Dlaczego nie uzyles AdwCleaner PRZED wykonaniem logow z FRST?
Odinstaluj:
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.3.1 - IObit)
ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation)
Buzzdock (HKLM\...\{ac225167-00fc-452d-94c5-bb93600e7d9a}) (Version: - Alactro LLC) <==== ATTENTION
ClearThink (HKLM\...\ClearThink) (Version: 2014.08.30.115803 - ClearThink) <==== ATTENTION
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.4 - IObit)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.4 - IObit)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
MyBestOffersToday 007.42 (HKLM-x32\...\mbot_nl_42_is1) (Version: - MYBESTOFFERSTODAY) <==== ATTENTION
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
MyStart Toolbar (HKLM-x32\...\mystarttb) (Version: 5.4.1.4 - Visicom Media Inc.)
Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: - ) <==== ATTENTION
PepperZip 1.0 (HKLM-x32\...\PepperZip) (Version: 1.0 - PepperWare Co.) <==== ATTENTION
RegClean-Pro (HKLM-x32\...\RegClean-Pro_is1) (Version: 6.21 - Systweak Inc) <==== ATTENTION
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION
SaulesChecKoer (HKLM-x32\...\{CC17A332-9555-AD95-3985-0BDD9BF0EC71}) (Version: - "")
SharkManCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - SharkManCoupon) <==== ATTENTION
Shopping Helper Smartbar (HKLM-x32\...\{C64BEB42-B25D-4674-BB55-4099CB720110}) (Version: 11.113.63.19229 - ReSoft Ltd.) <==== ATTENTION
Shopping Helper Smartbar Engine (HKCU\...\{ffe3f660-0223-4d39-bd07-9f696d5065ec}) (Version: 11.113.63.19229 - ReSoft Ltd.) <==== ATTENTION
SpeedUpMyPC (HKLM-x32\...\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1) (Version: 6.0.4.6 - Uniblue Systems Limited) <==== ATTENTION
sweet-page uninstall (HKLM-x32\...\sweet-page uninstall) (Version: - sweet-page) <==== ATTENTION
tOpdeual (HKLM-x32\...\{9B149088-3FB6-875E-C1A4-A25A6E9D278D}) (Version: - toopdeal)
WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ATTENTION
Yahoo! Search (HKCU\...\Yahoo! Search) (Version: - Pay-By-Ads) <==== ATTENTION
Uzyj AdwCleaner i usun to co wykryl.
Obok frst.exe utworz plik fixlist.txt z zawartoscia:
Task: {19EAF401-A237-49A8-9141-E7E1C9DF836C} - System32\Tasks\Yahoo! Search => C:\Users\startklaar\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [2014-10-13] (Pay By Ads LTD) <==== ATTENTION
Task: {2B262656-E281-440C-B186-71BF700FF10C} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {64AB17CD-9C2F-4DDB-99C2-E32B486A6427} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-10-07] (Uniblue Systems Limited) <==== ATTENTION
Task: {92500577-6C10-47A5-A433-1CDA4A574BF9} - System32\Tasks\Yahoo! Search Udpater => C:\Users\startklaar\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrsetup.exe [2014-10-13] (Pay By Ads LTD) <==== ATTENTION
Task: {AF437812-703B-449B-8731-40639CC7DEE7} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe [2014-10-07] (Uniblue Systems Limited) <==== ATTENTION
Task: {FA848278-502F-4ED7-A42D-DAAE567EC05A} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2014-08-05] () <==== ATTENTION
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATTENTION
StormWatch
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
(Pay By Ads LTD) C:\Users\startklaar\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe
(Smartbar) C:\Users\startklaar\AppData\Local\Smartbar\Application\Smartbar.exe
(Weather Protector LLC) C:\Users\startklaar\AppData\Local\StormWatch\StormWatch.exe
() C:\Users\startklaar\AppData\Local\StormWatch\StormWatchApp.exe
() C:\Program Files (x86)\ClearThink\updateClearThink.exe
() C:\Program Files (x86)\ClearThink\bin\utilClearThink.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.PurBrowse64.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BrowserAdapter64.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BOASHelper.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BOASPRT.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BOAS.exe
() C:\Program Files (x86)\RCP\RegCleanPro.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BOASPRT.exe
() C:\Program Files (x86)\ClearThink\bin\ClearThink.BOAS.exe
() C:\Program Files (x86)\LPT\srpts.exe
() C:\Windows\score.exe
() C:\Program Files (x86)\LPT\srptsl.exe
HKU\S-1-5-21-4067381555-3675006698-1587470176-1001\...\Run: [Yahoo! Search] => C:\Users\startklaar\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.12.4\dsrlte.exe [438632 2014-10-13] (Pay By Ads LTD)
HKU\S-1-5-21-4067381555-3675006698-1587470176-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\startklaar\AppData\Local\Smartbar\Application\Smartbar.exe [28192 2014-08-27] (Smartbar)
AppInit_DLLs: C:\Users\startklaar\AppData\Local\Smartbar\Application\Resources\crdlil64.dll => C:\Users\startklaar\AppData\Local\Smartbar\Application\Resources\crdlil64.dll [77856 2014-10-14] ()
Startup: C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatch.lnk
ShortcutTarget: StormWatch.lnk -> C:\Users\startklaar\AppData\Local\StormWatch\StormWatch.exe (Weather Protector LLC)
Startup: C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StormWatchApp.lnk
ShortcutTarget: StormWatchApp.lnk -> C:\Users\startklaar\AppData\Local\StormWatch\StormWatchApp.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyServer: http=127.0.0.1:39793
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6J...TUzp7_4JPuTJx1R4nwOyuD6deSvG4fPW38uA,,&q= {searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6J...TUzp7_4JPuTJx1R4nwOyuD6deSvG4fPW38uA,,&q= {searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.sweet-page.com/?type=hp&ts=140...p;uid=TOSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.sweet-page.com/?type=hp&ts=140...p;uid=TOSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://www.sweet-page.com/?type=hp&ts=140...p;uid=TOSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.sweet-page.com/?type=hp&ts=140...p;uid=TOSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.sweet-page.com/?type=hp&ts=140...p;uid=TOSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://www.bing.com/search?q= {searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6J...TUzp7_4JPuTJx1R4nwOyuD6deSvG4fPW38uA,,&q= {searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6J...TUzp7_4JPuTJx1R4nwOyuD6deSvG4fPW38uA,,&q= {searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6J...TUzp7_4JPuTJx1R4nwOyuD6deSvG4fPW38uA,,&q= {searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.sweet-page.com/web/?type=ds&ts...OSHIBAXMQ01ABD050_Y2JSP2WZTXXY2JSP2WZT&q= {searchTerms}
BHO: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: SaulesChecKoer -> {602a5d5e-4b84-421c-bc20-70e781446513} -> C:\ProgramData\SaulesChecKoer\ZK97adoMAlMvU4.x64.dll ()
BHO: tOpdeual -> {A400C3DD-2B2F-B470-D6C9-6FC8874D565E} -> C:\ProgramData\tOpdeual\GbM3.x64.dll ()
BHO-x32: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: SaulesChecKoer -> {602a5d5e-4b84-421c-bc20-70e781446513} -> C:\ProgramData\SaulesChecKoer\ZK97adoMAlMvU4.dll ()
BHO-x32: ClearThink -> {7e6d4e3e-fc66-4036-9799-ce5c625c4c56} -> C:\Program Files (x86)\ClearThink\ClearThinkBHO.dll (ClearThink)
BHO-x32: tOpdeual -> {A400C3DD-2B2F-B470-D6C9-6FC8874D565E} -> C:\ProgramData\tOpdeual\GbM3.dll ()
BHO-x32: MyStart Toolbar -> {ccb24e92-62c4-4c53-95d2-65f9eed476bc} -> C:\Program Files (x86)\mystarttb\mystartDx.dll ()
Toolbar: HKLM - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx64.dll ()
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll ()
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
CHR Extension: (ClearThink) - C:\Users\startklaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\epaphgdmipnghjhhebklgdchejelobkg [2014-09-20]
CHR Extension: (Slick Savings) - C:\Users\startklaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2014-08-29]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Users\startklaar\AppData\Local\Slick Savings\coupons.crx [2014-07-19]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-08-30] (Cherished Technololgy LIMITED)
R2 scores; C:\Windows\score.exe [4834816 2014-10-11] () [File not signed]
R2 Update ClearThink; C:\Program Files (x86)\ClearThink\updateClearThink.exe [522480 2014-10-16] ()
R2 Util ClearThink; C:\Program Files (x86)\ClearThink\bin\utilClearThink.exe [522480 2014-10-16] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [528896 2014-08-30] (Fuyu LIMITED) [File not signed]
S2 BackupStack; C:\Program Files (x86)\MyPC Backup\BackupStack.exe [X] <==== ATTENTION
R1 {0729a3ff-5ca9-4654-a275-96df29273fbf}w64; C:\Windows\System32\drivers\{0729a3ff-5ca9-4654-a275-96df29273fbf}w64.sys [48784 2014-10-12] (StdLib)
R1 {1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64; C:\Windows\System32\drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys [48784 2014-10-13] (StdLib)
R1 {38f72c19-9857-4bc2-b729-9d00bd429872}w64; C:\Windows\System32\drivers\{38f72c19-9857-4bc2-b729-9d00bd429872}w64.sys [48784 2014-10-14] (StdLib)
R1 {4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64; C:\Windows\System32\drivers\{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64.sys [48784 2014-10-10] (StdLib)
R1 {944d25d5-1adf-4cba-98d5-05e5f2efd201}w64; C:\Windows\System32\drivers\{944d25d5-1adf-4cba-98d5-05e5f2efd201}w64.sys [48784 2014-10-14] (StdLib)
R1 {94538859-34de-4cd4-9dc6-aa29e98ff214}w64; C:\Windows\System32\drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys [48784 2014-10-15] (StdLib)
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61120 2014-06-16] (StdLib)
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}w64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}w64.sys [61120 2014-06-17] (StdLib)
R1 {ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64; C:\Windows\System32\drivers\{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64.sys [48784 2014-10-16] (StdLib)
R1 {c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64; C:\Windows\System32\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}w64.sys [61072 2014-08-29] (StdLib)
R1 {c89879cb-75b8-4cb6-bc13-07c704396fd0}w64; C:\Windows\System32\drivers\{c89879cb-75b8-4cb6-bc13-07c704396fd0}w64.sys [48784 2014-10-13] (StdLib)
2014-10-17 00:33 - 2014-10-17 00:33 - 00003090 _____ () C:\WINDOWS\System32\Tasks\RegClean Pro
2014-10-16 23:49 - 2014-10-16 11:46 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{ad28a4d5-ff34-4e4c-af95-b3aa1bbc1d20}w64.sys
2014-10-16 09:48 - 2014-10-15 10:25 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{94538859-34de-4cd4-9dc6-aa29e98ff214}w64.sys
2014-10-14 10:43 - 2014-10-14 10:44 - 00000000 ____D () C:\Users\startklaar\AppData\Local\LPT
2014-10-14 10:43 - 2014-10-14 10:43 - 00000949 _____ () C:\Users\Public\Desktop\RegClean Pro.lnk
2014-10-14 10:43 - 2014-10-14 10:43 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Systweak
2014-10-14 10:43 - 2014-10-14 10:43 - 00000000 ____D () C:\Users\startklaar\AppData\Local\Smartbar
2014-10-14 10:43 - 2014-08-05 19:14 - 00020328 _____ () C:\WINDOWS\system32\roboot64.exe
2014-10-14 10:42 - 2014-10-14 10:43 - 00000000 ____D () C:\Program Files (x86)\RCP
2014-10-14 10:40 - 2014-10-13 12:47 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{1fe5a9eb-d0ad-44c6-8e0e-e079118db915}w64.sys
2014-10-13 14:56 - 2014-10-13 14:56 - 00000000 ____D () C:\Users\startklaar\AppData\Local\Weather_Protector_LLC
2014-10-13 14:52 - 2014-10-17 00:52 - 00000298 _____ () C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job
2014-10-13 14:52 - 2014-10-13 14:52 - 00003202 _____ () C:\WINDOWS\System32\Tasks\SpeedUpMyPC Maintenance
2014-10-13 14:51 - 2014-10-16 23:44 - 00000292 _____ () C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job
2014-10-13 14:51 - 2014-10-16 10:04 - 00000000 ____D () C:\Users\startklaar\AppData\Local\StormWatch
2014-10-13 14:51 - 2014-10-16 09:48 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2014-10-13 14:51 - 2014-10-15 12:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-10-13 14:51 - 2014-10-15 12:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
2014-10-13 14:51 - 2014-10-15 12:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
2014-10-13 14:51 - 2014-10-15 12:41 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-10-13 14:51 - 2014-10-15 12:41 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormWatch
2014-10-13 14:51 - 2014-10-15 12:41 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-10-13 14:51 - 2014-10-13 14:56 - 00000000 ____D () C:\Users\startklaar\AppData\Local\DriverFreewareKeyboard
2014-10-13 14:51 - 2014-10-13 14:52 - 00002506 _____ () C:\WINDOWS\System32\Tasks\SpeedUpMyPC Startup
2014-10-13 14:51 - 2014-10-13 14:52 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\VOPackage
2014-10-13 14:51 - 2014-10-13 14:51 - 00001135 _____ () C:\Users\Public\Desktop\SpeedUpMyPC.lnk
2014-10-13 14:51 - 2014-10-13 14:51 - 00000985 _____ () C:\Users\startklaar\Desktop\PepperZip.lnk
2014-10-13 14:51 - 2014-10-13 14:51 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Uniblue
2014-10-13 14:51 - 2014-10-13 14:51 - 00000000 ____D () C:\Users\startklaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PepperZip
2014-10-13 14:51 - 2014-10-13 14:51 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2014-10-13 14:51 - 2014-10-13 14:51 - 00000000 ____D () C:\Program Files (x86)\mystarttb
2014-10-13 14:50 - 2014-10-15 12:02 - 00000000 ____D () C:\Users\startklaar\AppData\Local\mbot_nl_42
2014-10-13 14:50 - 2014-10-13 14:51 - 00000000 ____D () C:\Program Files (x86)\PepperZip
2014-10-13 14:50 - 2014-10-13 14:51 - 00000000 ____D () C:\Program Files (x86)\mbot_nl_42
2014-10-13 14:50 - 2014-10-13 14:51 - 00000000 ____D () C:\Program Files (x86)\FastPlayer
2014-10-13 14:50 - 2014-10-11 11:04 - 04834816 _____ () C:\WINDOWS\score.exe
2014-10-13 14:49 - 2014-10-13 14:49 - 01626072 _____ () C:\Users\startklaar\Downloads\Setup (4).exe
2014-10-13 14:49 - 2014-10-13 14:49 - 01626056 _____ () C:\Users\startklaar\Downloads\Setup (6).exe
2014-10-13 14:49 - 2014-10-13 14:49 - 01626056 _____ () C:\Users\startklaar\Downloads\Setup (5).exe
2014-10-13 14:48 - 2014-10-13 14:48 - 01626072 _____ () C:\Users\startklaar\Downloads\Setup (3).exe
2014-10-13 14:48 - 2014-10-13 14:48 - 01626072 _____ () C:\Users\startklaar\Downloads\Setup (2).exe
2014-10-13 14:48 - 2014-10-13 14:48 - 01626056 _____ () C:\Users\startklaar\Downloads\Setup (1).exe
2014-10-13 12:43 - 2014-10-13 03:00 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{c89879cb-75b8-4cb6-bc13-07c704396fd0}w64.sys
2014-10-13 08:40 - 2014-10-13 08:40 - 00003504 _____ () C:\WINDOWS\System32\Tasks\Yahoo! Search Udpater
2014-10-13 08:40 - 2014-10-13 08:40 - 00003500 _____ () C:\WINDOWS\System32\Tasks\Yahoo! Search
2014-10-13 08:40 - 2014-10-13 08:40 - 00000000 ____D () C:\Users\startklaar\AppData\Local\Pay-By-Ads
2014-10-13 08:39 - 2014-10-12 20:24 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{0729a3ff-5ca9-4654-a275-96df29273fbf}w64.sys
2014-10-11 09:52 - 2014-10-10 20:51 - 00048784 _____ (StdLib) C:\WINDOWS\system32\Drivers\{4dbbe3b0-af29-43dd-bcba-7bfabd419f61}w64.sys
2014-10-10 15:55 - 2014-10-10 15:56 - 00000000 ____D () C:\ProgramData\SaulesChecKoer
2014-09-25 09:40 - 2014-02-17 13:41 - 00027456 _____ (IObit) C:\WINDOWS\system32\RegistryDefragBootTime.exe
2014-09-25 09:30 - 2014-09-25 09:30 - 00000000 ____D () C:\ProgramData\tOpdeual
2014-09-19 12:12 - 2014-09-19 12:12 - 00000000 ____D () C:\ProgramData\SharkManCoupon
2014-09-19 11:53 - 2014-10-10 15:56 - 00000000 ____D () C:\ProgramData\d775806c017ee32e
2014-10-17 00:53 - 2014-08-30 18:24 - 00000000 ____D () C:\Program Files (x86)\ClearThink
EmptyTemp:
W FRST wybierz Fix.
Po wykonaniu daj nowe logi z FRST.
