Elektroda.pl
Elektroda.pl
X
Relpol
Proszę, dodaj wyjątek www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Prośba o analizę logów z programu FRST.

aisak15 27 Lut 2015 18:21 1113 19
  • Relpol
  • #2 27 Lut 2015 18:59
    Acorus 20
    Spec od komputerów

    Odinstaluj McAfee Security Scan Plus.Otwórz notatnik systemowy i wklej:

    Cytat:
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\Run: [EpicScale] => [X]
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
    ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
    FF Extension: 6D1D11DB3C6C4db896E420F4A1088AAC - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\x8ijulzn.default-1419626530719\Extensions\{6D1D11DB-3C6C-4db8-96E4-20F4A1088AAC} [2014-12-27]
    FF Extension: Adblock Edge - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\x8ijulzn.default-1419626530719\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2015-02-23]
    FF HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
    FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
    StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe http://www.delta-homes.com/?utm_source=b&...0312AS_5VY5D24KXXXX5VY5D24K&ts=1377190328
    S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
    S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-02-05] ()
    U3 a8kqyoo3; No ImagePath
    S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
    S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
    S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [X]
    U4 WMCoreService; No ImagePath
    2015-02-14 12:52 - 2015-02-14 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
    2015-02-14 12:51 - 2015-02-14 12:51 - 00000000 ____D () C:\Program Files\McAfee Security Scan
    2015-02-07 22:24 - 2015-02-14 12:51 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
    2015-02-05 18:07 - 2015-02-05 18:07 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
    2015-02-05 18:07 - 2015-02-05 18:07 - 00000000 ____D () C:\Program Files\Enigma Software Group
    EmptyTemp:


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix.Pobierz i uruchom jako administrator AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Scan i później Cleaning.

    0
  • Relpol
  • #6 28 Lut 2015 13:01
    Acorus 20
    Spec od komputerów

    W jakiej przeglądarce?

    0
  • #7 28 Lut 2015 14:13
    Adam0992
    Poziom 14  

    Prawdopodobnie zainstalowało się rozszerzenie w przeglądarce i tego nie bierze adwcleaner. W Firefoxie wejdź w dodatki i zakładka rozszerzenia i wtyczki. Jeśli zobaczysz tam coś podejrzanego to usuń. W chromie nie wiem co i jak, nie używam tego.

    0
  • #9 28 Lut 2015 15:22
    Adam0992
    Poziom 14  

    We wtyczkach można tylko ustawić żeby się nie uruchamiało. Jeśli masz wątpliwości to zrób screenshota i wstaw tu.

    0
  • #11 28 Lut 2015 18:37
    Adam0992
    Poziom 14  

    Z wyłączonych pierwszy i ostatni są bezpieczne, dwóch pozostałych nie znam. W rozszerzeniach jest czysto? Problem nadal jest?

    0
  • #13 28 Lut 2015 18:49
    Adam0992
    Poziom 14  

    Jedyne co mi jeszcze przychodzi do głowy to usunięcie wszystkich programów, których nie zainstalowałeś świadomie TYM programem. Przejrzyj listę, usuń co wydaje ci się zbędne i wstaw to co zostanie może ja też coś wychwycę.

    0
  • #15 28 Lut 2015 19:05
    Adam0992
    Poziom 14  

    W internet exsplorerze też wyskakują reklamy? Na innych komputerach połączonych do tego routera występuje problem?

    0
  • #16 28 Lut 2015 19:22
    aisak15
    Poziom 7  

    Nigdy z tej przeglądarki nie korzystałam, ale np. w Google Chrome już nie było tych reklam tylko ona mi strasznie się zacinała więc wolałam przejść na Mozille.

    Dodano po 1 [minuty]:

    Nigdy w sumie nie podłączałam rutera do innych komputerów itp.

    0
  • #17 28 Lut 2015 19:29
    Acorus 20
    Spec od komputerów

    Pokaż nowe logi z FRST.Sprawdź na nowym profilu.

    0
  • #18 28 Lut 2015 19:33
    Adam0992
    Poziom 14  

    No to uruchom ją, jest ona standardowo w windowsie, wejdź na jakaś stronę i zobacz co będzie się działo. Na pewno zaglądałaś w dodatkach do rozszerzeń? Jeśli tam nie będzie reklam i w chromie nie ma tak jak mówisz to przydałoby się czyszczenie mozilly ze wszelakich ciasteczek i plików cashe. Pobierz sobie Ccleanera, zakładka programy i do firefoxa zaznacz
    - pamięć podręczna
    - historia (jeśli chcesz)
    - cookies
    - historia pobrań
    - zapisane informacje o formularzach
    - kompresuj bazy danych
    i czyść
    Jeśli z kolei to nie pomorze przeinstaluj przeglądarkę (usuń ją przez geek). Ustawienia i zakładki firefoxa możesz zachować tworząc sobie konto ("zaloguj się do sync").

    0
  • #19 28 Lut 2015 19:54
    aisak15
    Poziom 7  

    Włączyłam explorera i były reklamy.

    A FRST jeszcze skanuje.

    Edit:

    Nie wiem jak dać logi w załączniku, to daję normalnie:

    Spoiler:
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-02-2015 01
    Ran by user at 2015-02-28 19:47:21
    Running from C:\Users\user\Desktop\programy\FRST-OlderVersion
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be

    uninstalled manually.)

    µTorrent (HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\uTorrent) (Version: 3.4.2.37252 - BitTorrent

    Inc.)
    Adobe Acrobat 5.0 CE (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
    Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems

    Incorporated)
    Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems

    Incorporated)
    Adobe Reader XI (11.0.06) - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AB0000000001}) (Version:

    11.0.06 - Adobe Systems Incorporated)
    AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5751 - AVG Technologies)
    AVG 2015 (Version: 15.0.4158 - AVG Technologies) Hidden
    AVG 2015 (Version: 15.0.4299 - AVG Technologies) Hidden
    AVG 2015 (Version: 15.0.5751 - AVG Technologies) Hidden
    Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
    Counter-Strike 1.6 (HKLM-x32\...\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}) (Version: 1.6 - )
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
    Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Harry Potter i Książę Półkrwi™ (HKLM-x32\...\{FD1B1980-8CAB-4474-89F8-1245AF657AD1}) (Version: 1.0.0.0 -

    Electronic Arts)
    Heroes of Might and Magic III (HKLM-x32\...\{BEC72604-5B27-4C6B-B136-F98EF4C46F5B}) (Version: 1.0 - )




    Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
    iPlus manager 2.2 (HKLM-x32\...\iPlus manager_is1) (Version: - )
    Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
    Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle

    Corporation)
    Legend (HKLM-x32\...\Legend: Hand of God_is1) (Version: - dtp AG)
    Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version:

    4.5.50938 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft

    Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-

    AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version:

    8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version:

    8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-

    725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-

    87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-

    6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-

    68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-

    8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0

    - Microsoft Corp.)
    Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    Mozilla Firefox 36.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 36.0 (x86 pl)) (Version: 36.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
    Need for Speed™ Most Wanted (HKLM-x32\...\{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}) (Version: - )
    Odkurzacz (HKLM-x32\...\Odkurzacz 13.5_is1) (Version: 13.5.0.1911 - FranmoSoftware - Maciej Opaliński)
    Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
    PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
    PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.12.6.14870 - Sony

    Computer Entertainment Inc.)
    Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
    Podstawowe programy Windows Live (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
    Przegląd podręcznika użytkownika (HKLM-x32\...\View User Guide) (Version: 3.60.43.0 - )
    Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.60.00(2013-07-23) -

    Samsung Electronics Co., Ltd.)
    Samsung M2020 Series (HKLM-x32\...\Samsung M2020 Series) (Version: 1.10 (2014-02-12) - Samsung Electronics

    Co., Ltd.)
    Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) -

    Samsung Electronics Co., Ltd.)
    Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 -

    Microsoft Corporation)
    Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype

    Technologies S.A.)
    TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
    The Sims 2 (HKLM-x32\...\{8AB8D458-939E-403F-0097-9BA1C1F013D5}) (Version: - )
    The Sims 2 Nightlife (HKLM-x32\...\{F7529650-B9DB-481B-0089-A2AC3C2821C1}) (Version: - )
    The Sims 2 University (HKLM-x32\...\{8FD3F4BA-A4A6-4380-00A6-CC6853AB2DC2}) (Version: - )
    The Sims 2 Własny biznes (HKLM-x32\...\{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}) (Version: - )
    The Sims™ 2 Zwierzaki (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version: - )
    The Sims™ 2 Czas wolny (HKLM-x32\...\{87F6C83D-F949-4d14-B5CB-DC8C75F8932D}) (Version: - Electronic

    Arts)
    The Sims™ 2 Impreza! Akcesoria (HKLM-x32\...\{EAA38532-7AD0-4f78-918A-4F4F02096ECE}) (Version: - )
    The Sims™ 2 Młodzieżowy styl Akcesoria (HKLM-x32\...\{5C648FDB-0138-4619-B66E-230EF53E8E2C}) (Version:

    - Electronic Arts)
    The Sims™ 2 Moda z H&M® Akcesoria (HKLM-x32\...\{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75})

    (Version: - )
    The Sims™ 2 Osiedlowe życie (HKLM-x32\...\{B6F5B704-06D3-4687-90F3-6195304AD755}) (Version: - Electronic

    Arts)
    The Sims™ 2 Podróże (HKLM-x32\...\{F248ADFA-64E0-4b03-8A83-059078BED6A0}) (Version: - Electronic Arts)
    The Sims™ 2 Rezydencje i ogrody Akcesoria (HKLM-x32\...\{1A2A15C2-6780-49c1-B296-503230E9DE00})

    (Version: - Electronic Arts)
    Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version:

    14.0.0.1 - AVG Technologies)
    Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version:

    14.0.0.1 - AVG Technologies CZ, s.r.o.)
    WinRAR 5.11 (32-bitowy) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


    ==================== Restore Points =========================

    05-02-2015 18:03:26 Installed STOPzilla
    05-02-2015 18:08:02 Removed STOPzilla
    05-02-2015 18:12:18 Removed STOPzilla
    05-02-2015 18:13:42 Removed STOPzilla
    06-02-2015 11:20:57 Zainstalowany program DirectX 9.0
    08-02-2015 19:00:48 Kopia zapasowa systemu Windows
    11-02-2015 16:26:33 Windows Update
    12-02-2015 21:39:13 Windows Update
    15-02-2015 19:00:32 Kopia zapasowa systemu Windows
    22-02-2015 14:44:41 Sony PC Companion
    22-02-2015 14:59:42 Installed Sony Mobile Drivers
    22-02-2015 19:00:54 Kopia zapasowa systemu Windows
    28-02-2015 18:53:37 Removed AGEIA PhysX v7.07.24

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 03:34 - 2015-02-05 18:06 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1 localhost
    ::1 localhost

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be

    moved.)

    Task: {01CCB622-DA34-4B71-8535-047CE7D3CF62} - System32\Tasks\{5B68487E-7FC8-43BD-8769-

    D302ED201B00} => Firefox.exe
    Task: {1EC53FE5-7F4F-4DC6-8C4B-36FF5ADA1194} - System32\Tasks\{BFED532D-D0B7-493F-A048-

    EA44A605C305} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
    Task: {231852F2-6022-4FBD-A214-682621FBC100} - System32\Tasks\{86D3BA82-1BEE-4C38-B718-

    E1D060BEF599} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
    Task: {241D6F84-97CB-495B-B943-10A253EA4B03} - System32\Tasks\{C6693A6F-6852-4560-A263-

    C7B951EA50B9} => Firefox.exe
    Task: {267A333D-9267-4CCE-B81F-2BFAF7148405} - System32\Tasks\{350EFBF5-1906-4AEB-8983-

    B8CE1AE7C262} => Firefox.exe
    Task: {28B620D9-C9BD-44D2-9075-17E6551830DF} - System32\Tasks\{78B5D43E-6DE9-41D3-825C-

    45BC237A12BD} => C:\Kasia\gry\Need for Speed Most Wanted\eauninstall.exe [2005-11-04] (Electronic Arts Inc.)
    Task: {2902B758-4241-4EDA-AF39-C8E87AF774BE} - System32\Tasks\{B39C2A46-148E-4E6C-A440-

    20FE0360D0F5} => Firefox.exe
    Task: {3ED9B107-9669-4BF2-AE40-EAA52E117A93} - System32\Tasks\{167C85D3-7C9F-44F7-B1FF-

    004042DB7AEE} => Firefox.exe
    Task: {4119BA95-487A-4C1D-BAE9-2E51A97AA0A8} - System32\Tasks\{B7294556-FB35-43A6-B55D-

    A7837FC980B3} => Firefox.exe
    Task: {57B2230E-60FC-497D-B0D7-1ABE5B6B29B4} - System32\Tasks\{2FBA9CDA-5458-4F38-B80D-

    38FEF5CEC51B} => C:\Program Files (x86)\Valve\hl.exe [2004-02-10] (Valve)
    Task: {6F41829F-20F4-420E-A1DE-30881AFA2B92} - System32\Tasks\{2303AAEF-57B1-4AB1-B465-

    22E188860545} => Firefox.exe
    Task: {7AB28A21-829F-4B12-9DDD-75E43D1A7DF6} - System32\Tasks\{89AA46CD-2CD4-452C-BE1D-

    6DCD388C79C9} => Firefox.exe
    Task: {7FEDB0AE-41E8-4060-9187-0590E32C2372} - System32\Tasks\{3B655AE7-7D40-46F5-B1E6-

    5E3D6105AD38} => Firefox.exe
    Task: {9B17C0FF-B09B-493D-8483-C71A6748297F} - System32\Tasks\Odkurzacz => C:\Program Files

    (x86)\Odkurzacz\odkurzacz.exe [2014-09-07] (FranmoSoftware)
    Task: {9BEA8159-D27E-4BEF-92B4-F080FB7E9955} - System32\Tasks\{7DB52683-6D85-43FB-B38F-

    6FD73F48AF4B} => Firefox.exe
    Task: {B6A6B14E-7F33-4EEF-AB83-9005FCFCCF19} - System32\Tasks\{EC3BBC7B-4E67-41A4-88F0-

    A51B878FE805} => Firefox.exe
    Task: {EEFB1C7A-E070-422F-9906-DA39327247A6} - System32\Tasks\{7034AB35-1436-45DB-9763-

    F7F6E4678F84} => Firefox.exe

    ==================== Loaded Modules (whitelisted) ==============

    2014-12-02 14:30 - 2014-12-02 14:30 - 00029184 _____ () C:\Windows\System32\ssj2mlm.dll
    2012-03-09 09:58 - 2012-03-09 09:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent

    \CDASrv.exe
    2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent

    \CDASrvPS.dll
    2014-08-20 12:08 - 2010-01-04 10:30 - 03297280 _____ () C:\iPlus\iPlusManager.exe
    2014-08-20 12:09 - 2010-01-04 10:30 - 00991232 _____ () C:\iPlus\NDISAPI.dll
    2015-02-07 22:23 - 2015-02-07 22:23 - 16852144 _____ () C:\Windows\SysWOW64\Macromed\Flash

    \NPSWF32_16_0_0_305.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Software\Classes\.exe: exefile => <=====

    ATTENTION!
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Software\Classes\exefile: <===== ATTENTION!

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user

    \AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 212.2.96.53 - 212.2.96.54

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)


    ==================== Accounts: =============================

    Administrator (S-1-5-21-2989270091-3903101940-2521635766-500 - Administrator - Disabled)
    Gość (S-1-5-21-2989270091-3903101940-2521635766-501 - Limited - Disabled)
    user (S-1-5-21-2989270091-3903101940-2521635766-1000 - Administrator - Enabled) => C:\Users\user

    ==================== Faulty Device Manager Devices =============

    Name: ARRGJQCX IDE Controller
    Description: ARRGJQCX IDE Controller
    Class Guid: {4D36E97B-E325-11CE-BFC1-08002BE10318}
    Manufacturer: (Standard mass storage controllers)
    Service: aax85jup
    Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
    Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a

    driver that references an entry point in another binary file that could not be loaded.
    Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

    Name: Teredo Tunneling Pseudo-Interface
    Description: Karta tunelowania Teredo firmy Microsoft
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: Microsoft
    Service: tunnel
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (02/27/2015 07:38:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program FRST64.exe w wersji 25.2.2015.1 zatrzymał interakcję z systemem Windows i został zamknięty.

    Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

    sterowania Centrum akcji.

    Identyfikator procesu: 4bc

    Godzina rozpoczęcia: 01d052bbf30f3a53

    Godzina zakończenia: 10

    Ścieżka aplikacji: C:\Users\user\Desktop\Nowy folder\FRST64.exe

    Identyfikator raportu:

    Error: (02/25/2015 03:28:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program Explorer.EXE w wersji 6.1.7601.17567 zatrzymał interakcję z systemem Windows i został

    zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w

    panelu sterowania Centrum akcji.

    Identyfikator procesu: 7b8

    Godzina rozpoczęcia: 01d050f6d071ee41

    Godzina zakończenia: 104

    Ścieżka aplikacji: C:\Windows\Explorer.EXE

    Identyfikator raportu: 97e4ea26-bcfa-11e4-9695-001e101f21c1

    Error: (02/24/2015 07:55:28 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Nazwa aplikacji powodującej błąd: setup.exe_Sony PC Companion, wersja: 17.0.0.717, sygnatura czasowa:

    0x4cab8cfa
    Nazwa modułu powodującego błąd: DownloadManager.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x53be652d
    Kod wyjątku: 0xc0000005
    Przesunięcie błędu: 0x6a2846f0
    Identyfikator procesu powodującego błąd: 0x11f0
    Godzina uruchomienia aplikacji powodującej błąd: 0xsetup.exe_Sony PC Companion0
    Ścieżka aplikacji powodującej błąd: setup.exe_Sony PC Companion1
    Ścieżka modułu powodującego błąd: setup.exe_Sony PC Companion2
    Identyfikator raportu: setup.exe_Sony PC Companion3

    Error: (02/22/2015 07:08:45 PM) (Source: Windows Backup) (EventID: 4104) (User: )
    Description: Wykonanie kopii zapasowej nie powiodło się. Błąd: Na tym dysku jest za mało miejsca, aby zapisać kopię

    zapasową. Zwolnij miejsce, usuwając starsze kopie zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii

    zapasowej. (0x81000005).

    Error: (02/22/2015 02:53:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program DllHost.exe w wersji 6.1.7600.16385 zatrzymał interakcję z systemem Windows i został zamknięty.

    Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

    sterowania Centrum akcji.

    Identyfikator procesu: 7f0

    Godzina rozpoczęcia: 01d04ea6e47034ca

    Godzina zakończenia: 375

    Ścieżka aplikacji: C:\Windows\system32\DllHost.exe

    Identyfikator raportu: 3144c2aa-ba9a-11e4-b75d-001e101f82a7

    Error: (02/22/2015 02:39:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program odkurzacz.exe w wersji 13.5.3.1962 zatrzymał interakcję z systemem Windows i został zamknięty.

    Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

    sterowania Centrum akcji.

    Identyfikator procesu: d28

    Godzina rozpoczęcia: 01d04ea4b1d3d622

    Godzina zakończenia: 312

    Ścieżka aplikacji: C:\Program Files (x86)\Odkurzacz\odkurzacz.exe

    Identyfikator raportu: 2440ec8d-ba98-11e4-b75d-6c626df59259

    Error: (02/20/2015 07:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Nazwa aplikacji powodującej błąd: plugin-container.exe, wersja: 35.0.1.5500, sygnatura czasowa:

    0x54c1f9f3
    Nazwa modułu powodującego błąd: mozalloc.dll, wersja: 35.0.1.5500, sygnatura czasowa: 0x54c1f224
    Kod wyjątku: 0x80000003
    Przesunięcie błędu: 0x00001425
    Identyfikator procesu powodującego błąd: 0xcb8
    Godzina uruchomienia aplikacji powodującej błąd: 0xplugin-container.exe0
    Ścieżka aplikacji powodującej błąd: plugin-container.exe1
    Ścieżka modułu powodującego błąd: plugin-container.exe2
    Identyfikator raportu: plugin-container.exe3

    Error: (02/19/2015 04:26:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program DllHost.exe w wersji 6.1.7600.16385 zatrzymał interakcję z systemem Windows i został zamknięty.

    Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu

    sterowania Centrum akcji.

    Identyfikator procesu: 1530

    Godzina rozpoczęcia: 01d04c5853a8f56b

    Godzina zakończenia: 20

    Ścieżka aplikacji: C:\Windows\system32\DllHost.exe

    Identyfikator raportu: a61e4fb2-b84b-11e4-acf0-001e101f4e71

    Error: (02/15/2015 07:06:37 PM) (Source: Windows Backup) (EventID: 4104) (User: )
    Description: Wykonanie kopii zapasowej nie powiodło się. Błąd: Na tym dysku jest za mało miejsca, aby zapisać kopię

    zapasową. Zwolnij miejsce, usuwając starsze kopie zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii

    zapasowej. (0x81000005).

    Error: (02/14/2015 09:01:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Program hl.exe w wersji 1.1.1.1 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć,

    czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania

    Centrum akcji.

    Identyfikator procesu: a14

    Godzina rozpoczęcia: 01d0488d7ccaa310

    Godzina zakończenia: 3692

    Ścieżka aplikacji: C:\Users\user\Desktop\gry\Counter-Strike 1.6\cs\hl.exe

    Identyfikator raportu: 49b25cdb-b484-11e4-972e-001e101f2500


    System errors:
    =============
    Error: (02/28/2015 05:04:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
    %%1275

    Error: (02/28/2015 05:04:52 PM) (Source: Application Popup) (EventID: 875) (User: )
    Description: Sterownik atksgt.sys został zablokowany dla ładowania.

    Error: (02/28/2015 05:04:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Nie można uruchomić usługi sbapifs z powodu następującego błędu:
    %%2

    Error: (02/28/2015 03:18:46 PM) (Source: DCOM) (EventID: 10010) (User: )
    Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

    Error: (02/28/2015 00:30:30 PM) (Source: Tcpip) (EventID: 4199) (User: )
    Description: System wykrył konflikt adresów między adresem IP 31.2.95.156 a komputerem o sieciowym
    adresie sprzętowym 02-50-F3-00-00-00. W rezultacie mogą być zakłócone operacje sieciowe na
    tym komputerze.

    Error: (02/28/2015 11:45:21 AM) (Source: Tcpip) (EventID: 4199) (User: )
    Description: System wykrył konflikt adresów między adresem IP 95.40.150.76 a komputerem o sieciowym
    adresie sprzętowym 02-50-F3-00-00-00. W rezultacie mogą być zakłócone operacje sieciowe na
    tym komputerze.

    Error: (02/28/2015 08:58:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
    %%1275

    Error: (02/28/2015 08:58:38 AM) (Source: Application Popup) (EventID: 875) (User: )
    Description: Sterownik atksgt.sys został zablokowany dla ładowania.

    Error: (02/28/2015 08:58:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Nie można uruchomić usługi sbapifs z powodu następującego błędu:
    %%2

    Error: (02/27/2015 07:48:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: Nie można uruchomić usługi atksgt z powodu następującego błędu:
    %%1275


    Microsoft Office Sessions:
    =========================
    Error: (02/27/2015 07:38:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: FRST64.exe25.2.2015.14bc01d052bbf30f3a5310C:\Users\user\Desktop\Nowy folder\FRST64.exe

    Error: (02/25/2015 03:28:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Explorer.EXE6.1.7601.175677b801d050f6d071ee41104C:\Windows\Explorer.EXE97e4ea26-bcfa-11e4-

    9695-001e101f21c1

    Error: (02/24/2015 07:55:28 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: setup.exe_Sony PC

    Companion17.0.0.7174cab8cfaDownloadManager.dll_unloaded0.0.0.053be652dc00000056a2846f011f001d0505b1e7e

    94ddC:\Users\user\AppData\Local\Temp\{856B0C7D-4644-4A47-86BA-

    CD9C0099B897}\setup.exeDownloadManager.dllb24b3989-bc56-11e4-a655-001e101f3315

    Error: (02/22/2015 07:08:45 PM) (Source: Windows Backup) (EventID: 4104) (User: )
    Description: Na tym dysku jest za mało miejsca, aby zapisać kopię zapasową. Zwolnij miejsce, usuwając starsze kopie

    zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii zapasowej. (0x81000005)

    Error: (02/22/2015 02:53:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: DllHost.exe6.1.7600.163857f001d04ea6e47034ca375C:\Windows\system32\DllHost.exe3144c2aa-ba9a-

    11e4-b75d-001e101f82a7

    Error: (02/22/2015 02:39:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: odkurzacz.exe13.5.3.1962d2801d04ea4b1d3d622312C:\Program Files (x86)\Odkurzacz

    \odkurzacz.exe2440ec8d-ba98-11e4-b75d-6c626df59259

    Error: (02/20/2015 07:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: plugin-

    container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f2248000000300001425cb801d04d33b7cc9796C:

    \Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllbd0a0671-

    b930-11e4-b32b-001e101f8ed0

    Error: (02/19/2015 04:26:24 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: DllHost.exe6.1.7600.16385153001d04c5853a8f56b20C:\Windows\system32\DllHost.exea61e4fb2-b84b-

    11e4-acf0-001e101f4e71

    Error: (02/15/2015 07:06:37 PM) (Source: Windows Backup) (EventID: 4104) (User: )
    Description: Na tym dysku jest za mało miejsca, aby zapisać kopię zapasową. Zwolnij miejsce, usuwając starsze kopie

    zapasowe albo niepotrzebne dane, lub zmień ustawienia kopii zapasowej. (0x81000005)

    Error: (02/14/2015 09:01:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: hl.exe1.1.1.1a1401d0488d7ccaa3103692C:\Users\user\Desktop\gry\Counter-Strike 1.6\cs

    \hl.exe49b25cdb-b484-11e4-972e-001e101f2500


    ==================== Memory info ===========================

    Processor: Intel(R) Celeron(R) CPU E3400 @ 2.60GHz
    Percentage of memory in use: 84%
    Total physical RAM: 2013.18 MB
    Available physical RAM: 317.21 MB
    Total Pagefile: 4026.36 MB
    Available Pagefile: 1822.57 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.86 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:227.9 GB) (Free:36.59 GB) NTFS
    Drive d: (recovery_disk) (Fixed) (Total:4.88 GB) (Free:0.01 GB) NTFS
    Drive l: (iPlus) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 39E339E2)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=227.9 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=4.9 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================













    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
    Ran by user (administrator) on USER-KOMPUTER on 28-02-2015 19:43:22
    Running from C:\Users\user\Desktop\programy\FRST-OlderVersion
    Loaded Profiles: user (Available profiles: user)
    Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
    Internet Explorer Version 11 (Default browser: FF)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-f...utorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (Intel Corporation) C:\Windows\System32\igfxpers.exe
    () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
    (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
    () C:\iPlus\iPlusManager.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
    (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe
    (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
    HKLM-x32\...\Run: [iPlusManager] => C:\iPlus\iPlusChecker.exe [446464 2010-01-04] ()
    HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
    Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\Run: [EpicScale] => [X]
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: F - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: L - L:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {1216db28-33ed-11e3-8184-001e101fb45e} - F:\Startme.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {18429df7-981c-11e0-bd10-6c626df59259} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {2221f4c8-9821-11e0-8e50-001e101fb681} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3058172d-781d-11e2-a4c3-001e101f57d0} - O:\Startme.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3e01722a-5260-11e2-a071-6c626df59259} - F:\MicroLauncher.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {42dcc5e5-9819-11e0-b8f3-806e6f6e6963} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13540-e1e6-11e0-b063-806e6f6e6963} - L:\setup.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13541-e1e6-11e0-b063-806e6f6e6963} - M:\SETUP.EXE
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {a7ff69e0-983c-11e0-923f-001e101fb45e} - L:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {ad11cecb-98e6-11e0-8cb5-001e101fa1f5} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {c9ab3acc-c512-11e0-84e3-001e101fabdd} - N:\SETUP.EXE
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {fa54128d-dd7d-11e2-9ed2-6c626df59259} - O:\LGAutoRun.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
    BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
    Tcpip\Parameters: [DhcpNameServer] 212.2.96.53 212.2.96.54

    FireFox:
    ========
    FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mueqwcs0.default-1425065977859
    FF Homepage: hxxp://www.google.com/
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
    FF Plugin: @java.com/DTPlugin,version=10.6.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled No File
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
    FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mueqwcs0.default-1425065977859\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-28]
    FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.google.com/
    CHR StartupUrls: Default -> "hxxp://www.google.com/"
    CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-06]
    CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-06]
    CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-06]
    CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-06]
    CHR Extension: (Adblock Super) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-08-09]
    CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-06]
    CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-06]

    Opera:
    =======
    StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe http://www.delta-homes.com/?utm_source=b&...0312AS_5VY5D24KXXXX5VY5D24K&ts=1377190328

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
    S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-02-01] (Electronic Arts)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2011-07-21] ()
    R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [270816 2015-02-19] (AVG Technologies CZ, s.r.o.)
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
    R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
    R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-01-23] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
    R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [284128 2015-01-16] (AVG Technologies CZ, s.r.o.)
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [270912 2011-08-12] (DT Soft Ltd)
    S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-02-05] ()
    R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [133632 2010-01-04] (Huawei Technologies Co., Ltd.)
    R3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2010-01-04] (Huawei Technologies Co., Ltd.)
    R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-07-21] ()
    S3 PCTFW-PacketFilter; C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys [119688 2011-01-12] (PC Tools)
    R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi64.sys [334976 2011-01-17] (PC Tools)
    S3 pctNdis; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
    R3 pctNdisMP; C:\Windows\System32\DRIVERS\pctNdis64.sys [79000 2010-07-08] (PC Tools)
    S3 pctplfw; C:\Windows\System32\drivers\pctplfw64.sys [179976 2011-01-17] (PC Tools)
    R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-12-28] (Duplex Secure Ltd.)
    U3 aax85jup; No ImagePath
    S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
    S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
    S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [X]
    U4 WMCoreService; No ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-27 20:39 - 2015-02-27 20:39 - 00000000 ____D () C:\Users\user\Desktop\Stare dane programu Firefox
    2015-02-27 19:37 - 2015-02-27 19:46 - 00000000 ____D () C:\AdwCleaner
    2015-02-26 20:56 - 2015-02-26 20:56 - 00483744 _____ () C:\Windows\Minidump\022615-41730-01.dmp
    2015-02-24 17:15 - 2015-02-27 19:48 - 00000924 _____ () C:\Windows\PFRO.log
    2015-02-23 16:43 - 2015-02-23 17:01 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
    2015-02-23 16:43 - 2015-02-23 16:43 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
    2015-02-23 16:42 - 2015-02-23 16:42 - 00000000 ____D () C:\Users\user\AppData\Roaming\TeamViewer
    2015-02-22 15:14 - 2015-02-28 19:43 - 00000000 ____D () C:\FRST
    2015-02-22 14:59 - 2015-02-28 18:57 - 00000000 ____D () C:\Program Files (x86)\Sony Mobile
    2015-02-22 14:47 - 2015-02-22 14:47 - 00142988 _____ () C:\Windows\DPINST.LOG
    2015-02-22 11:16 - 2015-02-28 18:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
    2015-02-19 21:26 - 2015-02-19 21:26 - 00270816 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
    2015-02-12 17:17 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2015-02-12 17:17 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2015-02-12 17:17 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2015-02-12 17:17 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2015-02-11 15:48 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2015-02-11 15:48 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2015-02-11 15:48 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2015-02-11 15:48 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2015-02-11 15:48 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2015-02-11 15:48 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2015-02-11 15:48 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2015-02-11 15:48 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2015-02-11 15:48 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2015-02-11 15:48 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2015-02-11 15:48 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2015-02-11 15:48 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2015-02-11 15:48 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2015-02-11 15:48 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2015-02-11 15:48 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2015-02-11 15:48 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2015-02-11 15:48 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2015-02-11 15:48 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2015-02-11 15:48 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2015-02-11 15:48 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2015-02-11 15:48 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2015-02-11 15:48 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2015-02-11 15:48 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2015-02-11 15:48 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2015-02-11 15:48 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2015-02-11 15:48 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2015-02-11 15:48 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2015-02-11 15:48 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2015-02-11 15:48 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2015-02-11 15:48 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2015-02-11 15:48 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2015-02-11 15:48 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2015-02-11 15:48 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2015-02-11 15:48 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2015-02-11 15:48 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2015-02-11 15:48 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2015-02-11 15:48 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2015-02-11 15:48 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2015-02-11 15:48 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2015-02-11 15:48 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2015-02-11 15:48 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2015-02-11 15:48 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2015-02-11 15:48 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2015-02-11 15:48 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2015-02-11 15:48 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2015-02-11 15:48 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2015-02-11 15:48 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2015-02-11 15:48 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2015-02-11 15:48 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2015-02-11 15:48 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2015-02-11 15:48 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2015-02-11 15:48 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2015-02-11 15:48 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2015-02-11 15:48 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2015-02-11 15:47 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
    2015-02-11 15:47 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
    2015-02-11 15:46 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2015-02-11 15:46 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2015-02-11 15:46 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2015-02-11 15:46 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2015-02-11 15:46 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2015-02-11 15:46 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2015-02-11 15:46 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2015-02-11 15:46 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2015-02-11 15:46 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2015-02-11 15:46 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2015-02-11 15:46 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2015-02-11 15:46 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2015-02-11 15:46 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2015-02-11 15:46 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2015-02-11 15:46 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2015-02-11 15:46 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2015-02-11 15:46 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2015-02-11 15:46 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
    2015-02-11 15:45 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
    2015-02-11 15:45 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
    2015-02-11 15:44 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2015-02-11 15:44 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2015-02-11 15:44 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2015-02-11 15:44 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2015-02-11 15:44 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2015-02-11 15:44 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2015-02-11 15:44 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2015-02-11 15:37 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2015-02-07 22:24 - 2015-02-27 19:29 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
    2015-02-05 18:07 - 2015-02-05 18:11 - 00001336 _____ () C:\Windows\system32\Drivers\kgpcpy.cfg
    2015-02-05 18:07 - 2015-02-05 18:07 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
    2015-02-05 18:07 - 2015-02-05 18:07 - 00000000 ____D () C:\Program Files\Enigma Software Group
    2015-02-03 10:47 - 2015-02-03 10:47 - 00341472 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
    2015-02-01 11:52 - 2015-02-01 11:53 - 00000000 ____D () C:\Users\user\AppData\Local\Origin
    2015-02-01 11:41 - 2015-02-01 11:41 - 05673816 _____ (Microsoft Corporation) C:\Users\user\Downloads\vcredist_x64.exe
    2015-02-01 11:39 - 2015-02-01 11:39 - 04995416 _____ (Microsoft Corporation) C:\Users\user\Downloads\vcredist_x86.exe
    2015-02-01 11:27 - 2015-02-01 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
    2015-02-01 11:27 - 2015-02-01 11:52 - 00000000 ____D () C:\Program Files (x86)\Origin
    2015-02-01 11:25 - 2015-02-01 11:26 - 17102664 _____ (Electronic Arts, Inc.) C:\Users\user\Downloads\OriginThinSetup (1).exe
    2015-01-30 15:44 - 2015-01-30 15:44 - 00001475 _____ () C:\Users\user\AppData\Local\recently-used.xbel
    2015-01-30 15:29 - 2015-01-30 15:29 - 00000000 ____D () C:\Users\user\AppData\Local\webkit
    2015-01-30 15:29 - 2015-01-30 15:29 - 00000000 ____D () C:\Users\user\.thumbnails
    2015-01-30 15:24 - 2015-01-30 15:47 - 00000000 ____D () C:\Users\user\.gimp-2.8
    2015-01-30 15:24 - 2015-01-30 15:24 - 00000000 ____D () C:\Users\user\AppData\Local\gegl-0.2
    2015-01-30 15:22 - 2015-01-30 15:22 - 91931728 _____ (The GIMP Team ) C:\Users\user\Downloads\gimp-2.8.14-setup-1.exe

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-02-28 18:59 - 2013-05-24 18:02 - 00000000 ____D () C:\Users\user\Desktop\programy
    2015-02-28 18:57 - 2013-02-16 13:30 - 00000000 ____D () C:\Program Files (x86)\Sony
    2015-02-28 18:56 - 2012-09-05 14:08 - 00000000 ____D () C:\Users\user\Desktop\instalki
    2015-02-28 18:52 - 2011-06-15 19:54 - 01260506 _____ () C:\Windows\WindowsUpdate.log
    2015-02-28 18:45 - 2011-06-16 14:32 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{8F8D8A03-DD78-4F65-AD22-3076C17B8F6E}
    2015-02-28 17:04 - 2014-10-17 21:12 - 00018456 _____ () C:\Windows\setupact.log
    2015-02-28 17:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-02-28 15:02 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-02-28 15:02 - 2009-07-14 05:45 - 00015184 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-02-28 09:54 - 2014-10-15 18:08 - 00000000 ____D () C:\ProgramData\MFAData
    2015-02-27 20:42 - 2013-11-08 17:21 - 00000000 ____D () C:\Users\user\Desktop\lol
    2015-02-27 20:39 - 2014-02-15 15:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-02-27 18:42 - 2014-12-30 16:50 - 00000000 ____D () C:\Users\user\Desktop\mmmmmmmmmm
    2015-02-26 20:56 - 2014-11-05 19:28 - 203894030 _____ () C:\Windows\MEMORY.DMP
    2015-02-26 20:56 - 2011-09-11 12:11 - 00000000 ____D () C:\Windows\Minidump
    2015-02-25 14:00 - 2014-10-15 18:15 - 00000955 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
    2015-02-25 14:00 - 2014-10-15 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
    2015-02-24 18:56 - 2011-06-16 14:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
    2015-02-24 14:14 - 2009-07-14 05:45 - 00272472 _____ () C:\Windows\system32\FNTCACHE.DAT
    2015-02-23 18:43 - 2011-06-16 15:30 - 00059352 _____ () C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
    2015-02-22 13:07 - 2014-05-20 16:08 - 00000000 ____D () C:\Users\user\Desktop\gry
    2015-02-22 11:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Vss
    2015-02-22 11:41 - 2012-09-02 20:02 - 00000000 ____D () C:\Users\user\AppData\Local\CRE
    2015-02-20 18:06 - 2013-08-14 10:07 - 00000000 ____D () C:\Users\user\AppData\Local\Windows Live
    2015-02-11 17:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
    2015-02-11 16:29 - 2013-08-13 17:08 - 00000000 ____D () C:\Windows\system32\MRT
    2015-02-11 16:29 - 2011-07-09 19:19 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2015-02-07 23:24 - 2012-06-15 16:54 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-02-07 23:24 - 2011-06-16 14:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-02-07 22:24 - 2014-08-07 07:57 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
    2015-02-06 12:40 - 2009-07-14 18:55 - 01124776 _____ () C:\Windows\system32\perfh015.dat
    2015-02-06 12:40 - 2009-07-14 18:55 - 00286274 _____ () C:\Windows\system32\perfc015.dat
    2015-02-06 12:40 - 2009-07-14 06:13 - 00006264 _____ () C:\Windows\system32\PerfStringBackup.INI
    2015-02-06 11:33 - 2012-09-27 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
    2015-02-06 11:22 - 2012-03-25 14:08 - 00000000 ____D () C:\Program Files (x86)\EA GAMES
    2015-02-01 11:53 - 2014-08-13 10:29 - 00000000 ____D () C:\ProgramData\Origin
    2015-02-01 11:27 - 2011-07-10 12:33 - 00000000 ____D () C:\ProgramData\Electronic Arts
    2015-01-30 15:09 - 2011-07-03 16:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\PhotoScape
    2015-01-29 13:25 - 2014-08-08 07:57 - 00002225 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

    ==================== Files in the root of some directories =======

    2013-07-10 12:05 - 2013-07-10 12:06 - 0000041 _____ () C:\Users\user\AppData\Roaming\prio.ini
    2012-01-30 13:51 - 2012-01-30 13:51 - 0028501 _____ () C:\Users\user\AppData\Roaming\UserTile.png
    2013-08-05 10:39 - 2014-01-04 14:17 - 0000125 _____ () C:\Users\user\AppData\Roaming\WB.CFG
    2013-07-05 11:39 - 2013-07-08 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-Q3-TTL.DAT
    2013-07-11 11:39 - 2013-07-11 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-Q5-TTL.DAT
    2013-06-23 10:39 - 2013-08-20 11:39 - 0000005 _____ () C:\Users\user\AppData\Roaming\WBPU-TTL.DAT
    2015-01-30 15:44 - 2015-01-30 15:44 - 0001475 _____ () C:\Users\user\AppData\Local\recently-used.xbel
    2011-12-18 17:44 - 2011-12-18 17:44 - 2161160 _____ (DownVision ) C:\Users\user\AppData\Local\setup.exe

    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-02-28 11:44

    ==================== End Of Log ============================

    Moderowany przez swiercm:

    Logi powinnnaś dać w formie załącznika.
    https://www.elektroda.pl/rtvforum/topic1159685.html
    By temat był czytelny, użyłem opcji "Spoiler".

    0
  • #20 28 Lut 2015 20:05
    Acorus 20
    Spec od komputerów

    Otwórz notatnik systemowy i wklej:

    Cytat:
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\Run: [EpicScale] => [X]
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: F - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: L - L:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {1216db28-33ed-11e3-8184-001e101fb45e} - F:\Startme.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {18429df7-981c-11e0-bd10-6c626df59259} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {2221f4c8-9821-11e0-8e50-001e101fb681} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3058172d-781d-11e2-a4c3-001e101f57d0} - O:\Startme.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {3e01722a-5260-11e2-a071-6c626df59259} - F:\MicroLauncher.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {42dcc5e5-9819-11e0-b8f3-806e6f6e6963} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13540-e1e6-11e0-b063-806e6f6e6963} - L:\setup.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {84a13541-e1e6-11e0-b063-806e6f6e6963} - M:\SETUP.EXE
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {a7ff69e0-983c-11e0-923f-001e101fb45e} - L:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {ad11cecb-98e6-11e0-8cb5-001e101fa1f5} - F:\AutoRun.exe
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {c9ab3acc-c512-11e0-84e3-001e101fabdd} - N:\SETUP.EXE
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\...\MountPoints2: {fa54128d-dd7d-11e2-9ed2-6c626df59259} - O:\LGAutoRun.exe
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2989270091-3903101940-2521635766-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
    StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe http://www.delta-homes.com/?utm_source=b&...0312AS_5VY5D24KXXXX5VY5D24K&ts=1377190328
    U3 aax85jup; No ImagePath
    S3 Prot6Flt; system32\DRIVERS\Prot6Flt.sys [X]
    S2 sbapifs; system32\DRIVERS\sbapifs.sys [X]
    S3 VIAHdAudAddService; system32\drivers\viahduaa.sys [X]
    U4 WMCoreService; No ImagePath
    2015-02-27 19:37 - 2015-02-27 19:46 - 00000000 ____D () C:\AdwCleaner
    2015-02-07 22:24 - 2015-02-27 19:29 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
    2015-02-05 18:07 - 2015-02-05 18:07 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
    2015-02-05 18:07 - 2015-02-05 18:07 - 00000000 ____D () C:\Program Files\Enigma Software Group


    Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.
    Uruchom jako administrator FRST i kliknij w Fix.

    0