API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 14th, 2014
18
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 28.01 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014 ([color=red]ATTENTION: ====> FRST version is 24 days old and could be outdated[/color])
  2. Ran by PC (administrator) on PC-KOMPUTER on 14-08-2014 12:33:54
  3. Running from C:\Users\PC\Downloads\Programs
  4. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
  5. Internet Explorer Version 11
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
  17. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
  18. (AMD) C:\Windows\System32\atiesrxx.exe
  19. (AMD) C:\Windows\System32\atieclxx.exe
  20. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
  21. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
  22. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  23. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  24. (Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
  25. (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
  26. (Akamai Technologies, Inc.) C:\Users\PC\AppData\Local\Akamai\netsession_win.exe
  27. (Akamai Technologies, Inc.) C:\Users\PC\AppData\Local\Akamai\netsession_win.exe
  28. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  29. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
  30. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
  31. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
  32. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  33. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (IObit) C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
  36. () C:\Users\PC\AppData\Roaming\pxgclient\pxgclient\client\pxgclient.exe
  37. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  38. (AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe
  39. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  40. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  41. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  42. (Farbar) C:\Users\PC\Downloads\Programs\FRST64_2.exe
  43.  
  44.  
  45. ==================== Registry (Whitelisted) ==================
  46.  
  47. HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
  48. HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-07-10] (AVG Technologies CZ, s.r.o.)
  49. HKLM-x32\...\Run: [fst_pl_107] => [X]
  50. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  51. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
  52. HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-09] (Microsoft Corporation)
  53. HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  54. HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
  55. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3587664 2013-05-31] (Tonec Inc.)
  56. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [Akamai NetSession Interface] => C:\Users\PC\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
  57. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [Facebook Update] => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-05] (Facebook Inc.)
  58. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [GoogleChromeAutoLaunch_73B90D4D0D4A45E4E1249D0D8EDB5EB0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)
  59. ShellIconOverlayIdentifiers: IDM Shell Extension -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.)
  60.  
  61. ==================== Internet (Whitelisted) ====================
  62.  
  63. HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&ts=1393412145&type=default&q={searchTerms}
  64. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/?f=1&a=spd_ir_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0BzyyDtD0Czz0B0FzytD0FtN0D0Tzu0SzzzztBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCtC0FtC0CzytCtCtG0B0B0E0BtGzytDyE0AtGyDtDtAtAtGyCzy0A0A0BtCtA0FtA0ByByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0AtCzytCyEtBtGtA0EyE0CtG0Ezy0DzztGyD0A0F0BtGtAtD0A0ByEtD0EtDzy0F0AyB2Q&cr=343342430&ir=
  65. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178
  66. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&ts=1393412145&type=default&q={searchTerms}
  67. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  68. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/?f=1&a=spd_ir_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0BzyyDtD0Czz0B0FzytD0FtN0D0Tzu0SzzzztBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCtC0FtC0CzytCtCtG0B0B0E0BtGzytDyE0AtGyDtDtAtAtGyCzy0A0A0BtCtA0FtA0ByByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0AtCzytCyEtBtGtA0EyE0CtG0Ezy0DzztGyD0A0F0BtGtAtD0A0ByEtD0EtDzy0F0AyB2Q&cr=343342430&ir=
  69. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  70. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  71. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/?f=1&a=spd_ir_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0BzyyDtD0Czz0B0FzytD0FtN0D0Tzu0SzzzztBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCtC0FtC0CzytCtCtG0B0B0E0BtGzytDyE0AtGyDtDtAtAtGyCzy0A0A0BtCtA0FtA0ByByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0AtCzytCyEtBtGtA0EyE0CtG0Ezy0DzztGyD0A0F0BtGtAtD0A0ByEtD0EtDzy0F0AyB2Q&cr=343342430&ir=
  72. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  73. StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=sc&from=wpm0226&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&ts=1393412145
  74. SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  75. SearchScopes: HKLM - {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0BzyyDtD0Czz0B0FzytD0FtN0D0Tzu0SzzzztBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCtC0FtC0CzytCtCtG0B0B0E0BtGzytDyE0AtGyDtDtAtAtGyCzy0A0A0BtCtA0FtA0ByByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0AtCzytCyEtBtGtA0EyE0CtG0Ezy0DzztGyD0A0F0BtGtAtD0A0ByEtD0EtDzy0F0AyB2Q&cr=343342430&ir=
  76. SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  77. SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  78. SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1389283550&from=cor&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&q={searchTerms}
  79. SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&ts=1393412145&type=default&q={searchTerms}
  80. SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_22_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0B0A0D0BzyyDtD0Czz0B0FzytD0FtN0D0Tzu0SzzzztBtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCtC0FtC0CzytCtCtG0B0B0E0BtGzytDyE0AtGyDtDtAtAtGyCzy0A0A0BtCtA0FtA0ByByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0F0AtCzytCyEtBtGtA0EyE0CtG0Ezy0DzztGyD0A0F0BtGtAtD0A0ByEtD0EtDzy0F0AyB2Q&cr=343342430&ir=
  81. SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000LPVX-22V0TT0_WD-WXB1A83H4178H4178&ts=1393412145&type=default&q={searchTerms}
  82. BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  83. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  84. BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  85. BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
  86. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  87. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  88. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  89. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  90. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  91. Tcpip\Parameters: [DhcpNameServer] 95.160.170.92 88.156.222.92
  92.  
  93. FireFox:
  94. ========
  95. FF Plugin: @microsoft.com/GENUINE - disabled No File
  96. FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
  97. FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  98. FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  99. FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
  100. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  101. FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  102. FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  103. FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  104. FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\PC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  105. FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  106. FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\PC\AppData\Roaming\IDM\idmmzcc5
  107. FF Extension: IDM CC - C:\Users\PC\AppData\Roaming\IDM\idmmzcc5 [2014-01-10]
  108.  
  109. ==================== Services (Whitelisted) =================
  110.  
  111. R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-07-10] (AVG Technologies CZ, s.r.o.)
  112. R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-07-10] (AVG Technologies CZ, s.r.o.)
  113. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  114. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  115.  
  116. ==================== Drivers (Whitelisted) ====================
  117.  
  118. R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
  119. R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
  120. R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
  121. R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
  122. R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
  123. R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
  124. R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
  125. R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
  126. S3 OSFMount; C:\Program Files\OSFMount\OSFMount.sys [1299384 2014-02-07] (PassMark Software)
  127. S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
  128. S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
  129. S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
  130.  
  131. ==================== NetSvcs (Whitelisted) ===================
  132.  
  133.  
  134. ==================== One Month Created Files and Folders ========
  135.  
  136. 2014-08-14 12:33 - 2014-08-14 12:33 - 00000000 ____D () C:\FRST
  137. 2014-08-12 13:31 - 2014-08-12 13:31 - 00001172 _____ () C:\Users\PC\Desktop\Testy Bplus.lnk
  138. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Grupa IMAGE
  139. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE
  140. 2014-08-12 13:14 - 2014-08-12 13:31 - 00000000 ____D () C:\Program Files (x86)\Grupa IMAGE
  141. 2014-08-06 17:57 - 2014-08-06 17:57 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  142. 2014-08-06 17:57 - 2014-08-06 17:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  143. 2014-08-06 17:57 - 2014-08-06 17:57 - 00000000 ____D () C:\Windows\system32\Macromed
  144. 2014-08-06 12:52 - 2014-08-06 12:52 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  145. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  146. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  147. 2014-08-06 12:52 - 2014-08-06 12:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  148. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  149. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Java
  150. 2014-08-05 13:39 - 2014-08-07 13:41 - 00000000 ___RD () C:\Program Files (x86)\Skype
  151. 2014-08-05 13:39 - 2014-08-05 13:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
  152. 2014-08-05 13:39 - 2014-08-05 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  153. 2014-08-02 19:23 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  154. 2014-08-02 19:23 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  155. 2014-08-02 19:23 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  156. 2014-08-02 19:23 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  157. 2014-08-02 19:23 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  158. 2014-08-02 19:23 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  159. 2014-08-02 19:23 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
  160. 2014-08-02 19:23 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  161. 2014-08-02 19:23 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  162. 2014-08-02 19:23 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  163. 2014-08-02 19:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  164. 2014-08-02 19:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  165. 2014-08-02 19:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  166. 2014-08-02 19:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  167. 2014-07-28 15:25 - 2002-06-06 14:38 - 00139264 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\eax.dll
  168. 2014-07-28 15:25 - 1999-05-17 15:12 - 00755200 _____ (Intel Corporation) C:\Windows\SysWOW64\is-65PNH.tmp
  169. 2014-07-22 14:02 - 2014-07-22 14:03 - 05313041 _____ () C:\Users\PC\Downloads\com.appgame7.candyfrenzy-1.8.013-APK4Fun.com.apk
  170. 2014-07-21 14:40 - 2014-07-21 14:44 - 49304182 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3 (1).apk
  171. 2014-07-21 14:36 - 2014-07-21 14:40 - 38255660 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3.apk
  172. 2014-07-21 14:32 - 2014-07-21 14:34 - 00000000 ____D () C:\Users\PC\Downloads\Candy Crush Saga v1.32.0 [Apk] [Unlimited Lives & More]--[[ Sh@h ]]
  173. 2014-07-21 14:30 - 2014-07-21 14:30 - 00013521 _____ () C:\Users\PC\Downloads\[kickass.to]candy.crush.saga.v1.32.0.apk.unlimited.lives.more.sh.h.torrent
  174. 2014-07-18 23:59 - 2014-07-18 23:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
  175. 2014-07-18 23:34 - 2014-07-18 23:34 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
  176. 2014-07-18 23:33 - 2014-07-18 23:33 - 00000000 ____D () C:\Windows\WindowsMobile
  177. 2014-07-17 20:29 - 2014-07-17 20:30 - 06953268 _____ () C:\Users\PC\Downloads\Adobe Reader.apk
  178. 2014-07-17 15:21 - 2014-07-17 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
  179. 2014-07-17 11:08 - 2014-07-17 11:09 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  180.  
  181. ==================== One Month Modified Files and Folders =======
  182.  
  183. 2014-08-14 12:33 - 2014-08-14 12:33 - 00000000 ____D () C:\FRST
  184. 2014-08-14 12:20 - 2014-01-08 15:31 - 01120445 _____ () C:\Windows\WindowsUpdate.log
  185. 2014-08-14 12:02 - 2014-02-14 18:37 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  186. 2014-08-14 12:02 - 2014-02-14 18:36 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  187. 2014-08-14 10:36 - 2014-06-04 17:53 - 00000000 ____D () C:\Users\PC\AppData\Roaming\AIMP3
  188. 2014-08-14 10:32 - 2014-05-05 16:27 - 00000916 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2535440461-4119423919-2660906744-1000UA.job
  189. 2014-08-14 09:41 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  190. 2014-08-14 09:41 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  191. 2014-08-14 09:39 - 2014-01-09 19:23 - 00000000 ____D () C:\ProgramData\MFAData
  192. 2014-08-14 09:34 - 2014-03-15 11:36 - 00035725 _____ () C:\Windows\setupact.log
  193. 2014-08-14 09:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  194. 2014-08-13 23:35 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DMCache
  195. 2014-08-13 17:34 - 2014-03-15 11:36 - 00040760 _____ () C:\Windows\PFRO.log
  196. 2014-08-13 12:16 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\Downloads\Compressed
  197. 2014-08-13 12:16 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\AppData\Roaming\IDM
  198. 2014-08-12 17:52 - 2009-07-14 06:45 - 00276928 _____ () C:\Windows\system32\FNTCACHE.DAT
  199. 2014-08-12 15:18 - 2014-06-03 18:06 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Skype
  200. 2014-08-12 13:32 - 2014-01-09 17:31 - 00058400 _____ () C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
  201. 2014-08-12 13:31 - 2014-08-12 13:31 - 00001172 _____ () C:\Users\PC\Desktop\Testy Bplus.lnk
  202. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Grupa IMAGE
  203. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE
  204. 2014-08-12 13:31 - 2014-08-12 13:14 - 00000000 ____D () C:\Program Files (x86)\Grupa IMAGE
  205. 2014-08-10 16:32 - 2014-05-05 16:27 - 00000894 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2535440461-4119423919-2660906744-1000Core.job
  206. 2014-08-07 14:45 - 2014-04-30 16:16 - 00000000 ____D () C:\Users\PC\Desktop\Muzyka
  207. 2014-08-07 13:41 - 2014-08-05 13:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
  208. 2014-08-06 18:29 - 2014-03-31 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
  209. 2014-08-06 18:29 - 2014-01-09 19:26 - 00000995 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
  210. 2014-08-06 17:57 - 2014-08-06 17:57 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  211. 2014-08-06 17:57 - 2014-08-06 17:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  212. 2014-08-06 17:57 - 2014-08-06 17:57 - 00000000 ____D () C:\Windows\system32\Macromed
  213. 2014-08-06 12:52 - 2014-08-06 12:52 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  214. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  215. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  216. 2014-08-06 12:52 - 2014-08-06 12:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  217. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  218. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Java
  219. 2014-08-06 12:52 - 2014-04-05 22:47 - 00000000 ____D () C:\ProgramData\Oracle
  220. 2014-08-05 13:39 - 2014-08-05 13:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
  221. 2014-08-05 13:39 - 2014-08-05 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  222. 2014-08-05 13:39 - 2014-06-03 18:06 - 00000000 ____D () C:\ProgramData\Skype
  223. 2014-08-04 22:09 - 2014-02-10 20:01 - 00000000 ____D () C:\Users\PC\Desktop\Niemcy
  224. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
  225. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  226. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000000 ____D () C:\Program Files\CCleaner
  227. 2014-08-01 22:42 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  228. 2014-07-28 23:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
  229. 2014-07-28 15:41 - 2014-01-08 15:35 - 00000000 ____D () C:\Users\PC\AppData\Local\VirtualStore
  230. 2014-07-22 14:03 - 2014-07-22 14:02 - 05313041 _____ () C:\Users\PC\Downloads\com.appgame7.candyfrenzy-1.8.013-APK4Fun.com.apk
  231. 2014-07-21 20:04 - 2014-02-12 21:30 - 00000000 ____D () C:\Users\PC\AppData\Roaming\uTorrent
  232. 2014-07-21 14:44 - 2014-07-21 14:40 - 49304182 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3 (1).apk
  233. 2014-07-21 14:40 - 2014-07-21 14:36 - 38255660 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3.apk
  234. 2014-07-21 14:34 - 2014-07-21 14:32 - 00000000 ____D () C:\Users\PC\Downloads\Candy Crush Saga v1.32.0 [Apk] [Unlimited Lives & More]--[[ Sh@h ]]
  235. 2014-07-21 14:30 - 2014-07-21 14:30 - 00013521 _____ () C:\Users\PC\Downloads\[kickass.to]candy.crush.saga.v1.32.0.apk.unlimited.lives.more.sh.h.torrent
  236. 2014-07-20 22:16 - 2014-05-07 21:11 - 00000000 ____D () C:\Users\PC\AppData\Local\Microsoft Games
  237. 2014-07-19 13:19 - 2014-01-09 00:27 - 00740348 _____ () C:\Windows\system32\perfh015.dat
  238. 2014-07-19 13:19 - 2014-01-09 00:27 - 00155890 _____ () C:\Windows\system32\perfc015.dat
  239. 2014-07-19 13:19 - 2009-07-14 07:13 - 01669190 _____ () C:\Windows\system32\PerfStringBackup.INI
  240. 2014-07-18 23:59 - 2014-07-18 23:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
  241. 2014-07-18 23:34 - 2014-07-18 23:34 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
  242. 2014-07-18 23:33 - 2014-07-18 23:33 - 00000000 ____D () C:\Windows\WindowsMobile
  243. 2014-07-17 20:30 - 2014-07-17 20:29 - 06953268 _____ () C:\Users\PC\Downloads\Adobe Reader.apk
  244. 2014-07-17 15:21 - 2014-07-17 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
  245. 2014-07-17 15:21 - 2014-06-30 12:06 - 00000909 _____ () C:\Users\Public\Desktop\AIMP3.lnk
  246. 2014-07-17 15:21 - 2014-06-04 17:53 - 00000000 ____D () C:\Program Files (x86)\AIMP3
  247. 2014-07-17 11:09 - 2014-07-17 11:08 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  248. 2014-07-17 11:03 - 2014-07-14 15:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  249. 2014-07-16 15:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  250.  
  251. Files to move or delete:
  252. ====================
  253. C:\Users\PC\Windows_7_MouseFix_TextSize(DPI)=100%_Scale=1-to-1_@6-of-11.reg
  254.  
  255.  
  256. Some content of TEMP:
  257. ====================
  258. C:\Users\PC\AppData\Local\Temp\app.exe
  259. C:\Users\PC\AppData\Local\Temp\crypt.exe
  260. C:\Users\PC\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.15.exe
  261. C:\Users\PC\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
  262. C:\Users\PC\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
  263. C:\Users\PC\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
  264.  
  265.  
  266. ==================== Bamital & volsnap Check =================
  267.  
  268. C:\Windows\System32\winlogon.exe => File is digitally signed
  269. C:\Windows\System32\wininit.exe => File is digitally signed
  270. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  271. C:\Windows\explorer.exe => File is digitally signed
  272. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  273. C:\Windows\System32\svchost.exe => File is digitally signed
  274. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  275. C:\Windows\System32\services.exe => File is digitally signed
  276. C:\Windows\System32\User32.dll => File is digitally signed
  277. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  278. C:\Windows\System32\userinit.exe => File is digitally signed
  279. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  280. C:\Windows\System32\rpcss.dll => File is digitally signed
  281. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  282.  
  283.  
  284. LastRegBack: 2014-07-29 12:13
  285.  
  286. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!