Analiza logów FRST - komputer zalewany reklamami, prośba o pomoc

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-02-2015 01
Ran by user at 2015-02-28 19:47:21
Running from C:\Users\user\Desktop\programy\FRST-OlderVersion
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be

uninstalled manually.)

µTorrent (HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\uTorrent) (Version: 3.4.2.37252 - BitTorrent

Inc.)
Adobe Acrobat 5.0 CE (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems

Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems

Incorporated)
Adobe Reader XI (11.0.06) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version:

11.0.06 - Adobe Systems Incorporated)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5751 - AVG Technologies)
AVG 2015 (Version: 15.0.4158 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.4299 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5751 - AVG Technologies) Hidden
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Counter-Strike 1.6 (HKLM-x32\...\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}) (Version: 1.6 - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Harry Potter i Książę Półkrwi™ (HKLM-x32\...\{FD1B1980-8CAB-4474-89F8-1245AF657AD1}) (Version: 1.0.0.0 -

Electronic Arts)
Heroes of Might and Magic III (HKLM-x32\...\{BEC72604-5B27-4C6B-B136-F98EF4C46F5B}) (Version: 1.0 - )
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
iPlus manager 2.2 (HKLM-x32\...\iPlus manager_is1) (Version: - )
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle

Corporation)
Legend (HKLM-x32\...\Legend: Hand of God_is1) (Version: - dtp AG)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version:

4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft

Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-

AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version:

8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version:

8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-

725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-

87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-

6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-

68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-

8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0

- Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 36.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 36.0 (x86 pl)) (Version: 36.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
Need for Speed™ Most Wanted (HKLM-x32\...\{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}) (Version: - )
Odkurzacz (HKLM-x32\...\Odkurzacz 13.5_is1) (Version: 13.5.0.1911 - FranmoSoftware - Maciej Opaliński)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.12.6.14870 - Sony

Computer Entertainment Inc.)
Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Podstawowe programy Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Przegląd podręcznika użytkownika (HKLM-x32\...\View User Guide) (Version: 3.60.43.0 - )
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.60.00(2013-07-23) -

Samsung Electronics Co., Ltd.)
Samsung M2020 Series (HKLM-x32\...\Samsung M2020 Series) (Version: 1.10 (2014-02-12) - Samsung Electronics

Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) -

Samsung Electronics Co., Ltd.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 -

Microsoft Corporation)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype

Technologies S.A.)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
The Sims 2 (HKLM-x32\...\{8AB8D458-939E-403F-0097-9BA1C1F013D5}) (Version: - )
The Sims 2 Nightlife (HKLM-x32\...\{F7529650-B9DB-481B-0089-A2AC3C2821C1}) (Version: - )
The Sims 2 University (HKLM-x32\...\{8FD3F4BA-A4A6-4380-00A6-CC6853AB2DC2}) (Version: - )
The Sims 2 Własny biznes (HKLM-x32\...\{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}) (Version: - )
The Sims™ 2 Zwierzaki (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version: - )
The Sims™ 2 Czas wolny (HKLM-x32\...\{87F6C83D-F949-4d14-B5CB-DC8C75F8932D}) (Version: - Electronic

Arts)
The Sims™ 2 Impreza! Akcesoria (HKLM-x32\...\{EAA38532-7AD0-4f78-918A-4F4F02096ECE}) (Version: - )
The Sims™ 2 Młodzieżowy styl Akcesoria (HKLM-x32\...\{5C648FDB-0138-4619-B66E-230EF53E8E2C}) (Version:

- Electronic Arts)
The Sims™ 2 Moda z H&M® Akcesoria (HKLM-x32\...\{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75})

(Version: - )
The Sims™ 2 Osiedlowe życie (HKLM-x32\...\{B6F5B704-06D3-4687-90F3-6195304AD755}) (Version: - Electronic

Arts)
The Sims™ 2 Podróże (HKLM-x32\...\{F248ADFA-64E0-4b03-8A83-059078BED6A0}) (Version: - Electronic Arts)
The Sims™ 2 Rezydencje i ogrody Akcesoria (HKLM-x32\...\{1A2A15C2-6780-49c1-B296-503230E9DE00})

(Version: - Electronic Arts)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version:

14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version:

14.0.0.1 - AVG Technologies CZ, s.r.o.)
WinRAR 5.11 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

05-02-2015 18:03:26 Installed STOPzilla
05-02-2015 18:08:02 Removed STOPzilla
05-02-2015 18:12:18 Removed STOPzilla
05-02-2015 18:13:42 Removed STOPzilla
06-02-2015 11:20:57 Zainstalowany program DirectX 9.0
08-02-2015 19:00:48 Kopia zapasowa systemu Windows
11-02-2015 16:26:33 Windows Update
12-02-2015 21:39:13 Windows Update
15-02-2015 19:00:32 Kopia zapasowa systemu Windows
22-02-2015 14:44:41 Sony PC Companion
22-02-2015 14:59:42 Installed Sony Mobile Drivers
22-02-2015 19:00:54 Kopia zapasowa systemu Windows
28-02-2015 18:53:37 Removed AGEIA PhysX v7.07.24

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-02-05 18:06 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be

moved.)

Task: {01CCB622-DA34-4B71-8535-047CE7D3CF62} - System32\Tasks\{5B68487E-7FC8-43BD-8769-

D302ED201B00} => Firefox.exe
Task: {1EC53FE5-7F4F-4DC6-8C4B-36FF5ADA1194} - System32\Tasks\{BFED532D-D0B7-493F-A048-

EA44A605C305} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
Task: {231852F2-6022-4FBD-A214-682621FBC100} - System32\Tasks\{86D3BA82-1BEE-4C38-B718-

E1D060BEF599} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
Task: {241D6F84-97CB-495B-B943-10A253EA4B03} - System32\Tasks\{C6693A6F-6852-4560-A263-

C7B951EA50B9} => Firefox.exe
Task: {267A333D-9267-4CCE-B81F-2BFAF7148405} - System32\Tasks\{350EFBF5-1906-4AEB-8983-

B8CE1AE7C262} => Firefox.exe
Task: {28B620D9-C9BD-44D2-9075-17E6551830DF} - System32\Tasks\{78B5D43E-6DE9-41D3-825C-

45BC237A12BD} => C:\Kasia\gry\Need for Speed Most Wanted\eauninstall.exe [2005-11-04] (Electronic Arts Inc.)
Task: {2902B758-4241-4EDA-AF39-C8E87AF774BE} - System32\Tasks\{B39C2A46-148E-4E6C-A440-

20FE0360D0F5} => Firefox.exe
Task: {3ED9B107-9669-4BF2-AE40-EAA52E117A93} - System32\Tasks\{167C85D3-7C9F-44F7-B1FF-

004042DB7AEE} => Firefox.exe
Task: {4119BA95-487A-4C1D-BAE9-2E51A97AA0A8} - System32\Tasks\{B7294556-FB35-43A6-B55D-

A7837FC980B3} => Firefox.exe
Task: {57B2230E-60FC-497D-B0D7-1ABE5B6B29B4} - System32\Tasks\{2FBA9CDA-5458-4F38-B80D-

38FEF5CEC51B} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
Task: {6F41829F-20F4-420E-A1DE-30881AFA2B92} - System32\Tasks\{2303AAEF-57B1-4AB1-B465-

22E188860545} => Firefox.exe
Task: {7AB28A21-829F-4B12-9DDD-75E43D1A7DF6} - System32\Tasks\{89AA46CD-2CD4-452C-BE1D-

6DCD388C79C9} => Firefox.exe
Task: {7FEDB0AE-41E8-4060-9187-0590E32C2372} - System32\Tasks\{3B655AE7-7D40-46F5-B1E6-

5E3D6105AD38} => Firefox.exe
Task: {9B17C0FF-B09B-493D-8483-C71A6748297F} - System32\Tasks\Odkurzacz => C:\Program Files

(x86)\Odkurzacz\odkurzacz.exe [2014-09-07] (FranmoSoftware)
Task: {9BEA8159-D27E-4BEF-92B4-F080FB7E9955} - System32\Tasks\{7DB52683-6D85-43FB-B38F-

6FD73F48AF4B} => Firefox.exe
Task: {B6A6B14E-7F33-4EEF-AB83-9005FCFCCF19} - System32\Tasks\{EC3BBC7B-4E67-41A4-88F0-

A51B878FE805} => Firefox.exe
Task: {EEFB1C7A-E070-422F-9906-DA39327247A6} - System32\Tasks\{7034AB35-1436-45DB-9763-

F7F6E4678F84} => Firefox.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-02 14:30 - 2014-12-02 14:30 - 00029184 _____ () C:\Windows\System32\ssj2mlm.dll
2012-03-09 09:58 - 2012-03-09 09:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent

\CDASrv.exe
2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent

\CDASrvPS.dll
2014-08-20 12:08 - 2010-01-04 10:30 - 03297280 _____ () C:\iPlus\iPlusManager.exe
2014-08-20 12:09 - 2010-01-04 10:30 - 00991232 _____ () C:\iPlus\NDISAPI.dll
2015-02-07 22:23 - 2015-02-07 22:23 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash

\NPSWF32_16_0_0_305.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Software\Classes\.exe: exefile => <=====

ATTENTION!
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Software\Classes\exefile: <===== ATTENTION!

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user

\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 212.2.96.53 - 212.2.96.54

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-2989270091-3903101940-2521635766-500 - Administrator - Disabled)
Gość (S-1-5-21-2989270091-3903101940-2521635766-501 - Limited - Disabled)
user (S-1-5-21-2989270091-3903101940-2521635766-1000 - Administrator - Enabled) => C:\Users\user

==================== Faulty Device Manager Devices =============

Name: ARRGJQCX IDE Controller
Description: ARRGJQCX IDE Controller
Class Guid: {4D36E97B-E325-11CE-BFC1-08002BE10318}
Manufacturer: (Standard mass storage controllers)
Service: aax85jup
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a

driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Teredo Tunneling Pseudo-Interface
Description: Karta tunelowania Teredo firmy Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/27/2015 07:38:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program FRST64.exe w wersji 25.2.2015.1 zatrzymał interakcję z systemem Windows i został zamknięty.

Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

sterowania Centrum akcji.

Identyfikator procesu: 4bc

Godzina rozpoczęcia: 01d052bbf30f3a53

Godzina zakończenia: 10

Ścieżka aplikacji: C:\Users\user\Desktop\Nowy folder\FRST64.exe

Identyfikator raportu:

Error: (02/25/2015 03:28:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program Explorer.EXE w wersji 6.1.7601.17567 zatrzymał interakcję z systemem Windows i został

zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w

panelu sterowania Centrum akcji.

Identyfikator procesu: 7b8

Godzina rozpoczęcia: 01d050f6d071ee41

Godzina zakończenia: 104

Ścieżka aplikacji: C:\Windows\Explorer.EXE

Identyfikator raportu: 97e4ea26-bcfa-11e4-9695-001e101f21c1

Error: (02/24/2015 07:55:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: setup.exe_Sony PC Companion, wersja: 17.0.0.717, sygnatura czasowa:

0x4cab8cfa
Nazwa modułu powodującego błąd: DownloadManager.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x53be652d
Kod wyjątku: 0xc0000005
Przesunięcie błędu: 0x6a2846f0
Identyfikator procesu powodującego błąd: 0x11f0
Godzina uruchomienia aplikacji powodującej błąd: 0xsetup.exe_Sony PC Companion0
Ścieżka aplikacji powodującej błąd: setup.exe_Sony PC Companion1
Ścieżka modułu powodującego błąd: setup.exe_Sony PC Companion2
Identyfikator raportu: setup.exe_Sony PC Companion3

Error: (02/22/2015 07:08:45 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Wykonanie kopii zapasowej nie powiodło się. Błąd: Na tym dysku jest za mało miejsca, aby zapisać kopię

zapasową. Zwolnij miejsce, usuwając starsze kopie zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii

zapasowej. (0x81000005).

Error: (02/22/2015 02:53:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program DllHost.exe w wersji 6.1.7600.16385 zatrzymał interakcję z systemem Windows i został zamknięty.

Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

sterowania Centrum akcji.

Identyfikator procesu: 7f0

Godzina rozpoczęcia: 01d04ea6e47034ca

Godzina zakończenia: 375

Ścieżka aplikacji: C:\Windows\system32\DllHost.exe

Identyfikator raportu: 3144c2aa-ba9a-11e4-b75d-001e101f82a7

Error: (02/22/2015 02:39:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program odkurzacz.exe w wersji 13.5.3.1962 zatrzymał interakcję z systemem Windows i został zamknięty.

Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

sterowania Centrum akcji.

Identyfikator procesu: d28

Godzina rozpoczęcia: 01d04ea4b1d3d622

Godzina zakończenia: 312

Ścieżka aplikacji: C:\Program Files (x86)\Odkurzacz\odkurzacz.exe

Identyfikator raportu: 2440ec8d-ba98-11e4-b75d-6c626df59259

Error: (02/20/2015 07:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 35.0.1.5500, sygnatura czasowa:

0x54c1f9f3
Nazwa modułu powodującego błąd: mozalloc.dll, wersja: 35.0.1.5500, sygnatura czasowa: 0x54c1f224
Kod wyjątku: 0x80000003
Przesunięcie błędu: 0x00001425
Identyfikator procesu powodującego błąd: 0xcb8
Godzina uruchomienia aplikacji powodującej błąd: 0xplugin-container.exe0
Ścieżka aplikacji powodującej błąd: plugin-container.exe1
Ścieżka modułu powodującego błąd: plugin-container.exe2
Identyfikator raportu: plugin-container.exe3

Error: (02/19/2015 04:26:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program DllHost.exe w wersji 6.1.7600.16385 zatrzymał interakcję z systemem Windows i został zamknięty.

Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

sterowania Centrum akcji.

Identyfikator procesu: 1530

Godzina rozpoczęcia: 01d04c5853a8f56b

Godzina zakończenia: 20

Ścieżka aplikacji: C:\Windows\system32\DllHost.exe

Identyfikator raportu: a61e4fb2-b84b-11e4-acf0-001e101f4e71

Error: (02/15/2015 07:06:37 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Wykonanie kopii zapasowej nie powiodło się. Błąd: Na tym dysku jest za mało miejsca, aby zapisać kopię

zapasową. Zwolnij miejsce, usuwając starsze kopie zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii

zapasowej. (0x81000005).

Error: (02/14/2015 09:01:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program hl.exe w wersji 1.1.1.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć,

czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania

Centrum akcji.

Identyfikator procesu: a14

Godzina rozpoczęcia: 01d0488d7ccaa310

Godzina zakończenia: 3692

Ścieżka aplikacji: C:\Users\user\Desktop\gry\Counter-Strike 1.6\cs\hl.exe

Identyfikator raportu: 49b25cdb-b484-11e4-972e-001e101f2500


System errors:
=============
Error: (02/28/2015 05:04:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
%%1275

Error: (02/28/2015 05:04:52 PM) (Source: Application Popup) (EventID: 875) (User: )
Description: Sterownik atksgt.sys został zablokowany dla ładowania.

Error: (02/28/2015 05:04:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi sbapifs z powodu następującego błędu:
%%2

Error: (02/28/2015 03:18:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (02/28/2015 00:30:30 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: System wykrył konflikt adresów między adresem IP 31.2.95.156 a komputerem o sieciowym
adresie sprzętowym 02-50-F3-00-00-00. W rezultacie mogą być zakłócone operacje sieciowe na
tym komputerze.

Error: (02/28/2015 11:45:21 AM) (Source: Tcpip) (EventID: 4199) (User: )
Description: System wykrył konflikt adresów między adresem IP 95.40.150.76 a komputerem o sieciowym
adresie sprzętowym 02-50-F3-00-00-00. W rezultacie mogą być zakłócone operacje sieciowe na
tym komputerze.

Error: (02/28/2015 08:58:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
%%1275

Error: (02/28/2015 08:58:38 AM) (Source: Application Popup) (EventID: 875) (User: )
Description: Sterownik atksgt.sys został zablokowany dla ładowania.

Error: (02/28/2015 08:58:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi sbapifs z powodu następującego błędu:
%%2

Error: (02/27/2015 07:48:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
%%1275


Microsoft Office Sessions:
=========================
Error: (02/27/2015 07:38:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: FRST64.exe25.2.2015.14bc01d052bbf30f3a5310C:\Users\user\Desktop\Nowy folder\FRST64.exe

Error: (02/25/2015 03:28:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.1.7601.175677b801d050f6d071ee41104C:\Windows\Explorer.EXE97e4ea26-bcfa-11e4-

9695-001e101f21c1

Error: (02/24/2015 07:55:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: setup.exe_Sony PC

Companion17.0.0.7174cab8cfaDownloadManager.dll_unloaded0.0.0.053be652dc00000056a2846f011f001d0505b1e7e

94ddC:\Users\user\AppData\Local\Temp\{856B0C7D-4644-4A47-86BA-

CD9C0099B897}\setup.exeDownloadManager.dllb24b3989-bc56-11e4-a655-001e101f3315

Error: (02/22/2015 07:08:45 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Na tym dysku jest za mało miejsca, aby zapisać kopię zapasową. Zwolnij miejsce, usuwając starsze kopie

zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii zapasowej. (0x81000005)

Error: (02/22/2015 02:53:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: DllHost.exe6.1.7600.163857f001d04ea6e47034ca375C:\Windows\system32\DllHost.exe3144c2aa-ba9a-

11e4-b75d-001e101f82a7

Error: (02/22/2015 02:39:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: odkurzacz.exe13.5.3.1962d2801d04ea4b1d3d622312C:\Program Files (x86)\Odkurzacz

\odkurzacz.exe2440ec8d-ba98-11e4-b75d-6c626df59259

Error: (02/20/2015 07:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-

container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f2248000000300001425cb801d04d33b7cc9796C:

\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllbd0a0671-

b930-11e4-b32b-001e101f8ed0

Error: (02/19/2015 04:26:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: DllHost.exe6.1.7600.16385153001d04c5853a8f56b20C:\Windows\system32\DllHost.exea61e4fb2-b84b-

11e4-acf0-001e101f4e71

Error: (02/15/2015 07:06:37 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Na tym dysku jest za mało miejsca, aby zapisać kopię zapasową. Zwolnij miejsce, usuwając starsze kopie

zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii zapasowej. (0x81000005)

Error: (02/14/2015 09:01:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: hl.exe1.1.1.1a1401d0488d7ccaa3103692C:\Users\user\Desktop\gry\Counter-Strike 1.6\cs

\hl.exe49b25cdb-b484-11e4-972e-001e101f2500


==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
Percentage of memory in use: 84%
Total physical RAM: 2013.18 MB
Available physical RAM: 317.21 MB
Total Pagefile: 4026.36 MB
Available Pagefile: 1822.57 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:227.9 GB) (Free:36.59 GB) NTFS
Drive d: (recovery_disk) (Fixed) (Total:4.88 GB) (Free:0.01 GB) NTFS
Drive l: (iPlus) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 39E339E2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=227.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=4.9 GB) - (Type=07 NTFS)

==================== End Of Log ============================













Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by user (administrator) on USER-KOMPUTER on 28-02-2015 19:43:22
Running from C:\Users\user\Desktop\programy\FRST-OlderVersion
Loaded Profiles: user (Available profiles: user)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-f...utorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
() C:\iPlus\iPlusManager.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM-x32\...\Run: [iPlusManager] => C:\iPlus\iPlusChecker.exe [446464 2010-01-04] ()
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\Run: [EpicScale] => [X]
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: L - L:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {1216db28-33ed-11e3-8184-001e101fb45e} - F:\Startme.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {18429df7-981c-11e0-bd10-6c626df59259} - F:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {2221f4c8-9821-11e0-8e50-001e101fb681} - F:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3058172d-781d-11e2-a4c3-001e101f57d0} - O:\Startme.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3e01722a-5260-11e2-a071-6c626df59259} - F:\MicroLauncher.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {42dcc5e5-9819-11e0-b8f3-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13540-e1e6-11e0-b063-806e6f6e6963} - L:\setup.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13541-e1e6-11e0-b063-806e6f6e6963} - M:\SETUP.EXE
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {a7ff69e0-983c-11e0-923f-001e101fb45e} - L:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {ad11cecb-98e6-11e0-8cb5-001e101fa1f5} - F:\AutoRun.exe
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {c9ab3acc-c512-11e0-84e3-001e101fabdd} - N:\SETUP.EXE
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {fa54128d-dd7d-11e2-9ed2-6c626df59259} - O:\LGAutoRun.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 212.2.96.53 212.2.96.54

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mueqwcs0.default-1425065977859
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @TOOLS.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TOOLS.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mueqwcs0.default-1425065977859\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-28]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-06]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-06]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-06]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-06]
CHR Extension: (Adblock Super) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-06]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-06]

Opera:
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe http://www.delta-homes.com/?utm_source=b&...0312AS_5VY5D24KXXXX5VY5D24K&ts=1377190328

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-01] (Electronic Arts)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2011-07-21] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [270816 2015-02-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-01-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [284128 2015-01-16] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [270912 2011-08-12] (DT Soft Ltd)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-02-05] ()
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [133632 2010-01-04] (Huawei Technologies Co., Ltd.)
R3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2010-01-04] (Huawei Technologies Co., Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-07-21] ()
S3 PCTFW-PacketFilter; C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys [119688 2011-01-12] (PC Tools)
R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi64.sys [334976 2011-01-17] (PC Tools)
S3 pctNdis; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
R3 pctNdisMP; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
S3 pctplfw; C:\Windows\System32\drivers\pctplfw64.sys [179976 2011-01-17] (PC Tools)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-28] (Duplex Secure Ltd.)
U3 aax85jup; No ImagePath
S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [X]
U4 WMCoreService; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-27 20:39 - 2015-02-27 20:39 - 00000000 ____D () C:\Users\user\Desktop\Stare dane programu Firefox
2015-02-27 19:37 - 2015-02-27 19:46 - 00000000 ____D () C:\AdwCleaner
2015-02-26 20:56 - 2015-02-26 20:56 - 00483744 _____ () C:\Windows\Minidump\022615-41730-01.dmp
2015-02-24 17:15 - 2015-02-27 19:48 - 00000924 _____ () C:\Windows\PFRO.log
2015-02-23 16:43 - 2015-02-23 17:01 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-02-23 16:43 - 2015-02-23 16:43 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-02-23 16:42 - 2015-02-23 16:42 - 00000000 ____D () C:\Users\user\AppData\Roaming\TeamViewer
2015-02-22 15:14 - 2015-02-28 19:43 - 00000000 ____D () C:\FRST
2015-02-22 14:59 - 2015-02-28 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile
2015-02-22 14:47 - 2015-02-22 14:47 - 00142988 _____ () C:\Windows\DPINST.LOG
2015-02-22 11:16 - 2015-02-28 18:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-19 21:26 - 2015-02-19 21:26 - 00270816 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-02-12 17:17 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 17:17 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 17:17 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 17:17 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 15:48 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 15:48 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 15:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 15:48 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 15:48 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 15:48 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 15:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 15:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 15:48 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 15:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 15:48 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 15:48 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 15:48 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 15:48 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 15:48 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 15:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 15:48 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 15:48 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 15:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 15:48 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 15:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 15:48 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 15:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 15:48 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 15:48 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 15:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 15:48 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 15:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 15:48 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 15:48 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 15:48 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 15:48 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 15:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 15:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 15:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 15:48 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 15:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 15:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 15:48 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 15:48 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 15:48 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 15:48 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 15:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 15:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 15:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 15:48 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 15:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 15:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 15:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 15:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 15:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 15:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 15:48 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 15:48 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 15:47 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 15:47 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 15:46 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 15:46 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 15:46 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 15:46 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 15:46 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 15:46 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 15:46 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 15:46 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 15:46 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 15:46 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 15:46 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 15:46 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 15:46 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 15:46 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 15:46 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 15:46 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 15:46 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 15:46 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 15:45 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 15:45 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 15:44 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 15:44 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 15:44 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 15:44 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 15:44 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 15:44 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 15:44 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 15:37 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-07 22:24 - 2015-02-27 19:29 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-02-05 18:07 - 2015-02-05 18:11 - 00001336 _____ () C:\Windows\system32\Drivers\kgpcpy.cfg
2015-02-05 18:07 - 2015-02-05 18:07 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2015-02-05 18:07 - 2015-02-05 18:07 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-02-03 10:47 - 2015-02-03 10:47 - 00341472 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2015-02-01 11:52 - 2015-02-01 11:53 - 00000000 ____D () C:\Users\user\AppData\Local\Origin
2015-02-01 11:41 - 2015-02-01 11:41 - 05673816 _____ (Microsoft Corporation) C:\Users\user\Downloads\vcredist_x64.exe
2015-02-01 11:39 - 2015-02-01 11:39 - 04995416 _____ (Microsoft Corporation) C:\Users\user\Downloads\vcredist_x86.exe
2015-02-01 11:27 - 2015-02-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-02-01 11:27 - 2015-02-01 11:52 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-02-01 11:25 - 2015-02-01 11:26 - 17102664 _____ (Electronic Arts, Inc.) C:\Users\user\Downloads\OriginThinSetup (1).exe
2015-01-30 15:44 - 2015-01-30 15:44 - 00001475 _____ () C:\Users\user\AppData\Local\recently-used.xbel
2015-01-30 15:29 - 2015-01-30 15:29 - 00000000 ____D () C:\Users\user\AppData\Local\webkit
2015-01-30 15:29 - 2015-01-30 15:29 - 00000000 ____D () C:\Users\user\.thumbnails
2015-01-30 15:24 - 2015-01-30 15:47 - 00000000 ____D () C:\Users\user\.gimp-2.8
2015-01-30 15:24 - 2015-01-30 15:24 - 00000000 ____D () C:\Users\user\AppData\Local\gegl-0.2
2015-01-30 15:22 - 2015-01-30 15:22 - 91931728 _____ (The GIMP Team ) C:\Users\user\Downloads\gimp-2.8.14-setup-1.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-28 18:59 - 2013-05-24 18:02 - 00000000 ____D () C:\Users\user\Desktop\programy
2015-02-28 18:57 - 2013-02-16 13:30 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-02-28 18:56 - 2012-09-05 14:08 - 00000000 ____D () C:\Users\user\Desktop\instalki
2015-02-28 18:52 - 2011-06-15 19:54 - 01260506 _____ () C:\Windows\WindowsUpdate.log
2015-02-28 18:45 - 2011-06-16 14:32 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8F8D8A03-DD78-4F65-AD22-3076C17B8F6E}
2015-02-28 17:04 - 2014-10-17 21:12 - 00018456 _____ () C:\Windows\setupact.log
2015-02-28 17:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-28 15:02 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-28 15:02 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-28 09:54 - 2014-10-15 18:08 - 00000000 ____D () C:\ProgramData\MFAData
2015-02-27 20:42 - 2013-11-08 17:21 - 00000000 ____D () C:\Users\user\Desktop\lol
2015-02-27 20:39 - 2014-02-15 15:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-27 18:42 - 2014-12-30 16:50 - 00000000 ____D () C:\Users\user\Desktop\mmmmmmmmmm
2015-02-26 20:56 - 2014-11-05 19:28 - 203894030 _____ () C:\Windows\MEMORY.DMP
2015-02-26 20:56 - 2011-09-11 12:11 - 00000000 ____D () C:\Windows\Minidump
2015-02-25 14:00 - 2014-10-15 18:15 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-02-25 14:00 - 2014-10-15 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-02-24 18:56 - 2011-06-16 14:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-24 14:14 - 2009-07-14 05:45 - 00272472 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-23 18:43 - 2011-06-16 15:30 - 00059352 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-22 13:07 - 2014-05-20 16:08 - 00000000 ____D () C:\Users\user\Desktop\gry
2015-02-22 11:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Vss
2015-02-22 11:41 - 2012-09-02 20:02 - 00000000 ____D () C:\Users\user\AppData\Local\CRE
2015-02-20 18:06 - 2013-08-14 10:07 - 00000000 ____D () C:\Users\user\AppData\Local\Windows Live
2015-02-11 17:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-11 16:29 - 2013-08-13 17:08 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 16:29 - 2011-07-09 19:19 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-07 23:24 - 2012-06-15 16:54 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-07 23:24 - 2011-06-16 14:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-07 22:24 - 2014-08-07 07:57 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2015-02-06 12:40 - 2009-07-14 18:55 - 01124776 _____ () C:\Windows\system32\perfh015.dat
2015-02-06 12:40 - 2009-07-14 18:55 - 00286274 _____ () C:\Windows\system32\perfc015.dat
2015-02-06 12:40 - 2009-07-14 06:13 - 00006264 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-06 11:33 - 2012-09-27 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2015-02-06 11:22 - 2012-03-25 14:08 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
2015-02-01 11:53 - 2014-08-13 10:29 - 00000000 ____D () C:\ProgramData\Origin
2015-02-01 11:27 - 2011-07-10 12:33 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-01-30 15:09 - 2011-07-03 16:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\PhotoScape
2015-01-29 13:25 - 2014-08-08 07:57 - 00002225 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories =======

2013-07-10 12:05 - 2013-07-10 12:06 - 0000041 _____ () C:\Users\user\AppData\Roaming\prio.ini
2012-01-30 13:51 - 2012-01-30 13:51 - 0028501 _____ () C:\Users\user\AppData\Roaming\UserTile.png
2013-08-05 10:39 - 2014-01-04 14:17 - 0000125 _____ () C:\Users\user\AppData\Roaming\WB.CFG
2013-07-05 11:39 - 2013-07-08 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-Q3-TTL.DAT
2013-07-11 11:39 - 2013-07-11 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-23 10:39 - 2013-08-20 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-TTL.DAT
2015-01-30 15:44 - 2015-01-30 15:44 - 0001475 _____ () C:\Users\user\AppData\Local\recently-used.xbel
2011-12-18 17:44 - 2011-12-18 17:44 - 2161160 _____ (DownVision ) C:\Users\user\AppData\Local\setup.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-28 11:44

==================== End Of Log ============================