CIO Tech Eksperten IT-JOB IT-Kurser Events Podcast Søg
Cookie ikon
Avatar billede torben lind Forsker
07. juli 2014 - 09:25 Der er 18 kommentarer og
1 løsning

Tjek af hijackthis log.

Hej allesammen.
Jeg har flyttet spørgsmålet fra en anden kategori til her
Jeg har fået et problem med en bærbar comp. der kører trådløst.Jeg har 2 bærbarer den ene kører perfekt som den altid har gjort.Den anden begyndte for ca. 1 mdr. siden at lave problemer,den er meget ustabil,nogle gange er der fuld hastighed på download,men meget ofte falder den fuldstændig ud.Jeg har haft min internet udbyder hjemme for at skifte modem,det hjalp ikke og han mente at der kunne være noget virus på comp.,jeg har prøvet at kører ccleaner og adwcleaner de viste ikke noget.Jeg vedlægger en frisk Hijackthis report,håber nogle kunne kigge på den.Styresystem er win7 64bít.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 08:36:10, on 2014-07-04
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe
C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
C:\PROGRAM FILES (X86)\BROTHER\BRMFCMON\BRMFCWND.EXE
C:\PROGRAM FILES (X86)\BROTHER\BRMFCMON\BrMfcmon.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MIF5BA~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocnik logowania za pomoc¹ identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Samsung BHO Helper - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - Startup: E-POP.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Wyœlij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyœlij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O9 - Extra button: &Notatki po³¹czone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Notatki po³¹czone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Us³uga Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Us³uga Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Samsung UPD Service2 - Unknown owner - C:\windows\System32\SUPDSvc2.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: SamsungDeviceConfiguration (SamsungDeviceConfigurationWinService) - Unknown owner - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11374 bytes

Med venlig hilsen
Torben
Avatar billede jakobdo Ekspert
07. juli 2014 - 09:57 #1
Hej Torben,
indtil eksperterne vågner, kan du afprøve denne: http://www.hijackthis.de/
Avatar billede Computer Hjælp (Gratis) Mester
07. juli 2014 - 11:17 #2
Psssst: http://www.hijackthis.de/  vil jeg ikke stole på !!!

---

Idé: Skift KANAL på det trådløse !!!
Avatar billede torben lind Forsker
07. juli 2014 - 14:24 #3
Hej karise_larry.
Jeg har prøvet alle kanaler og lige lidt hjælper det.
Karise nu har jeg været her en del år og har fulgt næsten alle spørgsmål og svar,jeg ved du er god til hijackthis,så måske kunne du få tid til at kigge på den log jeg har lagt her.
Torben
Avatar billede 220661 Ekspert
07. juli 2014 - 16:19 #4
På grund af mistanke, så hent tdsskiller og kør den, og se om den finder noget på din computer:
http://www.bleepingcomputer.com/download/tdsskiller/dl/4/
Det er korrekt at man ikke 100% kan bruge wieveren fra Hijack, og den kun  er vejledende.
Den bemærker denne linje her:
    O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll
   
Kind
   
Nasty
Nasty
   
Og ved en søgning på det, så kan det være et rootkit. Derfor vil jeg godt have du kører tdsskiller.
Avatar billede 220661 Ekspert
07. juli 2014 - 16:35 #5
Kør også Malwarebytes.

Hent Malwarebytes Anti-Malware herfra:
http://downloads.malwarebytes.org/mbam-download.php
http://www.eksperten.dk/guide/1605

gå ind i indstillingerne på programmet, og sæt den til at scanner efter rootkit.

Det gør du under fund og beskyttelse, når du har lavet den om til dansk.
Avatar billede torben lind Forsker
08. juli 2014 - 07:44 #6
Hej 220661.
Jeg har nu kørt tdsskiller,men den fandt ikke noget,derefter prøvede jeg at kører Malwarebytes og efter at have sat den til at scanne for rootkit kørte den en scanning,men fandt ikke noget.
Hvis man kigger på den hijacksthis jeg har lagt er der mange steder hvor der står noget med systemroot and missing file,har du nogle ide om hvad det er.Hvad mener du jeg skal gøre nu?
Indtil videre tak for hjælpen
Torben
Avatar billede magictouch Nybegynder
08. juli 2014 - 10:41 #7
"systemroot and missing file"



Det er fordi hijackthis ikke er gearet til nyere operativ systemer, så de missing files betyder ingenting.


Til at begynde med kan du afinstallere - IObit


Derefter ->


Download:
• http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
(ved tigzy) og gem den direkte på dit skrivebord.
På websiden vælge 32bit eller 64bit-knappen for at matche bithastighed på din version af Windows.
Afslut alle programmer.
Start RogueKiller.exe ved at dobbeltklikke på ikonet.
Vent Prescan er færdig.
Sørg for at alle bokse er afkrydset under "Report" fanen.
Klik på Scan.
Klik på rapporten, når færdig. Kopier indholdet af rapporten ind  i dit næste svar.


BEMÆRK: Forsøg ikke at fjerne noget af det scanningen registrerer.
Avatar billede torben lind Forsker
08. juli 2014 - 12:45 #8
Hej magictouch.
Jeg kommer først i nærheden af comp. igen ved en 17 tiden,så vil jeg gøre som du skriver.
Torben
Avatar billede magictouch Nybegynder
08. juli 2014 - 14:04 #9
Helt i orden      :-)
Avatar billede torben lind Forsker
08. juli 2014 - 17:40 #10
hej magictouch.
her er report

RogueKiller V9.2.0.0 [Jun 23 2014] od Adlice Software
mail : http://www.adlice.com/contact/
Dodaj opinię : http://forum.adlice.com
Strona internetowa : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

System Operacyjny : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Uruchomiono z : Tryb normalny
Użytkownik : Monika [Uprawnienia Administratora]
Tryb : Skanuj -- Data : 07/08/2014  17:34:57

¤¤¤ Szkodliwe procesy : 1 ¤¤¤
[Suspicious.Path] (SVC) SWUpdateService -- C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe /SERVICE
  • -> ZATRZYMANO

¤¤¤ Wpisy w Rejestrze : 19 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SWUpdateService -> ZNALEZIONO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SWUpdateService -> ZNALEZIONO
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\SWUpdateService -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{35DB786E-5512-426B-8706-A2A47E9D52A4} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{515BE642-10E5-4C8C-BE6D-633F8D69A55F} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BED5A46B-B79D-4C6F-9898-291856392E42} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{35DB786E-5512-426B-8706-A2A47E9D52A4} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{515BE642-10E5-4C8C-BE6D-633F8D69A55F} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{BED5A46B-B79D-4C6F-9898-291856392E42} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{35DB786E-5512-426B-8706-A2A47E9D52A4} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{515BE642-10E5-4C8C-BE6D-633F8D69A55F} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{BED5A46B-B79D-4C6F-9898-291856392E42} | DhcpNameServer : 62.179.1.61 62.179.1.63  -> ZNALEZIONO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> ZNALEZIONO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> ZNALEZIONO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> ZNALEZIONO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> ZNALEZIONO

¤¤¤ Zaplanowane zadania : 0 ¤¤¤

¤¤¤ Pliki : 0 ¤¤¤

¤¤¤ Plik HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: NIEZAŁADOWANY [0xc000036b]) ¤¤¤

¤¤¤ przeglądarki internetowe : 0 ¤¤¤

¤¤¤ Sprawdzenie MBR : ¤¤¤
+++++ PhysicalDrive0: ST750LM022 HN-M750MBB ATA Device +++++
--- User ---
[MBR] f06ed45a334f1e72bd8f2c7e044a03d7
[BSP] e956b1abf303a85c5a8187ef2c7779aa : Kiwi MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 277504 MB
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 568535040 | Size: 414300 MB
3 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 1417021440 | Size: 23499 MB
User = LL1 ... OK
User = LL2 ... OK

torben
Avatar billede magictouch Nybegynder
08. juli 2014 - 18:01 #11
Det kastede ikke rigtig noget lys over sagen, så lad os se hvad der egentlig kører på computeren.



Hent:

[http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

gem den på skrivebordet



Tryk på Scan-knappen.
Det vil producere en log kaldet FRST.txt samme sted værktøjet køres fra.
Kopier og indsæt loggen her.
Første gang værktøjet køres det genererer en anden log (Addition.txt) - også placeret samme sted som FRST.exe
Kopier denne log sammen med FRST.txt i dit svar..

Da de er forholdsvis lange, skal du nok sende dem i flere indlæg.
Avatar billede torben lind Forsker
08. juli 2014 - 18:13 #12
Hej magictouch.
her kommer den foerste.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Monika (administrator) on MONIKA-KOMPUTER on 08-07-2014 18:08:25
Running from C:\Users\Monika\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Microsoft Corp.) C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
() C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe [544544 2014-05-04] (IObit)
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\MountPoints2: {aa650912-862b-11e2-a265-b803059495e3} - G:\Startme.exe
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [226920 2011-06-05] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
Startup: C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E-POP.lnk
ShortcutTarget: E-POP.lnk -> C:\Program Files (x86)\Samsung\E-POP\E-POP.exe (No File)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.61 62.179.1.63

FireFox:
========
FF ProfilePath: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ads Removal - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default\Extensions\adremoveext@adremoveext.net [2014-06-17]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default\Extensions\ascsurfingprotection@iobit.com [2014-06-25]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "https://poczta.nazwa.pl/", "hxxp://www.polskieserce.pl/", "hxxp://www.pah.org.pl/o-pah/8/pajacyk"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (Adblock Plus) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-07-10]
CHR Extension: (Ads Removal) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-02-25]
CHR Extension: (Google Wallet) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-11-14] (Intel Corporation) [File not signed]
S3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1355840 2011-11-14] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-11-14] (Intel Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
S3 Samsung UPD Service2; C:\windows\System32\SUPDSvc2.exe [165456 2011-12-02] (Samsung Electronics)
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] () [File not signed]
S2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S4 wlcrasvc; C:\Program Files (x86)\Windows Live\Mesh\wlcrasvc.exe [57184 2010-09-22] (Microsoft Corporation)
R2 wlidsvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096 2011-03-28] (Microsoft Corp.)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-13] (DT Soft Ltd)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-06-17] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-05-15] (Windows (R) 2003 DDK 3790 provider)
S3 SBIOSIO; No ImagePath
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2014-06-17] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-07-08] ()
U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [29696 2014-07-08] ()
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S1 gdfrtfui; \??\C:\windows\system32\drivers\gdfrtfui.sys [X]
S1 jzxbwaxs; \??\C:\windows\system32\drivers\jzxbwaxs.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-08 18:08 - 2014-07-08 18:09 - 00019376 _____ () C:\Users\Monika\Downloads\FRST.txt
2014-07-08 18:08 - 2014-07-08 18:08 - 00000000 ____D () C:\FRST
2014-07-08 18:06 - 2014-07-08 18:06 - 02084352 _____ (Farbar) C:\Users\Monika\Downloads\FRST64.exe
2014-07-08 17:41 - 2014-07-08 17:41 - 00004665 _____ () C:\Users\Monika\Desktop\RKreport_SCN_07082014_173457.log
2014-07-08 17:26 - 2014-07-08 17:26 - 00029696 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-08 17:26 - 2014-07-08 17:26 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-08 17:25 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Desktop\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Downloads\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:24 - 00002888 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-08 17:24 - 2014-07-08 17:24 - 00001188 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-08 14:12 - 2014-07-08 14:12 - 00011013 _____ () C:\Users\Monika\Desktop\DLA TORBENA 2ND PART.xlsx
2014-07-08 10:35 - 2014-07-08 15:35 - 00000000 ____D () C:\Users\Monika\Desktop\Dystrybutorzy, sklepy
2014-07-07 20:47 - 2014-07-08 17:15 - 00000112 _____ () C:\windows\setupact.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00009038 _____ () C:\windows\PFRO.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 _____ () C:\windows\setuperr.log
2014-07-07 20:46 - 2014-07-07 20:46 - 00000000 _____ () C:\asc_rdflag
2014-07-07 15:10 - 2014-07-07 15:10 - 00011117 _____ () C:\Users\Monika\Downloads\Kopi af DLA TORBENA.xlsx
2014-07-04 13:17 - 2014-07-07 21:04 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-04 13:16 - 2014-07-07 21:02 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-04 13:16 - 2014-07-07 21:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:16 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-07-04 13:16 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-07-04 13:16 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-07-04 13:14 - 2014-07-04 13:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Monika\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 08:36 - 2014-07-04 08:36 - 00011376 _____ () C:\Users\Monika\Desktop\hijackthis.log
2014-07-03 17:19 - 2014-07-03 17:19 - 00002941 _____ () C:\Users\Monika\Desktop\HiJackThis.lnk
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-06-30 15:38 - 2014-06-30 15:38 - 00000000 ____D () C:\Users\Monika\Desktop\httpwww.yesamsexy.comLingerie
2014-06-27 15:01 - 2014-07-03 15:45 - 00000000 ____D () C:\Users\Monika\Desktop\inspiracje
2014-06-26 17:19 - 2014-06-26 17:19 - 00000000 ____D () C:\windows\Options
2014-06-26 12:22 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\{019D0866-E9F8-4980-87A8-332C2400391A}
2014-06-26 12:21 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\Windows Live Writer
2014-06-26 12:21 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Windows Live Writer
2014-06-26 12:20 - 2014-07-01 07:57 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\AdobeChk
2014-06-26 08:15 - 2014-06-26 08:15 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-06-26 08:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_5.dll
2014-06-26 08:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_3.dll
2014-06-26 08:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2014-06-26 08:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2014-06-26 08:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2014-06-26 08:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2014-06-26 07:25 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-06-26 07:25 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-06-25 20:29 - 2014-06-25 20:28 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-25 19:50 - 2014-06-25 19:50 - 00003168 _____ () C:\windows\System32\Tasks\SmartDefrag3_Startup
2014-06-25 19:49 - 2014-06-25 19:49 - 00003166 _____ () C:\windows\System32\Tasks\SmartDefrag3_Update
2014-06-25 19:49 - 2014-06-25 19:49 - 00001130 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-25 19:49 - 2014-03-18 17:51 - 00128320 _____ (IObit) C:\windows\system32\IObitSmartDefragExtension.dll
2014-06-25 19:49 - 2013-11-19 16:52 - 00034080 _____ (IObit) C:\windows\system32\SmartDefragBootTime.exe
2014-06-25 19:17 - 2014-07-07 20:46 - 83288064 _____ () C:\windows\system32\config\SOFTWARE.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 50991104 _____ () C:\windows\system32\config\COMPONENTS.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00356352 _____ () C:\windows\system32\config\DEFAULT.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00061440 _____ () C:\windows\system32\config\SAM.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00028672 _____ () C:\windows\system32\config\SECURITY.iodefrag.bak
2014-06-25 19:12 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2014-06-25 19:12 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-25 19:12 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-25 19:12 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2014-06-25 19:12 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2014-06-25 19:12 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2014-06-25 19:12 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2014-06-25 19:12 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-06-25 19:12 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2014-06-25 19:12 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2014-06-25 19:12 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2014-06-25 19:12 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2014-06-25 19:12 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2014-06-25 19:12 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-06-25 19:12 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2014-06-25 19:12 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-06-25 19:11 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-06-25 19:11 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2014-06-25 18:49 - 2014-06-25 18:49 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\ProductData
2014-06-25 18:48 - 2014-07-07 07:37 - 00002165 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-06-25 18:48 - 2014-07-04 13:10 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 18:48 - 2014-06-25 18:48 - 00003096 _____ () C:\windows\System32\Tasks\ASC7_PerformanceMonitor
2014-06-25 18:48 - 2014-06-25 18:48 - 00002856 _____ () C:\windows\System32\Tasks\ASC7_SkipUac_Monika
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 18:47 - 2014-06-25 18:47 - 37355512 _____ (IObit ) C:\Users\Monika\Downloads\advanced-systemcare-setup.exe
2014-06-25 18:44 - 2014-06-25 18:44 - 04812672 _____ (Piriform Ltd) C:\Users\Monika\Downloads\ccsetup415.exe
2014-06-25 18:34 - 2014-07-04 08:38 - 00000000 ____D () C:\AdwCleaner
2014-06-25 18:34 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-06-18 10:28 - 2014-06-18 10:28 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-06-17 10:08 - 2014-07-08 14:14 - 00000000 ____D () C:\Users\Monika\Desktop\Nowa Kolekcja CZERWIEC 2014
2014-06-17 08:12 - 2014-06-17 08:12 - 11527888 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwsw00.sys
2014-06-17 08:12 - 2014-06-17 08:12 - 00100312 _____ (Intel Corporation) C:\windows\system32\Drivers\TeeDriverx64.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00342528 _____ (Intel(R) Corporation) C:\windows\system32\Drivers\IntcDAud.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00016896 _____ (Intel(R) Corporation) C:\windows\system32\IntcDAuC.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00901848 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-06-17 08:10 - 2014-06-17 08:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-06-12 09:02 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-12 09:02 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-12 09:02 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-06-12 09:02 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-06-12 09:02 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-06-12 09:02 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-06-12 09:02 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-06-12 09:02 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-06-12 09:02 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-06-12 09:02 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-06-12 09:02 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-06-12 09:02 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 09:02 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-06-12 09:02 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-06-12 09:02 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-06-12 09:02 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-06-12 09:02 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-06-12 09:02 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-06-12 09:02 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-06-12 09:02 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-06-12 09:02 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-06-12 09:02 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-06-12 09:02 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-06-12 09:02 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-06-12 09:02 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 09:02 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-06-12 09:02 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-06-12 09:02 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-06-12 09:02 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-06-12 09:02 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-06-12 09:02 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-06-12 09:02 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-06-12 09:02 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-06-12 09:02 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-06-12 09:02 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 09:02 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2014-06-12 09:02 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2014-06-12 09:02 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-06-12 09:02 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 09:02 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2014-06-12 09:02 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-06-12 09:02 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2014-06-12 09:02 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-06-12 09:02 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2014-06-12 09:02 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-06-12 09:02 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2014-06-12 09:02 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-06-12 09:01 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-06-12 09:01 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-06-12 09:01 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-06-12 09:01 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-06-12 09:01 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-06-12 09:01 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-06-12 09:01 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-06-12 09:01 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-06-12 09:01 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-06-12 09:01 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-06-12 09:01 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-06-12 09:01 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-06-12 09:01 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-06-12 09:01 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-06-12 09:01 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-06-12 09:01 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-06-12 09:01 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-06-12 09:01 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-06-12 09:01 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-06-12 09:01 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-06-12 09:01 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-06-11 08:51 - 2010-05-13 09:58 - 00007484 _____ () C:\windows\system32\athurextx.cat
2014-06-11 08:51 - 2010-01-05 19:23 - 01847296 ____R (Atheros Communications, Inc.) C:\windows\system32\athurx.sys
2014-06-11 08:44 - 2014-06-11 08:44 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-06-10 13:12 - 2014-06-10 13:12 - 00002100 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-06-10 13:12 - 2014-06-10 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-06-10 13:11 - 2009-05-19 17:39 - 00003072 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2S.dll
2014-06-10 13:11 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\windows\SysWOW64\NSSearch.dll
2014-06-10 13:11 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2.dll
2014-06-10 13:11 - 2007-12-13 22:16 - 00004608 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2L.dll
2014-06-10 13:11 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\windows\SysWOW64\BroSNMP.dll
2014-06-10 08:14 - 2014-06-10 08:14 - 00346014 _____ () C:\Users\Monika\Downloads\POŃCZOCHY.bmp

==================== One Month Modified Files and Folders =======

2014-07-08 18:09 - 2014-07-08 18:08 - 00019376 _____ () C:\Users\Monika\Downloads\FRST.txt
2014-07-08 18:08 - 2014-07-08 18:08 - 00000000 ____D () C:\FRST
2014-07-08 18:06 - 2014-07-08 18:06 - 02084352 _____ (Farbar) C:\Users\Monika\Downloads\FRST64.exe
2014-07-08 18:05 - 2012-10-16 10:00 - 00001048 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 18:04 - 2013-09-23 08:05 - 01121618 _____ () C:\windows\WindowsUpdate.log
2014-07-08 17:41 - 2014-07-08 17:41 - 00004665 _____ () C:\Users\Monika\Desktop\RKreport_SCN_07082014_173457.log
2014-07-08 17:33 - 2012-10-12 18:18 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-08 17:26 - 2014-07-08 17:26 - 00029696 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-08 17:26 - 2014-07-08 17:26 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-08 17:26 - 2009-07-14 06:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-08 17:26 - 2009-07-14 06:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-08 17:25 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Desktop\RogueKiller.exe
2014-07-08 17:25 - 2014-07-08 17:24 - 04764760 _____ () C:\Users\Monika\Downloads\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:24 - 00002888 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-08 17:24 - 2014-07-08 17:24 - 00001188 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-08 17:16 - 2014-05-30 12:57 - 00016152 _____ () C:\windows\system32\Drivers\SWDUMon.sys
2014-07-08 17:16 - 2014-05-30 12:57 - 00002840 _____ () C:\windows\System32\Tasks\SlimDrivers Startup
2014-07-08 17:16 - 2014-05-30 12:57 - 00000412 _____ () C:\windows\Tasks\SlimDrivers Startup.job
2014-07-08 17:15 - 2014-07-07 20:47 - 00000112 _____ () C:\windows\setupact.log
2014-07-08 17:15 - 2013-02-28 10:41 - 00000266 _____ () C:\windows\Tasks\AutoKMS.job
2014-07-08 17:15 - 2012-10-16 10:00 - 00001044 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 17:15 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-08 15:35 - 2014-07-08 10:35 - 00000000 ____D () C:\Users\Monika\Desktop\Dystrybutorzy, sklepy
2014-07-08 14:14 - 2014-06-17 10:08 - 00000000 ____D () C:\Users\Monika\Desktop\Nowa Kolekcja CZERWIEC 2014
2014-07-08 14:12 - 2014-07-08 14:12 - 00011013 _____ () C:\Users\Monika\Desktop\DLA TORBENA 2ND PART.xlsx
2014-07-08 10:02 - 2012-03-13 03:18 - 00740688 _____ () C:\windows\system32\perfh015.dat
2014-07-08 10:02 - 2012-03-13 03:18 - 00156230 _____ () C:\windows\system32\perfc015.dat
2014-07-08 10:02 - 2009-07-14 07:13 - 01670590 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-08 03:30 - 2012-03-13 02:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-07 21:04 - 2014-07-04 13:17 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-07 21:02 - 2014-07-04 13:16 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-07 21:02 - 2014-07-04 13:16 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-07 20:47 - 2014-07-07 20:47 - 00009038 _____ () C:\windows\PFRO.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 _____ () C:\windows\setuperr.log
2014-07-07 20:47 - 2009-07-14 07:08 - 00032604 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-07-07 20:46 - 2014-07-07 20:46 - 00000000 _____ () C:\asc_rdflag
2014-07-07 20:46 - 2014-06-25 19:17 - 83288064 _____ () C:\windows\system32\config\SOFTWARE.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 50991104 _____ () C:\windows\system32\config\COMPONENTS.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00356352 _____ () C:\windows\system32\config\DEFAULT.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00061440 _____ () C:\windows\system32\config\SAM.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00028672 _____ () C:\windows\system32\config\SECURITY.iodefrag.bak
2014-07-07 20:46 - 2012-10-12 21:17 - 00000000 ____D () C:\Users\Monika
2014-07-07 15:10 - 2014-07-07 15:10 - 00011117 _____ () C:\Users\Monika\Downloads\Kopi af DLA TORBENA.xlsx
2014-07-07 13:35 - 2012-10-15 10:54 - 00000000 ____D () C:\Users\Monika\Documents\MONIKA Dokumenty 15-10-2012
2014-07-07 07:37 - 2014-06-25 18:48 - 00002165 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-07-07 07:34 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:15 - 2014-07-04 13:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Monika\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 13:10 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\ProductData
2014-07-04 08:38 - 2014-06-25 18:34 - 00000000 ____D () C:\AdwCleaner
2014-07-04 08:36 - 2014-07-04 08:36 - 00011376 _____ () C:\Users\Monika\Desktop\hijackthis.log
2014-07-03 17:19 - 2014-07-03 17:19 - 00002941 _____ () C:\Users\Monika\Desktop\HiJackThis.lnk
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-07-03 17:19 - 2012-10-12 21:17 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-07-03 15:45 - 2014-06-27 15:01 - 00000000 ____D () C:\Users\Monika\Desktop\inspiracje
2014-07-02 14:03 - 2013-01-15 13:06 - 00000000 ____D () C:\Users\Monika\Desktop\BAZA
2014-07-01 07:57 - 2014-06-26 12:20 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\AdobeChk
2014-06-30 15:38 - 2014-06-30 15:38 - 00000000 ____D () C:\Users\Monika\Desktop\httpwww.yesamsexy.comLingerie
2014-06-26 17:19 - 2014-06-26 17:19 - 00000000 ____D () C:\windows\Options
2014-06-26 17:19 - 2012-03-13 01:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-26 16:19 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-06-26 12:46 - 2012-10-12 18:23 - 00000000 ____D () C:\ProgramData\IObit
2014-06-26 12:22 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\{019D0866-E9F8-4980-87A8-332C2400391A}
2014-06-26 12:22 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Local\Windows Live Writer
2014-06-26 12:21 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Windows Live Writer
2014-06-26 08:23 - 2012-03-13 02:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-06-26 08:23 - 2012-03-13 02:43 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2014-06-26 08:22 - 2012-03-13 02:43 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2014-06-26 08:15 - 2014-06-26 08:15 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-06-26 08:07 - 2012-03-13 02:38 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-06-25 20:29 - 2013-10-23 15:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-25 20:28 - 2014-06-25 20:29 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-25 20:23 - 2012-10-12 18:18 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-06-25 20:23 - 2012-10-12 18:18 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-25 20:23 - 2012-10-12 18:18 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-06-25 19:50 - 2014-06-25 19:50 - 00003168 _____ () C:\windows\System32\Tasks\SmartDefrag3_Startup
2014-06-25 19:49 - 2014-06-25 19:49 - 00003166 _____ () C:\windows\System32\Tasks\SmartDefrag3_Update
2014-06-25 19:49 - 2014-06-25 19:49 - 00001130 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-25 19:49 - 2012-10-12 18:23 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\IObit
2014-06-25 19:49 - 2012-10-12 18:22 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-06-25 19:44 - 2012-03-13 01:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-25 19:44 - 2012-03-13 01:55 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-25 19:39 - 2012-03-13 02:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2014-06-25 19:34 - 2012-03-13 02:56 - 00000000 ____D () C:\ProgramData\CyberLink
2014-06-25 19:25 - 2013-12-03 14:16 - 00000000 ____D () C:\ProgramData\InstallShield
2014-06-25 19:21 - 2012-11-19 12:56 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-25 18:58 - 2011-02-11 21:57 - 00000000 ____D () C:\windows\Panther
2014-06-25 18:50 - 2014-01-03 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-25 18:49 - 2014-06-25 18:49 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\ProductData
2014-06-25 18:48 - 2014-06-25 18:48 - 00003096 _____ () C:\windows\System32\Tasks\ASC7_PerformanceMonitor
2014-06-25 18:48 - 2014-06-25 18:48 - 00002856 _____ () C:\windows\System32\Tasks\ASC7_SkipUac_Monika
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 18:47 - 2014-06-25 18:47 - 37355512 _____ (IObit ) C:\Users\Monika\Downloads\advanced-systemcare-setup.exe
2014-06-25 18:45 - 2012-10-12 18:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-25 18:45 - 2012-10-12 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-25 18:45 - 2012-10-12 18:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-25 18:44 - 2014-06-25 18:44 - 04812672 _____ (Piriform Ltd) C:\Users\Monika\Downloads\ccsetup415.exe
2014-06-18 10:28 - 2014-06-18 10:28 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-06-17 08:54 - 2012-10-16 10:00 - 00004044 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-17 08:54 - 2012-10-16 10:00 - 00003792 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-17 08:12 - 2014-06-17 08:12 - 11527888 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwsw00.sys
2014-06-17 08:12 - 2014-06-17 08:12 - 00100312 _____ (Intel Corporation) C:\windows\system32\Drivers\TeeDriverx64.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00342528 _____ (Intel(R) Corporation) C:\windows\system32\Drivers\IntcDAud.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00016896 _____ (Intel(R) Corporation) C:\windows\system32\IntcDAuC.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00901848 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-06-17 08:10 - 2014-06-17 08:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-06-17 08:10 - 2012-03-13 01:53 - 00107552 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RTNUninst64.dll
2014-06-16 15:48 - 2012-10-18 10:27 - 00000000 ____D () C:\Users\Monika\AppData\Local\CrashDumps
2014-06-12 15:49 - 2013-07-29 08:04 - 00000000 ____D () C:\windows\system32\MRT
2014-06-12 15:47 - 2012-10-12 17:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-12 15:45 - 2012-10-13 10:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 15:44 - 2014-05-08 14:23 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-06-12 11:07 - 2014-03-21 08:57 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-06-11 13:23 - 2014-02-14 10:14 - 00000000 ____D () C:\Users\Monika\Desktop\obliczenia dodatków
2014-06-11 08:44 - 2014-06-11 08:44 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-06-11 08:09 - 2012-11-27 16:19 - 00000000 ____D () C:\Users\Monika\Downloads\programy
2014-06-10 13:12 - 2014-06-10 13:12 - 00002100 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-06-10 13:12 - 2014-06-10 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-06-10 13:12 - 2013-12-03 14:20 - 00000050 _____ () C:\windows\system32\bridf08b.dat
2014-06-10 13:11 - 2013-12-03 14:19 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-06-10 08:14 - 2014-06-10 08:14 - 00346014 _____ () C:\Users\Monika\Downloads\POŃCZOCHY.bmp
2014-06-08 11:13 - 2014-06-12 09:02 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 09:02 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-26 16:12

==================== End Of Log ============================
Avatar billede torben lind Forsker
08. juli 2014 - 18:15 #13
Her er den naeste.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Monika (administrator) on MONIKA-KOMPUTER on 08-07-2014 18:08:25
Running from C:\Users\Monika\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(SlimWare Utilities, Inc.) C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Microsoft Corp.) C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
() C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe [544544 2014-05-04] (IObit)
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\MountPoints2: {aa650912-862b-11e2-a265-b803059495e3} - G:\Startme.exe
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [226920 2011-06-05] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
Startup: C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E-POP.lnk
ShortcutTarget: E-POP.lnk -> C:\Program Files (x86)\Samsung\E-POP\E-POP.exe (No File)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.dk/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.61 62.179.1.63

FireFox:
========
FF ProfilePath: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Ads Removal - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default\Extensions\adremoveext@adremoveext.net [2014-06-17]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\enewn5mo.default\Extensions\ascsurfingprotection@iobit.com [2014-06-25]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "https://poczta.nazwa.pl/", "hxxp://www.polskieserce.pl/", "hxxp://www.pah.org.pl/o-pah/8/pajacyk"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (Adblock Plus) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-07-10]
CHR Extension: (Ads Removal) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-02-25]
CHR Extension: (Google Wallet) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-26]

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [921664 2011-11-14] (Intel Corporation) [File not signed]
S3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1355840 2011-11-14] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [995392 2011-11-14] (Intel Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
S3 Samsung UPD Service2; C:\windows\System32\SUPDSvc2.exe [165456 2011-12-02] (Samsung Electronics)
R2 SamsungDeviceConfigurationWinService; C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [31624 2012-02-13] () [File not signed]
S2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S4 wlcrasvc; C:\Program Files (x86)\Windows Live\Mesh\wlcrasvc.exe [57184 2010-09-22] (Microsoft Corporation)
R2 wlidsvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2292096 2011-03-28] (Microsoft Corp.)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-13] (DT Soft Ltd)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-06-17] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-05-15] (Windows (R) 2003 DDK 3790 provider)
S3 SBIOSIO; No ImagePath
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2014-06-17] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-07-08] ()
U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [29696 2014-07-08] ()
S3 AthBTPort; system32\DRIVERS\btath_flt.sys [X]
S3 athr; system32\DRIVERS\athrx.sys [X]
S3 BTATH_A2DP; system32\drivers\btath_a2dp.sys [X]
S3 btath_avdt; system32\drivers\btath_avdt.sys [X]
S3 BTATH_BUS; system32\DRIVERS\btath_bus.sys [X]
S3 BTATH_HCRP; system32\DRIVERS\btath_hcrp.sys [X]
S3 BTATH_LWFLT; system32\DRIVERS\btath_lwflt.sys [X]
S3 BTATH_RCP; system32\DRIVERS\btath_rcp.sys [X]
S3 BtFilter; system32\DRIVERS\btfilter.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S1 gdfrtfui; \??\C:\windows\system32\drivers\gdfrtfui.sys [X]
S1 jzxbwaxs; \??\C:\windows\system32\drivers\jzxbwaxs.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-08 18:08 - 2014-07-08 18:09 - 00019376 _____ () C:\Users\Monika\Downloads\FRST.txt
2014-07-08 18:08 - 2014-07-08 18:08 - 00000000 ____D () C:\FRST
2014-07-08 18:06 - 2014-07-08 18:06 - 02084352 _____ (Farbar) C:\Users\Monika\Downloads\FRST64.exe
2014-07-08 17:41 - 2014-07-08 17:41 - 00004665 _____ () C:\Users\Monika\Desktop\RKreport_SCN_07082014_173457.log
2014-07-08 17:26 - 2014-07-08 17:26 - 00029696 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-08 17:26 - 2014-07-08 17:26 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-08 17:25 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Desktop\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Downloads\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:24 - 00002888 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-08 17:24 - 2014-07-08 17:24 - 00001188 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-08 14:12 - 2014-07-08 14:12 - 00011013 _____ () C:\Users\Monika\Desktop\DLA TORBENA 2ND PART.xlsx
2014-07-08 10:35 - 2014-07-08 15:35 - 00000000 ____D () C:\Users\Monika\Desktop\Dystrybutorzy, sklepy
2014-07-07 20:47 - 2014-07-08 17:15 - 00000112 _____ () C:\windows\setupact.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00009038 _____ () C:\windows\PFRO.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 _____ () C:\windows\setuperr.log
2014-07-07 20:46 - 2014-07-07 20:46 - 00000000 _____ () C:\asc_rdflag
2014-07-07 15:10 - 2014-07-07 15:10 - 00011117 _____ () C:\Users\Monika\Downloads\Kopi af DLA TORBENA.xlsx
2014-07-04 13:17 - 2014-07-07 21:04 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-04 13:16 - 2014-07-07 21:02 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-04 13:16 - 2014-07-07 21:02 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:16 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-07-04 13:16 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-07-04 13:16 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-07-04 13:14 - 2014-07-04 13:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Monika\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 08:36 - 2014-07-04 08:36 - 00011376 _____ () C:\Users\Monika\Desktop\hijackthis.log
2014-07-03 17:19 - 2014-07-03 17:19 - 00002941 _____ () C:\Users\Monika\Desktop\HiJackThis.lnk
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-06-30 15:38 - 2014-06-30 15:38 - 00000000 ____D () C:\Users\Monika\Desktop\httpwww.yesamsexy.comLingerie
2014-06-27 15:01 - 2014-07-03 15:45 - 00000000 ____D () C:\Users\Monika\Desktop\inspiracje
2014-06-26 17:19 - 2014-06-26 17:19 - 00000000 ____D () C:\windows\Options
2014-06-26 12:22 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\{019D0866-E9F8-4980-87A8-332C2400391A}
2014-06-26 12:21 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\Windows Live Writer
2014-06-26 12:21 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Windows Live Writer
2014-06-26 12:20 - 2014-07-01 07:57 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\AdobeChk
2014-06-26 08:15 - 2014-06-26 08:15 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-06-26 08:06 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAudio2_5.dll
2014-06-26 08:06 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\windows\SysWOW64\XAPOFX1_3.dll
2014-06-26 08:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\windows\system32\d3dx10_42.dll
2014-06-26 08:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx10_42.dll
2014-06-26 08:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\windows\system32\d3dx9_32.dll
2014-06-26 08:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3dx9_32.dll
2014-06-26 07:25 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstscax.dll
2014-06-26 07:25 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-06-25 20:29 - 2014-06-25 20:28 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-06-25 20:29 - 2014-06-25 20:28 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-25 19:50 - 2014-06-25 19:50 - 00003168 _____ () C:\windows\System32\Tasks\SmartDefrag3_Startup
2014-06-25 19:49 - 2014-06-25 19:49 - 00003166 _____ () C:\windows\System32\Tasks\SmartDefrag3_Update
2014-06-25 19:49 - 2014-06-25 19:49 - 00001130 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-25 19:49 - 2014-03-18 17:51 - 00128320 _____ (IObit) C:\windows\system32\IObitSmartDefragExtension.dll
2014-06-25 19:49 - 2013-11-19 16:52 - 00034080 _____ (IObit) C:\windows\system32\SmartDefragBootTime.exe
2014-06-25 19:17 - 2014-07-07 20:46 - 83288064 _____ () C:\windows\system32\config\SOFTWARE.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 50991104 _____ () C:\windows\system32\config\COMPONENTS.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00356352 _____ () C:\windows\system32\config\DEFAULT.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00061440 _____ () C:\windows\system32\config\SAM.iodefrag.bak
2014-06-25 19:17 - 2014-07-07 20:46 - 00028672 _____ () C:\windows\system32\config\SECURITY.iodefrag.bak
2014-06-25 19:12 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2014-06-25 19:12 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-25 19:12 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-25 19:12 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2014-06-25 19:12 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2014-06-25 19:12 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2014-06-25 19:12 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2014-06-25 19:12 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-06-25 19:12 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\MsRdpWebAccess.dll
2014-06-25 19:12 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wksprtPS.dll
2014-06-25 19:12 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2014-06-25 19:12 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2014-06-25 19:12 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\windows\SysWOW64\tsgqec.dll
2014-06-25 19:12 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-06-25 19:12 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rdvidcrl.dll
2014-06-25 19:12 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\windows\SysWOW64\mstsc.exe
2014-06-25 19:11 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-06-25 19:11 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSWorkspace.dll
2014-06-25 18:49 - 2014-06-25 18:49 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\ProductData
2014-06-25 18:48 - 2014-07-07 07:37 - 00002165 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-06-25 18:48 - 2014-07-04 13:10 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 18:48 - 2014-06-25 18:48 - 00003096 _____ () C:\windows\System32\Tasks\ASC7_PerformanceMonitor
2014-06-25 18:48 - 2014-06-25 18:48 - 00002856 _____ () C:\windows\System32\Tasks\ASC7_SkipUac_Monika
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 18:47 - 2014-06-25 18:47 - 37355512 _____ (IObit ) C:\Users\Monika\Downloads\advanced-systemcare-setup.exe
2014-06-25 18:44 - 2014-06-25 18:44 - 04812672 _____ (Piriform Ltd) C:\Users\Monika\Downloads\ccsetup415.exe
2014-06-25 18:34 - 2014-07-04 08:38 - 00000000 ____D () C:\AdwCleaner
2014-06-25 18:34 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll
2014-06-18 10:28 - 2014-06-18 10:28 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-06-17 10:08 - 2014-07-08 14:14 - 00000000 ____D () C:\Users\Monika\Desktop\Nowa Kolekcja CZERWIEC 2014
2014-06-17 08:12 - 2014-06-17 08:12 - 11527888 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwsw00.sys
2014-06-17 08:12 - 2014-06-17 08:12 - 00100312 _____ (Intel Corporation) C:\windows\system32\Drivers\TeeDriverx64.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00342528 _____ (Intel(R) Corporation) C:\windows\system32\Drivers\IntcDAud.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00016896 _____ (Intel(R) Corporation) C:\windows\system32\IntcDAuC.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00901848 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-06-17 08:10 - 2014-06-17 08:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-06-12 09:02 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-12 09:02 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-12 09:02 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-06-12 09:02 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-06-12 09:02 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-06-12 09:02 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-06-12 09:02 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-06-12 09:02 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-06-12 09:02 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-06-12 09:02 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-06-12 09:02 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-06-12 09:02 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 09:02 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-06-12 09:02 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-06-12 09:02 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-06-12 09:02 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-06-12 09:02 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-06-12 09:02 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-06-12 09:02 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-06-12 09:02 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-06-12 09:02 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-06-12 09:02 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-06-12 09:02 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-06-12 09:02 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-06-12 09:02 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 09:02 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-06-12 09:02 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-06-12 09:02 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-06-12 09:02 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-06-12 09:02 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-06-12 09:02 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-06-12 09:02 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-06-12 09:02 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-06-12 09:02 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-06-12 09:02 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 09:02 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2014-06-12 09:02 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll
2014-06-12 09:02 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-06-12 09:02 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 09:02 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2014-06-12 09:02 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-06-12 09:02 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2014-06-12 09:02 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-06-12 09:02 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2014-06-12 09:02 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-06-12 09:02 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2014-06-12 09:02 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-06-12 09:01 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-06-12 09:01 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-06-12 09:01 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-06-12 09:01 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-06-12 09:01 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-06-12 09:01 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-06-12 09:01 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-06-12 09:01 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-06-12 09:01 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-06-12 09:01 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-06-12 09:01 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-06-12 09:01 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-06-12 09:01 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-06-12 09:01 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-06-12 09:01 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-06-12 09:01 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-06-12 09:01 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-06-12 09:01 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-06-12 09:01 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-06-12 09:01 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-06-12 09:01 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-06-11 08:51 - 2010-05-13 09:58 - 00007484 _____ () C:\windows\system32\athurextx.cat
2014-06-11 08:51 - 2010-01-05 19:23 - 01847296 ____R (Atheros Communications, Inc.) C:\windows\system32\athurx.sys
2014-06-11 08:44 - 2014-06-11 08:44 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-06-10 13:12 - 2014-06-10 13:12 - 00002100 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-06-10 13:12 - 2014-06-10 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-06-10 13:11 - 2009-05-19 17:39 - 00003072 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2S.dll
2014-06-10 13:11 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\windows\SysWOW64\NSSearch.dll
2014-06-10 13:11 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2.dll
2014-06-10 13:11 - 2007-12-13 22:16 - 00004608 ____N (Brother Industries Ltd.) C:\windows\SysWOW64\BrDctF2L.dll
2014-06-10 13:11 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\windows\SysWOW64\BroSNMP.dll
2014-06-10 08:14 - 2014-06-10 08:14 - 00346014 _____ () C:\Users\Monika\Downloads\POŃCZOCHY.bmp

==================== One Month Modified Files and Folders =======

2014-07-08 18:09 - 2014-07-08 18:08 - 00019376 _____ () C:\Users\Monika\Downloads\FRST.txt
2014-07-08 18:08 - 2014-07-08 18:08 - 00000000 ____D () C:\FRST
2014-07-08 18:06 - 2014-07-08 18:06 - 02084352 _____ (Farbar) C:\Users\Monika\Downloads\FRST64.exe
2014-07-08 18:05 - 2012-10-16 10:00 - 00001048 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 18:04 - 2013-09-23 08:05 - 01121618 _____ () C:\windows\WindowsUpdate.log
2014-07-08 17:41 - 2014-07-08 17:41 - 00004665 _____ () C:\Users\Monika\Desktop\RKreport_SCN_07082014_173457.log
2014-07-08 17:33 - 2012-10-12 18:18 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-08 17:26 - 2014-07-08 17:26 - 00029696 _____ () C:\windows\SysWOW64\Drivers\TrueSight.sys
2014-07-08 17:26 - 2014-07-08 17:26 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-08 17:26 - 2009-07-14 06:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-08 17:26 - 2009-07-14 06:45 - 00028848 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-08 17:25 - 2014-07-08 17:25 - 04764760 _____ () C:\Users\Monika\Desktop\RogueKiller.exe
2014-07-08 17:25 - 2014-07-08 17:24 - 04764760 _____ () C:\Users\Monika\Downloads\RogueKiller.exe
2014-07-08 17:24 - 2014-07-08 17:24 - 00002888 _____ () C:\windows\System32\Tasks\Uninstaller_SkipUac_Administrator
2014-07-08 17:24 - 2014-07-08 17:24 - 00001188 _____ () C:\Users\Public\Desktop\IObit Uninstaller.lnk
2014-07-08 17:16 - 2014-05-30 12:57 - 00016152 _____ () C:\windows\system32\Drivers\SWDUMon.sys
2014-07-08 17:16 - 2014-05-30 12:57 - 00002840 _____ () C:\windows\System32\Tasks\SlimDrivers Startup
2014-07-08 17:16 - 2014-05-30 12:57 - 00000412 _____ () C:\windows\Tasks\SlimDrivers Startup.job
2014-07-08 17:15 - 2014-07-07 20:47 - 00000112 _____ () C:\windows\setupact.log
2014-07-08 17:15 - 2013-02-28 10:41 - 00000266 _____ () C:\windows\Tasks\AutoKMS.job
2014-07-08 17:15 - 2012-10-16 10:00 - 00001044 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 17:15 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-08 15:35 - 2014-07-08 10:35 - 00000000 ____D () C:\Users\Monika\Desktop\Dystrybutorzy, sklepy
2014-07-08 14:14 - 2014-06-17 10:08 - 00000000 ____D () C:\Users\Monika\Desktop\Nowa Kolekcja CZERWIEC 2014
2014-07-08 14:12 - 2014-07-08 14:12 - 00011013 _____ () C:\Users\Monika\Desktop\DLA TORBENA 2ND PART.xlsx
2014-07-08 10:02 - 2012-03-13 03:18 - 00740688 _____ () C:\windows\system32\perfh015.dat
2014-07-08 10:02 - 2012-03-13 03:18 - 00156230 _____ () C:\windows\system32\perfc015.dat
2014-07-08 10:02 - 2009-07-14 07:13 - 01670590 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-08 03:30 - 2012-03-13 02:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-07 21:04 - 2014-07-04 13:17 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-07 21:02 - 2014-07-04 13:16 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-07 21:02 - 2014-07-04 13:16 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-07 20:47 - 2014-07-07 20:47 - 00009038 _____ () C:\windows\PFRO.log
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 _____ () C:\windows\setuperr.log
2014-07-07 20:47 - 2009-07-14 07:08 - 00032604 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-07-07 20:46 - 2014-07-07 20:46 - 00000000 _____ () C:\asc_rdflag
2014-07-07 20:46 - 2014-06-25 19:17 - 83288064 _____ () C:\windows\system32\config\SOFTWARE.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 50991104 _____ () C:\windows\system32\config\COMPONENTS.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00356352 _____ () C:\windows\system32\config\DEFAULT.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00061440 _____ () C:\windows\system32\config\SAM.iodefrag.bak
2014-07-07 20:46 - 2014-06-25 19:17 - 00028672 _____ () C:\windows\system32\config\SECURITY.iodefrag.bak
2014-07-07 20:46 - 2012-10-12 21:17 - 00000000 ____D () C:\Users\Monika
2014-07-07 15:10 - 2014-07-07 15:10 - 00011117 _____ () C:\Users\Monika\Downloads\Kopi af DLA TORBENA.xlsx
2014-07-07 13:35 - 2012-10-15 10:54 - 00000000 ____D () C:\Users\Monika\Documents\MONIKA Dokumenty 15-10-2012
2014-07-07 07:37 - 2014-06-25 18:48 - 00002165 _____ () C:\Users\Public\Desktop\Advanced SystemCare 7.lnk
2014-07-07 07:34 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-04 13:16 - 2014-07-04 13:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:15 - 2014-07-04 13:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Monika\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 13:10 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\ProductData
2014-07-04 08:38 - 2014-06-25 18:34 - 00000000 ____D () C:\AdwCleaner
2014-07-04 08:36 - 2014-07-04 08:36 - 00011376 _____ () C:\Users\Monika\Desktop\hijackthis.log
2014-07-03 17:19 - 2014-07-03 17:19 - 00002941 _____ () C:\Users\Monika\Desktop\HiJackThis.lnk
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2014-07-03 17:19 - 2014-07-03 17:19 - 00000000 ____D () C:\Program Files (x86)\Trend Micro
2014-07-03 17:19 - 2012-10-12 21:17 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-07-03 15:45 - 2014-06-27 15:01 - 00000000 ____D () C:\Users\Monika\Desktop\inspiracje
2014-07-02 14:03 - 2013-01-15 13:06 - 00000000 ____D () C:\Users\Monika\Desktop\BAZA
2014-07-01 07:57 - 2014-06-26 12:20 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\AdobeChk
2014-06-30 15:38 - 2014-06-30 15:38 - 00000000 ____D () C:\Users\Monika\Desktop\httpwww.yesamsexy.comLingerie
2014-06-26 17:19 - 2014-06-26 17:19 - 00000000 ____D () C:\windows\Options
2014-06-26 17:19 - 2012-03-13 01:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-26 16:19 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-06-26 12:46 - 2012-10-12 18:23 - 00000000 ____D () C:\ProgramData\IObit
2014-06-26 12:22 - 2014-06-26 12:22 - 00000000 ____D () C:\Users\Monika\AppData\Local\{019D0866-E9F8-4980-87A8-332C2400391A}
2014-06-26 12:22 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Local\Windows Live Writer
2014-06-26 12:21 - 2014-06-26 12:21 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Windows Live Writer
2014-06-26 08:23 - 2012-03-13 02:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-06-26 08:23 - 2012-03-13 02:43 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2014-06-26 08:22 - 2012-03-13 02:43 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2014-06-26 08:15 - 2014-06-26 08:15 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-06-26 08:07 - 2012-03-13 02:38 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-06-25 20:29 - 2013-10-23 15:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-25 20:28 - 2014-06-25 20:29 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-06-25 20:28 - 2014-06-25 20:29 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-25 20:23 - 2012-10-12 18:18 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-06-25 20:23 - 2012-10-12 18:18 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-25 20:23 - 2012-10-12 18:18 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-06-25 19:50 - 2014-06-25 19:50 - 00003168 _____ () C:\windows\System32\Tasks\SmartDefrag3_Startup
2014-06-25 19:49 - 2014-06-25 19:49 - 00003166 _____ () C:\windows\System32\Tasks\SmartDefrag3_Update
2014-06-25 19:49 - 2014-06-25 19:49 - 00001130 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-25 19:49 - 2012-10-12 18:23 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\IObit
2014-06-25 19:49 - 2012-10-12 18:22 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-06-25 19:44 - 2012-03-13 01:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-25 19:44 - 2012-03-13 01:55 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-25 19:39 - 2012-03-13 02:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2014-06-25 19:34 - 2012-03-13 02:56 - 00000000 ____D () C:\ProgramData\CyberLink
2014-06-25 19:25 - 2013-12-03 14:16 - 00000000 ____D () C:\ProgramData\InstallShield
2014-06-25 19:21 - 2012-11-19 12:56 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-25 18:58 - 2011-02-11 21:57 - 00000000 ____D () C:\windows\Panther
2014-06-25 18:50 - 2014-01-03 13:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-25 18:49 - 2014-06-25 18:49 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\ProductData
2014-06-25 18:48 - 2014-06-25 18:48 - 00003096 _____ () C:\windows\System32\Tasks\ASC7_PerformanceMonitor
2014-06-25 18:48 - 2014-06-25 18:48 - 00002856 _____ () C:\windows\System32\Tasks\ASC7_SkipUac_Monika
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-25 18:48 - 2014-06-25 18:48 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 18:47 - 2014-06-25 18:47 - 37355512 _____ (IObit ) C:\Users\Monika\Downloads\advanced-systemcare-setup.exe
2014-06-25 18:45 - 2012-10-12 18:20 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-25 18:45 - 2012-10-12 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-25 18:45 - 2012-10-12 18:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-25 18:44 - 2014-06-25 18:44 - 04812672 _____ (Piriform Ltd) C:\Users\Monika\Downloads\ccsetup415.exe
2014-06-18 10:28 - 2014-06-18 10:28 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-06-17 08:54 - 2012-10-16 10:00 - 00004044 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-17 08:54 - 2012-10-16 10:00 - 00003792 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-17 08:12 - 2014-06-17 08:12 - 11527888 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwsw00.sys
2014-06-17 08:12 - 2014-06-17 08:12 - 00100312 _____ (Intel Corporation) C:\windows\system32\Drivers\TeeDriverx64.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00342528 _____ (Intel(R) Corporation) C:\windows\system32\Drivers\IntcDAud.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00033008 _____ (Synaptics Incorporated) C:\windows\system32\Drivers\Smb_driver_Intel.sys
2014-06-17 08:11 - 2014-06-17 08:11 - 00016896 _____ (Intel(R) Corporation) C:\windows\system32\IntcDAuC.dll
2014-06-17 08:10 - 2014-06-17 08:10 - 00901848 _____ (Realtek ) C:\windows\system32\Drivers\Rt64win7.sys
2014-06-17 08:10 - 2014-06-17 08:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RtNicProp64.dll
2014-06-17 08:10 - 2012-03-13 01:53 - 00107552 _____ (Realtek Semiconductor Corporation) C:\windows\system32\RTNUninst64.dll
2014-06-16 15:48 - 2012-10-18 10:27 - 00000000 ____D () C:\Users\Monika\AppData\Local\CrashDumps
2014-06-12 15:49 - 2013-07-29 08:04 - 00000000 ____D () C:\windows\system32\MRT
2014-06-12 15:47 - 2012-10-12 17:58 - 95414520 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-12 15:45 - 2012-10-13 10:36 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 15:44 - 2014-05-08 14:23 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-06-12 11:07 - 2014-03-21 08:57 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-06-11 13:23 - 2014-02-14 10:14 - 00000000 ____D () C:\Users\Monika\Desktop\obliczenia dodatków
2014-06-11 08:44 - 2014-06-11 08:44 - 00000000 ____D () C:\ProgramData\TP-LINK
2014-06-11 08:09 - 2012-11-27 16:19 - 00000000 ____D () C:\Users\Monika\Downloads\programy
2014-06-10 13:12 - 2014-06-10 13:12 - 00002100 _____ () C:\Users\Public\Desktop\Brother Creative Center.lnk
2014-06-10 13:12 - 2014-06-10 13:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2014-06-10 13:12 - 2013-12-03 14:20 - 00000050 _____ () C:\windows\system32\bridf08b.dat
2014-06-10 13:11 - 2013-12-03 14:19 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-06-10 08:14 - 2014-06-10 08:14 - 00346014 _____ () C:\Users\Monika\Downloads\POŃCZOCHY.bmp
2014-06-08 11:13 - 2014-06-12 09:02 - 00506368 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 09:02 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-26 16:12

==================== End Of Log ============================
Avatar billede magictouch Nybegynder
09. juli 2014 - 09:38 #14
Kopier nedenstående med fed skrift ind i et notesblok dokument:


start
reboot::
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
C:\Program Files (x86)\IObit
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-3341365187-986142807-3572622625-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_HP] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_HP.exe"  /PROMPT /CMPID=JUNE2013_HP
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\Run: [SmartRAM] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Suo10_SmartRAM.exe [544544 2014-05-04] (IObit)
HKU\S-1-5-21-3341365187-986142807-3572622625-1001\...\MountPoints2: {aa650912-862b-11e2-a265-b803059495e3} - G:\Startme.exe
C:\Program Files (x86)\AVG Secure Search
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
CHR StartupUrls: "https://poczta.nazwa.pl/", "hxxp://www.polskieserce.pl/", "hxxp://www.pah.org.pl/o-pah/8/pajacyk"
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
S1 gdfrtfui; \??\C:\windows\system32\drivers\gdfrtfui.sys [X]
S1 jzxbwaxs; \??\C:\windows\system32\drivers\jzxbwaxs.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]
end

Og gem filen med navnet Fixlist   samme sted hvor FRST (Farbar Recovery Scan Tool) filen  også ligger

Start FRST (Farbar Recovery Scan Tool) og klikker på FIX (og vent til den er færdig)

Den laver Fixlog.txt, som du skal kopiere herind i dit næste indlæg.

BEMÆRK: Dette script blev skrevet specielt til denne bruger, til brug på den pågældende maskine. Køres dette på en anden maskine, kan det forårsage skade, og i værste fald vil computeren ikke starte


Hent: http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner

af Xplode, og gem den på dit Skrivebord.

AdwCleaner Fjerner:
· Adwares (software annoncer)
· PUP / LPI (Potentielt Uønsket Program)
· UønskedeVærktøjslinjer
· Hijacker (Hijack af browseren hjemmeside)



Dobbeltklik på adwcleaner.exe.
Klik på Scan, derefter på Clean.
Bekræft hver gang med OK.
Din computer vil (muligvis) blive genstartet automatisk.
En tekstfil åbnes efter genstart.
Kopier venligst indholdet af denne logfil i dit næste svar.
Du kan finde logfilen her C: \ AdwCleaner [Sn]
Avatar billede torben lind Forsker
09. juli 2014 - 12:11 #15
Hej magictouch.
Jeg vil prøve at gøre som beskrevet af dig,det kan først blive efter kl.17 og så vil jeg smide de forskellige log ind her.
På forhånd tak for hjælpen.
Torben
Avatar billede magictouch Nybegynder
09. juli 2014 - 13:48 #16
Fint nok      ☺☺
Avatar billede torben lind Forsker
10. juli 2014 - 08:03 #17
Hej magictouch.
Vi må stoppe vores tråd her.I går aftes da jeg skulle i gang med at lave de ting du havde skrevet,gik det helt galt.Først ville comp. ikke starte op,da jeg endelig fik gang I den,ville den ikke på internettet,ikke engang med kabel forbindelse.Alt det skete før jeg overhovedet var kommet igang med dine forslag.Så tog jeg den beslutning at give disken en gang Killdisk(det var måske også på tide,det var første gang i næsten 2 år at jeg formatterede disken).Så nu kører maskinen perfekt igen.Magictouch kan du smide et svar som tak for dit store arbejde med at løse mit problem.
Torben
Avatar billede magictouch Nybegynder
10. juli 2014 - 09:23 #18
Der er intet som en nyinstalleret computer        :-)



Tak for tilbuddet, men jeg synes du selv skal beholde pointene.
Avatar billede torben lind Forsker
10. juli 2014 - 11:41 #19
Hej magictouch.
Så siger jeg mange tak for hjælpen endnu engang.
Torben
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview

Flere spørgsmål fra Virus kategorien

Titel Indlæg Oprettet Seneste aktivitet
Anbefaling af antivirusprogram med firewall Af OnePlusFan i Virus 23 07/05/202421:02 13/05/202419:48
trusler Af gerhardpet i Virus 4 26/01/202410:02 27/01/202408:32
Kan ikke fjerne virus Af mik28 i Virus 16 09/01/202416:37 10/01/202419:59
virusscanning Af JetteD i Virus 2 10/11/202312:55 10/11/202316:36
Google ser ud til at være malware, lyder advarsel på alle vore mobiler! Af vbr i Virus 9 30/10/202312:12 15/12/202310:17
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester



Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I går 15:30 signalforstærker til trådløs rutrer tænkes brugt til pc næt pc -og MÅSKE TV 4 m borte eller begge Af Novice-1 i Routere & Switches
I går 11:43 Hvilket styresystem på en gammel Pc ??? Af Jan Post i Andre styresystemer
I går 07:44 Virus advarsler - falske Af jdann i Backup- & Antivirus
17/0519:32 Formler der blev væk Af Klaus W i Excel
17/0515:22 Hent array key Af nemlig i PHP
White papers
Flere white papers »


Premium
Teaser billede
Her er de nye medlemmer af Statens It-råd: Skal vurdere it-projekter på over 15 millioner kroner
Læs mere »
Antallet af anmeldelser af ulovligt indhold på beskedtjenester stiger: Regeringen skubber ansvaret videre til EU og Belgien
Efter masser af kritik af store prisstigninger: VMware åbner for gratis licenser - ændrer i licens-strukturen
Seks store selskaber med på årets image-liste for første gang: Kæmper alle med lav kendskabsgrad
Se alle »
Computerworld
Teaser billede
Nyopdaget sårbarhed rammer næsten alle VPN'er: Gør dem usikre og nærmest ubrugelige
Læs mere »
Om under en uge går det løs: Pc’en bliver aldrig den samme igen
VPN-test fra virkeligheden: To tjenester som glimrer på hver deres måde
Test: Samsungs nyeste laptop er noget af det tætteste du kommer på en Windows-Macbook
Se alle »
CIO
Teaser billede
Nu begynder den største GDPR-retssag mod dansk myndighed nogensinde: Står over for million-bøde
Læs mere »
Lukker it-systemerne ned i to uger på grund af implementering: Den bedste måde at sikre, at ingen data går tabt
Sådan har Coop sagt farvel til mainframen - sparer et to-cifret millionbeløb årligt på licenser
Hundredevis af selskaber klager over Microsofts licens-policy: Vi er låst fast og bundet
Se alle »
Job & Karriere
Teaser billede
Her er Danmarks fem bedste CIO’er lige nu: Se de fem nominerede til prisen som Årets CIO 2024
Læs mere »
Medarbejderne fik udleveret badetøfler ved indflytningen: Kom med inden for i IBM Danmarks nye topmoderne hovedkontor
Så meget tjener dine kollegaer: Her er alle data fra Computerworlds store it-lønstatistik for 2024
Får du den løn, du fortjener? Få overblikket over hvor meget dine kolleger tjener hver måned
Se alle »
White paper
Teaser billede
Opdag fordelene ved cloud-baseret backup og recovery
Læs mere »
Vejen væk fra WAN: Sådan skifter du til en moderne infrastruktur
Rapport kortlægger de 13 bedste muligheder for at sætte turbo på din cloud computing
Optimering af Source-to-Pay: Identificér oplagte gevinster og skær omkostninger
Se alle »

Events
Flere events »
White papers
Flere white papers »
IT-Kurser
Se alle vores it-kurser »