
C:\Users\Maciej\AppData\Local\Temp\pgauliasqgbdlovarhlc.exe
C:\Users\Maciej\AppData\Local\Temp\pgauliasqgnwuxezobtg.exe
C:\Users\Maciej\AppData\Local\Temp\qjicawelats.exe
C:\Users\Maciej\AppData\Local\Temp\Quarantine.exe
C:\Users\Maciej\AppData\Local\Temp\rgyqfaqgcqjjpqvynb.exe
C:\Users\Maciej\AppData\Local\Temp\rgyqfaqgcqvcyzexkv.exe
C:\Users\Maciej\AppData\Local\Temp\sqlite3.dll
C:\Users\Maciej\AppData\Local\Temp\vokgzysmmebfpudkdvbuqm.exe
C:\Users\Maciej\AppData\Local\Temp\vokgzysmmenyydmjapjytp.exe
C:\Users\Maciej\AppData\Local\Temp\_is6B7E.exe
C:\Users\Maciej\AppData\Local\Temp\_isBEDC.exe
C:\Users\Rodzice\AppData\Local\Temp\boeuhaocwizxbade.exe
C:\Users\Rodzice\AppData\Local\Temp\cgnuyin.exe
C:\Users\Rodzice\AppData\Local\Temp\csleuqhyvkefmouyodg.exe
C:\Users\Rodzice\AppData\Local\Temp\ewrmecvoneadmqyewnskf.exe
C:\Users\Rodzice\AppData\Local\Temp\iwnesmbqlyqpuuyao.exe
C:\Users\Rodzice\AppData\Local\Temp\pgauliasqgbdlovarhlc.exe
C:\Users\Rodzice\AppData\Local\Temp\qjicawelats.exe
C:\Users\Rodzice\AppData\Local\Temp\rgyqfaqgcqjjpqvynb.exe
C:\Users\Rodzice\AppData\Local\Temp\vokgzysmmebfpudkdvbuqm.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe = & gt; File is digitally signed
C:\Windows\System32\wininit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\wininit.exe = & gt; File is digitally signed
C:\Windows\explorer.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\explorer.exe = & gt; File is digitally signed
C:\Windows\System32\svchost.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\svchost.exe = & gt; File is digitally signed
C:\Windows\System32\services.exe = & gt; File is digitally signed
C:\Windows\System32\User32.dll = & gt; File is digitally signed
C:\Windows\SysWOW64\User32.dll = & gt; File is digitally signed
C:\Windows\System32\userinit.exe = & gt; File is digitally signed
C:\Windows\SysWOW64\userinit.exe = & gt; File is digitally signed
C:\Windows\System32\rpcss.dll = & gt; File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys = & gt; File is digitally signed
LastRegBack: 2015-03-31 15:52
==================== End Of Log ============================