API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 14th, 2014
309
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.58 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2014 01
  2. Ran by PC (administrator) on PC-KOMPUTER on 14-08-2014 17:00:38
  3. Running from C:\Users\PC\Downloads\Programs
  4. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
  5. Internet Explorer Version 11
  6. Boot Mode: Normal
  7.  
  8. The only official download link for FRST:
  9. Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
  10. Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
  11. Download link from any site other than Bleeping Computer is unpermitted or outdated.
  12. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  13.  
  14. ==================== Processes (Whitelisted) =================
  15.  
  16. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  17.  
  18. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
  19. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
  20. (AMD) C:\Windows\System32\atiesrxx.exe
  21. (AMD) C:\Windows\System32\atieclxx.exe
  22. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
  23. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
  24. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  25. (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  26. (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
  27. (Microsoft Corporation) C:\Windows\WindowsMobile\wmdcBase.exe
  28. (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
  29. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  30. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
  31. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  32. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  33. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  34. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
  35. (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
  36. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  37.  
  38.  
  39. ==================== Registry (Whitelisted) ==================
  40.  
  41. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  42.  
  43. HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdcBase.exe [660360 2007-05-31] (Microsoft Corporation)
  44. HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-07-10] (AVG Technologies CZ, s.r.o.)
  45. HKLM-x32\...\Run: [fst_pl_107] => [X]
  46. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  47. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
  48. HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-09] (Microsoft Corporation)
  49. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3587664 2013-05-31] (Tonec Inc.)
  50. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\PC\AppData\Local\Akamai\netsession_win.exe"
  51. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [Facebook Update] => C:\Users\PC\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-05-05] (Facebook Inc.)
  52. HKU\S-1-5-21-2535440461-4119423919-2660906744-1000\...\Run: [GoogleChromeAutoLaunch_73B90D4D0D4A45E4E1249D0D8EDB5EB0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)
  53. ShellIconOverlayIdentifiers: IDM Shell Extension -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll (Tonec Inc.)
  54.  
  55. ==================== Internet (Whitelisted) ====================
  56.  
  57. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  58.  
  59. StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
  60. BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  61. BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  62. BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  63. BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  64. BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  65. BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  66. Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  67. Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  68. Tcpip\Parameters: [DhcpNameServer] 95.160.170.92 88.156.222.92
  69.  
  70. FireFox:
  71. ========
  72. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  73. FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
  74. FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  75. FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  76. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  77. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  78. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  79. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  80. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  81. FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\PC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  82. FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  83. FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\PC\AppData\Roaming\IDM\idmmzcc5
  84. FF Extension: IDM CC - C:\Users\PC\AppData\Roaming\IDM\idmmzcc5 [2014-01-10]
  85.  
  86. Chrome:
  87. =======
  88. CHR HKLM-x32\...\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2013-06-01]
  89. CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
  90.  
  91. ==================== Services (Whitelisted) =================
  92.  
  93. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  94.  
  95. R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-07-10] (AVG Technologies CZ, s.r.o.)
  96. R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-07-10] (AVG Technologies CZ, s.r.o.)
  97. R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
  98. R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
  99.  
  100. ==================== Drivers (Whitelisted) ====================
  101.  
  102. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  103.  
  104. R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
  105. R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
  106. R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
  107. R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
  108. R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
  109. R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
  110. R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
  111. R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
  112. S3 OSFMount; C:\Program Files\OSFMount\OSFMount.sys [1299384 2014-02-07] (PassMark Software)
  113. S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [204568 2013-10-28] (DEVGURU Co., LTD.(www.devguru.co.kr))
  114. S3 WinRing0_1_2_0; C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [14544 2010-11-01] (OpenLibSys.org)
  115. S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
  116.  
  117. ==================== NetSvcs (Whitelisted) ===================
  118.  
  119. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  120.  
  121.  
  122. ==================== One Month Created Files and Folders ========
  123.  
  124. (If an entry is included in the fixlist, the file\folder will be moved.)
  125.  
  126. 2014-08-14 16:52 - 2014-08-14 16:57 - 00000000 ____D () C:\AdwCleaner
  127. 2014-08-14 16:52 - 2010-08-30 08:34 - 00021504 _____ () C:\Windows\SysWOW64\sqlite3.dll
  128. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000037 ___SH () C:\Users\PC\AppData\Local\70149b02515b3bb20dd492.47983420
  129. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000000 ____D () C:\Users\PC\AppData\Local\MetaGeek,_LLC
  130. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000000 ____D () C:\Users\PC\AppData\Local\IsolatedStorage
  131. 2014-08-14 13:48 - 2014-08-14 13:48 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
  132. 2014-08-14 13:48 - 2014-08-14 13:48 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
  133. 2014-08-14 13:47 - 2014-08-14 13:47 - 06082560 _____ () C:\Users\PC\Downloads\inSSIDerOffice.msi
  134. 2014-08-14 12:35 - 2014-08-14 12:36 - 00019640 _____ () C:\Users\PC\Desktop\Addition.txt
  135. 2014-08-14 12:33 - 2014-08-14 17:00 - 00000000 ____D () C:\FRST
  136. 2014-08-14 12:33 - 2014-08-14 12:36 - 00028685 _____ () C:\Users\PC\Desktop\FRST.txt
  137. 2014-08-12 13:31 - 2014-08-12 13:31 - 00001172 _____ () C:\Users\PC\Desktop\Testy Bplus.lnk
  138. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Grupa IMAGE
  139. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE
  140. 2014-08-12 13:14 - 2014-08-12 13:31 - 00000000 ____D () C:\Program Files (x86)\Grupa IMAGE
  141. 2014-08-06 17:57 - 2014-08-06 17:57 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  142. 2014-08-06 17:57 - 2014-08-06 17:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  143. 2014-08-06 17:57 - 2014-08-06 17:57 - 00000000 ____D () C:\Windows\system32\Macromed
  144. 2014-08-06 12:52 - 2014-08-06 12:52 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  145. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  146. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  147. 2014-08-06 12:52 - 2014-08-06 12:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  148. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  149. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Java
  150. 2014-08-05 13:39 - 2014-08-07 13:41 - 00000000 ___RD () C:\Program Files (x86)\Skype
  151. 2014-08-05 13:39 - 2014-08-05 13:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
  152. 2014-08-05 13:39 - 2014-08-05 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  153. 2014-08-02 19:23 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
  154. 2014-08-02 19:23 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
  155. 2014-08-02 19:23 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
  156. 2014-08-02 19:23 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
  157. 2014-08-02 19:23 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
  158. 2014-08-02 19:23 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
  159. 2014-08-02 19:23 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
  160. 2014-08-02 19:23 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
  161. 2014-08-02 19:23 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
  162. 2014-08-02 19:23 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
  163. 2014-08-02 19:23 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
  164. 2014-08-02 19:23 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
  165. 2014-08-02 19:23 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
  166. 2014-08-02 19:23 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
  167. 2014-07-28 15:25 - 2002-06-06 14:38 - 00139264 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\eax.dll
  168. 2014-07-28 15:25 - 1999-05-17 15:12 - 00755200 _____ (Intel Corporation) C:\Windows\SysWOW64\is-65PNH.tmp
  169. 2014-07-22 14:02 - 2014-07-22 14:03 - 05313041 _____ () C:\Users\PC\Downloads\com.appgame7.candyfrenzy-1.8.013-APK4Fun.com.apk
  170. 2014-07-21 14:40 - 2014-07-21 14:44 - 49304182 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3 (1).apk
  171. 2014-07-21 14:36 - 2014-07-21 14:40 - 38255660 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3.apk
  172. 2014-07-18 23:59 - 2014-07-18 23:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
  173. 2014-07-18 23:34 - 2014-07-18 23:34 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
  174. 2014-07-18 23:33 - 2014-07-18 23:33 - 00000000 ____D () C:\Windows\WindowsMobile
  175. 2014-07-17 20:29 - 2014-07-17 20:30 - 06953268 _____ () C:\Users\PC\Downloads\Adobe Reader.apk
  176. 2014-07-17 15:21 - 2014-07-17 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
  177. 2014-07-17 11:08 - 2014-07-17 11:09 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  178.  
  179. ==================== One Month Modified Files and Folders =======
  180.  
  181. (If an entry is included in the fixlist, the file\folder will be moved.)
  182.  
  183. 2014-08-14 17:00 - 2014-08-14 12:33 - 00000000 ____D () C:\FRST
  184. 2014-08-14 16:58 - 2014-03-15 11:36 - 00041324 _____ () C:\Windows\PFRO.log
  185. 2014-08-14 16:58 - 2014-03-15 11:36 - 00035781 _____ () C:\Windows\setupact.log
  186. 2014-08-14 16:58 - 2014-02-14 18:36 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  187. 2014-08-14 16:58 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  188. 2014-08-14 16:57 - 2014-08-14 16:52 - 00000000 ____D () C:\AdwCleaner
  189. 2014-08-14 16:57 - 2014-01-08 15:31 - 01126677 _____ () C:\Windows\WindowsUpdate.log
  190. 2014-08-14 16:56 - 2014-01-08 15:35 - 00001178 _____ () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  191. 2014-08-14 16:56 - 2014-01-08 15:35 - 00000000 ____D () C:\Users\PC
  192. 2014-08-14 16:46 - 2014-05-05 16:27 - 00000916 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2535440461-4119423919-2660906744-1000UA.job
  193. 2014-08-14 16:46 - 2014-05-05 16:27 - 00000894 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2535440461-4119423919-2660906744-1000Core.job
  194. 2014-08-14 16:02 - 2014-02-14 18:37 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  195. 2014-08-14 15:42 - 2014-06-04 17:53 - 00000000 ____D () C:\Users\PC\AppData\Roaming\AIMP3
  196. 2014-08-14 14:26 - 2014-06-03 18:06 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Skype
  197. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000037 ___SH () C:\Users\PC\AppData\Local\70149b02515b3bb20dd492.47983420
  198. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000000 ____D () C:\Users\PC\AppData\Local\MetaGeek,_LLC
  199. 2014-08-14 13:49 - 2014-08-14 13:49 - 00000000 ____D () C:\Users\PC\AppData\Local\IsolatedStorage
  200. 2014-08-14 13:48 - 2014-08-14 13:48 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
  201. 2014-08-14 13:48 - 2014-08-14 13:48 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
  202. 2014-08-14 13:47 - 2014-08-14 13:47 - 06082560 _____ () C:\Users\PC\Downloads\inSSIDerOffice.msi
  203. 2014-08-14 12:36 - 2014-08-14 12:35 - 00019640 _____ () C:\Users\PC\Desktop\Addition.txt
  204. 2014-08-14 12:36 - 2014-08-14 12:33 - 00028685 _____ () C:\Users\PC\Desktop\FRST.txt
  205. 2014-08-14 09:41 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  206. 2014-08-14 09:41 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  207. 2014-08-14 09:39 - 2014-01-09 19:23 - 00000000 ____D () C:\ProgramData\MFAData
  208. 2014-08-13 23:35 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DMCache
  209. 2014-08-13 12:16 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\Downloads\Compressed
  210. 2014-08-13 12:16 - 2014-01-09 18:11 - 00000000 ____D () C:\Users\PC\AppData\Roaming\IDM
  211. 2014-08-12 17:52 - 2009-07-14 06:45 - 00276928 _____ () C:\Windows\system32\FNTCACHE.DAT
  212. 2014-08-12 13:32 - 2014-01-09 17:31 - 00058400 _____ () C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
  213. 2014-08-12 13:31 - 2014-08-12 13:31 - 00001172 _____ () C:\Users\PC\Desktop\Testy Bplus.lnk
  214. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Grupa IMAGE
  215. 2014-08-12 13:31 - 2014-08-12 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grupa IMAGE
  216. 2014-08-12 13:31 - 2014-08-12 13:14 - 00000000 ____D () C:\Program Files (x86)\Grupa IMAGE
  217. 2014-08-07 14:45 - 2014-04-30 16:16 - 00000000 ____D () C:\Users\PC\Desktop\Muzyka
  218. 2014-08-07 13:41 - 2014-08-05 13:39 - 00000000 ___RD () C:\Program Files (x86)\Skype
  219. 2014-08-06 18:29 - 2014-03-31 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
  220. 2014-08-06 18:29 - 2014-01-09 19:26 - 00000995 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
  221. 2014-08-06 17:57 - 2014-08-06 17:57 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  222. 2014-08-06 17:57 - 2014-08-06 17:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  223. 2014-08-06 17:57 - 2014-08-06 17:57 - 00000000 ____D () C:\Windows\system32\Macromed
  224. 2014-08-06 12:52 - 2014-08-06 12:52 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
  225. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
  226. 2014-08-06 12:52 - 2014-08-06 12:52 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
  227. 2014-08-06 12:52 - 2014-08-06 12:52 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
  228. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  229. 2014-08-06 12:52 - 2014-08-06 12:52 - 00000000 ____D () C:\Program Files (x86)\Java
  230. 2014-08-06 12:52 - 2014-04-05 22:47 - 00000000 ____D () C:\ProgramData\Oracle
  231. 2014-08-05 13:39 - 2014-08-05 13:39 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
  232. 2014-08-05 13:39 - 2014-08-05 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  233. 2014-08-05 13:39 - 2014-06-03 18:06 - 00000000 ____D () C:\ProgramData\Skype
  234. 2014-08-04 22:09 - 2014-02-10 20:01 - 00000000 ____D () C:\Users\PC\Desktop\Niemcy
  235. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
  236. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  237. 2014-08-02 20:34 - 2014-03-14 16:12 - 00000000 ____D () C:\Program Files\CCleaner
  238. 2014-08-01 22:42 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  239. 2014-07-28 23:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
  240. 2014-07-28 15:41 - 2014-01-08 15:35 - 00000000 ____D () C:\Users\PC\AppData\Local\VirtualStore
  241. 2014-07-22 14:03 - 2014-07-22 14:02 - 05313041 _____ () C:\Users\PC\Downloads\com.appgame7.candyfrenzy-1.8.013-APK4Fun.com.apk
  242. 2014-07-21 20:04 - 2014-02-12 21:30 - 00000000 ____D () C:\Users\PC\AppData\Roaming\uTorrent
  243. 2014-07-21 14:44 - 2014-07-21 14:40 - 49304182 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3 (1).apk
  244. 2014-07-21 14:40 - 2014-07-21 14:36 - 38255660 _____ () C:\Users\PC\Downloads\CCS 1.34.1 v3.apk
  245. 2014-07-20 22:16 - 2014-05-07 21:11 - 00000000 ____D () C:\Users\PC\AppData\Local\Microsoft Games
  246. 2014-07-19 13:19 - 2014-01-09 00:27 - 00740348 _____ () C:\Windows\system32\perfh015.dat
  247. 2014-07-19 13:19 - 2014-01-09 00:27 - 00155890 _____ () C:\Windows\system32\perfc015.dat
  248. 2014-07-19 13:19 - 2009-07-14 07:13 - 01669190 _____ () C:\Windows\system32\PerfStringBackup.INI
  249. 2014-07-18 23:59 - 2014-07-18 23:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
  250. 2014-07-18 23:34 - 2014-07-18 23:34 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
  251. 2014-07-18 23:33 - 2014-07-18 23:33 - 00000000 ____D () C:\Windows\WindowsMobile
  252. 2014-07-17 20:30 - 2014-07-17 20:29 - 06953268 _____ () C:\Users\PC\Downloads\Adobe Reader.apk
  253. 2014-07-17 15:21 - 2014-07-17 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
  254. 2014-07-17 15:21 - 2014-06-30 12:06 - 00000909 _____ () C:\Users\Public\Desktop\AIMP3.lnk
  255. 2014-07-17 15:21 - 2014-06-04 17:53 - 00000000 ____D () C:\Program Files (x86)\AIMP3
  256. 2014-07-17 11:09 - 2014-07-17 11:08 - 00004489 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
  257. 2014-07-17 11:03 - 2014-07-14 15:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  258. 2014-07-16 15:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  259.  
  260. Files to move or delete:
  261. ====================
  262. C:\Users\PC\Windows_7_MouseFix_TextSize(DPI)=100%_Scale=1-to-1_@6-of-11.reg
  263.  
  264.  
  265. Some content of TEMP:
  266. ====================
  267. C:\Users\PC\AppData\Local\Temp\app.exe
  268. C:\Users\PC\AppData\Local\Temp\crypt.exe
  269. C:\Users\PC\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.15.exe
  270. C:\Users\PC\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
  271. C:\Users\PC\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
  272. C:\Users\PC\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
  273. C:\Users\PC\AppData\Local\Temp\Quarantine.exe
  274.  
  275.  
  276. ==================== Bamital & volsnap Check =================
  277.  
  278. (There is no automatic fix for files that do not pass verification.)
  279.  
  280. C:\Windows\System32\winlogon.exe => File is digitally signed
  281. C:\Windows\System32\wininit.exe => File is digitally signed
  282. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  283. C:\Windows\explorer.exe => File is digitally signed
  284. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  285. C:\Windows\System32\svchost.exe => File is digitally signed
  286. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  287. C:\Windows\System32\services.exe => File is digitally signed
  288. C:\Windows\System32\User32.dll => File is digitally signed
  289. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  290. C:\Windows\System32\userinit.exe => File is digitally signed
  291. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  292. C:\Windows\System32\rpcss.dll => File is digitally signed
  293. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  294.  
  295.  
  296. LastRegBack: 2014-07-29 12:13
  297.  
  298. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!