I'm so sorry, I've forgotten about the Farbar scan reports: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-01-2015 03 Ran by Monika (administrator) on KOMPUTER-MONIKI on 04-01-2015 12:34:17 Running from C:\Users\Monika\Downloads Loaded Profile: Monika (Available profiles: Monika) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Waterfox) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe () C:\Program Files (x86)\IDriveWindows\idwservice_600.exe () C:\Program Files (x86)\IDriveWindows\idwadminsrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE ( ) C:\Program Files (x86)\IDriveWindows\idw_web.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Flux Software LLC) C:\Users\Monika\AppData\Local\FluxSoftware\Flux\flux.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Spotify Ltd) C:\Users\Monika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Dropbox, Inc.) C:\Users\Monika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Waterfox) C:\Program Files\Waterfox\waterfox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation) HKLM\...\Run: [shadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-11-25] (AVAST Software) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Run: [F.lux] => C:\Users\Monika\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC) HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-04-23] (Samsung) HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Run: [spotify Web Helper] => C:\Users\Monika\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-11-25] (Spotify Ltd) HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.) Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll Startup: C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Monika\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => proxy.aster.pl:8080 ProxyServer: [s-1-5-21-2195184045-3265951034-2981680463-1000] => proxy.aster.pl:8080 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.msn.com/?ocid=U219DHP&pc=U219 SearchScopes: HKLM-x32 -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN SearchScopes: HKU\S-1-5-21-2195184045-3265951034-2981680463-1000 -> DefaultScope {C174DA37-93FA-4947-A6F4-4B9A20BC7227} URL = http://www.bing.com/search?FORM=U219DF&PC=U219&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2195184045-3265951034-2981680463-1000 -> D124FE8770C7431D84C2ED613D1E2E6C URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-2195184045-3265951034-2981680463-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2195184045-3265951034-2981680463-1000 -> {C174DA37-93FA-4947-A6F4-4B9A20BC7227} URL = http://www.bing.com/search?FORM=U219DF&PC=U219&q={searchTerms}&src=IE-SearchBox BHO: No Name -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> No File BHO: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) BHO: avast! Ad Blocker -> {FFCB3198-32F3-4E8B-9539-4324694ED663} -> C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: QUICKfind BHO Object -> {C08DF07A-3E49-4E25-9AB0-D3882835F153} -> C:\Program Files (x86)\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM) BHO-x32: avast! Ad Blocker -> {FFCB3198-32F3-4E8B-9539-4324694ED663} -> C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {72376E32-8AF2-473F-BE32-E5D0F39C865D} http://www.cyberlink.com/prog/win7/js/UpdateAdvisor.cab DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63 FireFox: ======== FF ProfilePath: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default FF DefaultSearchEngine: Google PL FF Homepage: hxxp://www.pah.org.pl/nasze-dzialania/8/pajacyk|hxxp://www.pmiska.pl/ FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1214154.dll (Adobe Systems, Inc.) FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll (Cuminas Corporation) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2195184045-3265951034-2981680463-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll (Tracker Software Products (Canada) Ltd.) FF user.js: detected! => C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin8.dll (Apple Inc.) FF SearchPlugin: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\searchplugins\canoonet.xml FF SearchPlugin: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\searchplugins\de-en-beolingus.xml FF SearchPlugin: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\searchplugins\lyricwiki-en.xml FF SearchPlugin: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml FF Extension: British English Dictionary - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\en-GB@dictionaries.addons.mozilla.org [2014-04-04] FF Extension: Polski slownik poprawnej pisowni - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\pl@dictionaries.addons.mozilla.org [2014-04-04] FF Extension: WOT - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-04-04] FF Extension: Distill Web Monitor (formerly AlertBox) - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\alertbox@ajitk.com.xpi [2014-04-04] FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-04-04] FF Extension: Firefox Old Version Update Hotfix - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-07-16] FF Extension: ZenMate Security & Privacy VPN - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\firefox@zenmate.com.xpi [2014-10-20] FF Extension: Polski Language Pack - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\langpack-pl@firefox.mozilla.org.xpi [2014-10-16] FF Extension: Media Hint - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\mediahint@jetpack.xpi [2014-06-01] FF Extension: Readability - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\readability@readability.com.xpi [2014-04-04] FF Extension: Send to Kindle for Mozilla Firefox - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\sendtokindle@amazon.com.xpi [2014-09-09] FF Extension: Send Tab URLs - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{4aebcd37-f454-4928-9233-174a026ed367}.xpi [2014-04-04] FF Extension: LeechBlock - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2014-04-04] FF Extension: StumbleUpon - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}.xpi [2014-04-04] FF Extension: Adblock Plus - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-04] FF Extension: BetterPrivacy - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\flnmcjah.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-04-04] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-06-15] FF HKLM\...\Firefox\Extensions: [gacela2@nurago.com] - [iNSTALLDIR] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-03] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-25] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-25] (AVAST Software) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-11-25] (Avast Software) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation) R2 IDriveService; C:\Program Files (x86)\IDriveWindows\idwservice_600.exe [182872 2013-10-17] () R2 IDWAdmin; C:\Program Files (x86)\IDriveWindows\idwadminsrv.exe [125528 2013-10-17] () R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation) S4 Rezip; C:\windows\SysWOW64\Rezip.exe [311296 2009-03-05] () [File not signed] S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2011-06-27] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-25] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-25] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-25] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-25] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-25] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-25] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-25] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-25] () S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [867824 2011-05-29] () [File not signed] R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [118888 2009-03-02] (Rocket Division Software) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [12728 2009-09-29] () R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-11-25] (Avast Software) R2 {BD1B5EAC-B420-4d68-9AE4-DB601535D138}; C:\Program Files (x86)\CyberLink\PowerProducer\BDSDK\000.fcl [146928 2010-07-30] (CyberLink Corp.) S3 dgderdrv; System32\drivers\dgderdrv.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-04 12:34 - 2015-01-04 12:35 - 00022930 _____ () C:\Users\Monika\Downloads\FRST.txt 2015-01-04 12:34 - 2015-01-04 12:34 - 00000000 ____D () C:\FRST 2015-01-04 12:33 - 2015-01-04 12:33 - 02123776 _____ (Farbar) C:\Users\Monika\Downloads\FRST64.exe 2015-01-04 12:17 - 2015-01-04 12:17 - 00006437 _____ () C:\Users\Monika\Desktop\report.txt 2015-01-04 11:43 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2015-01-04 11:43 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe 2015-01-03 13:30 - 2015-01-03 13:30 - 00000000 __SHD () C:\Users\Monika\AppData\Local\EmieUserList 2015-01-03 13:30 - 2015-01-03 13:30 - 00000000 __SHD () C:\Users\Monika\AppData\Local\EmieSiteList 2015-01-03 13:30 - 2015-01-03 13:30 - 00000000 __SHD () C:\Users\Monika\AppData\Local\EmieBrowserModeList 2015-01-03 12:25 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2015-01-03 12:11 - 2015-01-03 12:11 - 00003886 _____ () C:\windows\System32\Tasks\Adobe Acrobat Update Task 2015-01-03 12:00 - 2015-01-03 12:00 - 00000574 _____ () C:\windows\PFRO.log 2015-01-03 02:33 - 2015-01-03 02:33 - 00000000 _____ () C:\windows\SysWOW64\sho638.tmp 2015-01-03 02:15 - 2015-01-03 02:15 - 19749376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 12836864 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2015-01-03 02:15 - 2015-01-03 02:15 - 02277888 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 02052096 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2015-01-03 02:15 - 2015-01-03 02:15 - 01888256 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 01307136 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00688640 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat 2015-01-03 02:15 - 2015-01-03 02:15 - 00501248 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00342200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec 2015-01-03 02:15 - 2015-01-03 02:15 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe 2015-01-03 02:15 - 2015-01-03 02:15 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe 2015-01-03 02:15 - 2015-01-03 02:15 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2015-01-03 02:15 - 2015-01-03 02:15 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx 2015-01-03 02:15 - 2015-01-03 02:15 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2015-01-03 02:15 - 2015-01-03 02:15 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 25059840 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 14412800 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 06039552 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 04299264 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 02885120 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2015-01-03 02:14 - 2015-01-03 02:14 - 02358272 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 02125312 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2015-01-03 02:14 - 2015-01-03 02:14 - 01548288 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00718848 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat 2015-01-03 02:14 - 2015-01-03 02:14 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00580096 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec 2015-01-03 02:14 - 2015-01-03 02:14 - 00389296 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx 2015-01-03 02:14 - 2015-01-03 02:14 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll 2015-01-03 02:14 - 2015-01-03 02:14 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe 2015-01-03 02:14 - 2015-01-03 02:14 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2015-01-03 02:12 - 2015-01-03 02:19 - 00010152 _____ () C:\windows\IE11_main.log 2015-01-02 12:59 - 2015-01-04 12:21 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2015-01-02 12:59 - 2015-01-02 12:59 - 00701616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2015-01-02 12:59 - 2015-01-02 12:59 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-01-02 12:59 - 2015-01-02 12:59 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2015-01-02 01:08 - 2015-01-04 02:02 - 00001680 _____ () C:\windows\setupact.log 2015-01-02 01:08 - 2015-01-02 01:08 - 00000000 _____ () C:\windows\setuperr.log 2014-12-21 20:19 - 2014-12-21 20:19 - 00859456 _____ (repkasoft) C:\windows\yowindow.scr 2014-12-20 18:12 - 2014-12-20 18:13 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.2 2014-12-20 18:12 - 2014-12-20 18:12 - 00001476 _____ () C:\Users\Public\Desktop\LibreOffice 4.2.lnk 2014-12-18 22:12 - 2014-12-18 22:12 - 00002212 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Digital Editions 4.0.lnk 2014-12-18 22:12 - 2014-12-18 22:12 - 00002200 _____ () C:\Users\Public\Desktop\Adobe Digital Editions 4.0.lnk 2014-12-18 22:12 - 2014-12-18 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe 2014-12-18 19:33 - 2014-12-18 19:33 - 03151534 _____ () C:\Users\Monika\Downloads\Genialna_przyjacika.mobi 2014-12-17 22:31 - 2014-12-17 22:31 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\.ePUBee 2014-12-17 22:30 - 2014-12-19 18:25 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\decrypt 2014-12-17 22:30 - 2014-12-17 22:30 - 00001195 _____ () C:\Users\Public\Desktop\ePUBee DRM Removal.lnk 2014-12-17 22:30 - 2014-12-17 22:30 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\ePUBeedrmremoval 2014-12-17 22:30 - 2014-12-17 22:30 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\.ePUBeedrmremoval 2014-12-17 22:30 - 2014-12-17 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ePUBee 2014-12-17 22:30 - 2014-12-17 22:30 - 00000000 ____D () C:\Program Files (x86)\ePUBee 2014-12-17 22:13 - 2014-12-17 22:13 - 00000000 ____D () C:\ProgramData\Azwsoft 2014-12-17 22:11 - 2014-12-17 22:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AzwSoft 2014-12-17 21:43 - 2014-12-17 21:43 - 00000000 ____D () C:\Users\Monika\Downloads\tools_v6.0.9 2014-12-16 20:45 - 2014-11-22 11:46 - 00038032 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys 2014-12-16 20:45 - 2014-11-22 11:46 - 00032400 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll 2014-12-15 03:23 - 2014-12-15 03:23 - 00008754 _____ () C:\Users\Monika\Documents\cc_20141215_032259.reg 2014-12-13 21:25 - 2014-12-13 21:25 - 00002231 _____ () C:\Users\Monika\Desktop\Oxford Collocations Dictionary.lnk 2014-12-12 23:26 - 2014-12-12 23:30 - 00000000 ____D () C:\Users\Monika\Documents\Uriah Heep 2014-12-12 10:43 - 2014-12-12 10:43 - 00000197 _____ () C:\windows\system32\2014-12-12-09-43-55.058-AvastVBoxSVC.exe-3584.log 2014-12-12 02:41 - 2014-12-12 02:41 - 00000000 _____ () C:\windows\SysWOW64\sho4648.tmp 2014-12-12 02:40 - 2014-12-12 02:40 - 00000000 ____D () C:\windows\system32\appraiser 2014-12-11 21:58 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\windows\system32\mf.dll 2014-12-11 21:58 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\windows\SysWOW64\mf.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-12-11 21:55 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll 2014-12-11 21:55 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-12-11 21:55 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\windows\system32\aitstatic.exe 2014-12-11 21:55 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll 2014-12-11 21:55 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll 2014-12-11 21:55 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys 2014-12-11 21:55 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\windows\system32\charmap.exe 2014-12-11 21:55 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\windows\SysWOW64\charmap.exe 2014-12-11 21:53 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\windows\system32\WsmSvc.dll 2014-12-11 21:53 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\windows\system32\WSManMigrationPlugin.dll 2014-12-11 21:53 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\windows\system32\WsmWmiPl.dll 2014-12-11 21:53 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\windows\system32\WsmAuto.dll 2014-12-11 21:53 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\windows\system32\WSManHTTPConfig.exe 2014-12-11 21:53 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmSvc.dll 2014-12-11 21:53 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-11 21:53 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmWmiPl.dll 2014-12-11 21:53 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\windows\SysWOW64\WsmAuto.dll 2014-12-11 21:53 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSManHTTPConfig.exe 2014-12-11 21:52 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2014-12-11 21:52 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2014-12-11 21:42 - 2014-12-11 21:42 - 00000197 _____ () C:\windows\system32\2014-12-11-20-42-47.047-AvastVBoxSVC.exe-2604.log 2014-12-11 11:48 - 2014-12-11 11:48 - 00000197 _____ () C:\windows\system32\2014-12-11-10-48-36.075-AvastVBoxSVC.exe-4832.log ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-04 12:34 - 2013-06-25 16:06 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Skype 2015-01-04 12:31 - 2012-07-04 19:01 - 00004182 _____ () C:\windows\System32\Tasks\avast! Emergency Update 2015-01-04 12:13 - 2014-09-11 13:19 - 00129752 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-04 12:08 - 2009-07-14 05:45 - 00022976 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-04 12:08 - 2009-07-14 05:45 - 00022976 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-04 11:48 - 2010-03-06 20:04 - 01809676 _____ () C:\windows\WindowsUpdate.log 2015-01-04 00:24 - 2012-11-18 00:37 - 00000000 ____D () C:\Users\Monika\Documents\hab 2015-01-03 23:34 - 2010-10-10 23:45 - 00000000 ____D () C:\Users\Monika\Documents\PEDAGOGI 2015-01-03 23:12 - 2014-02-12 01:04 - 00000000 ____D () C:\Program Files\Complainterator2308 2015-01-03 22:03 - 2013-10-20 18:01 - 00000000 ____D () C:\Users\Monika\AppData\Local\IDrive 2015-01-03 22:00 - 2013-10-20 18:01 - 00000000 ____D () C:\Program Files (x86)\IDriveWindows 2015-01-03 17:21 - 2014-11-21 23:43 - 00000000 ___RD () C:\Users\Monika\Dropbox 2015-01-03 17:21 - 2014-11-21 23:41 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Dropbox 2015-01-03 17:17 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2015-01-03 14:31 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache 2015-01-03 12:09 - 2013-11-18 15:33 - 00001425 _____ () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-01-03 02:32 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions 2015-01-02 12:59 - 2014-08-14 15:20 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe 2015-01-02 01:42 - 2014-01-16 22:17 - 00000000 ____D () C:\Program Files\Sweet Home 3D 2015-01-02 00:50 - 2011-04-05 22:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia 2015-01-02 00:50 - 2011-04-05 22:05 - 00000000 ____D () C:\Program Files (x86)\Nokia 2015-01-01 23:51 - 2014-08-24 10:03 - 00001122 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-01-01 23:51 - 2014-08-24 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-01-01 23:51 - 2014-08-24 10:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-01-01 23:50 - 2010-06-05 15:27 - 00003148 _____ () C:\Users\Monika\Documents\kopia rejestru.reg 2014-12-31 00:55 - 2010-09-27 23:00 - 00000000 ____D () C:\Users\Monika\AppData\Local\CrashDumps 2014-12-30 12:10 - 2010-06-06 14:13 - 00000000 ____D () C:\Users\Monika\Documents\Kuchnia pełna niespodzianek 2014-12-29 22:38 - 2010-05-29 20:03 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-12-29 22:38 - 2010-05-29 20:03 - 00000000 ____D () C:\ProgramData\Skype 2014-12-29 22:25 - 2014-11-11 23:31 - 00000000 ____D () C:\Program Files\Waterfox 2014-12-29 22:25 - 2009-07-14 05:45 - 00427672 _____ () C:\windows\system32\FNTCACHE.DAT 2014-12-22 01:23 - 2010-05-27 19:02 - 00112656 _____ () C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-21 11:33 - 2014-11-21 23:43 - 00001027 _____ () C:\Users\Monika\Desktop\Dropbox.lnk 2014-12-21 11:33 - 2014-11-21 23:42 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-12-21 01:57 - 2010-06-06 15:24 - 00000000 ____D () C:\Program Files\Release_1.7.8.1 (true version) 2014-12-21 01:56 - 2013-02-26 00:05 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\tixati 2014-12-20 18:13 - 2014-02-21 13:00 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4 2014-12-19 17:21 - 2013-11-16 21:13 - 00000000 ____D () C:\Users\Monika\Documents\My Digital Editions 2014-12-19 17:21 - 2010-06-07 19:47 - 00000000 ____D () C:\Users\Monika\Biblioteka calibre 2014-12-19 17:20 - 2010-05-27 18:50 - 00000000 ____D () C:\Users\Monika 2014-12-19 01:16 - 2013-02-13 11:26 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Spotify 2014-12-19 01:15 - 2013-02-13 11:26 - 00000000 ____D () C:\Users\Monika\AppData\Local\Spotify 2014-12-18 22:23 - 2010-03-06 20:46 - 00795578 _____ () C:\windows\system32\perfh015.dat 2014-12-18 22:23 - 2010-03-06 20:46 - 00183348 _____ () C:\windows\system32\perfc015.dat 2014-12-18 22:23 - 2009-07-14 06:13 - 01819870 _____ () C:\windows\system32\PerfStringBackup.INI 2014-12-18 22:12 - 2010-05-27 18:53 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-12-17 22:43 - 2013-04-18 11:10 - 00000000 ____D () C:\Users\Monika\Documents\My Publications 2014-12-17 22:40 - 2010-05-27 20:18 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Adobe 2014-12-17 22:39 - 2013-11-16 21:14 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe_Systems_Incorporate 2014-12-17 21:33 - 2013-04-18 17:21 - 00000890 _____ () C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk 2014-12-17 21:33 - 2013-04-18 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management 2014-12-17 21:33 - 2013-04-18 17:20 - 00000000 ____D () C:\Program Files\Calibre2 2014-12-14 01:58 - 2010-05-30 10:23 - 00013030 _____ () C:\Users\Monika\AppData\Roaming\PDOXUSRS.NET 2014-12-13 01:12 - 2014-06-02 18:59 - 01715224 _____ (NVIDIA Corporation) C:\windows\system32\nvspbridge64.dll 2014-12-13 01:12 - 2014-06-02 18:59 - 01291464 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspbridge.dll 2014-12-13 01:12 - 2013-10-28 22:32 - 02824504 _____ (NVIDIA Corporation) C:\windows\system32\nvspcap64.dll 2014-12-13 01:12 - 2013-10-28 22:32 - 02210040 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvspcap.dll 2014-12-12 02:40 - 2014-04-24 23:44 - 00000000 ___SD () C:\windows\system32\CompatTel 2014-12-12 02:40 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\AppCompat 2014-12-11 22:07 - 2013-07-19 23:47 - 00000000 ____D () C:\windows\system32\MRT 2014-12-11 21:58 - 2010-05-29 06:41 - 112710672 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-12-11 21:30 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF 2014-12-11 14:03 - 2010-06-16 20:02 - 00000000 ____D () C:\windows\SysWOW64\Adobe 2014-12-11 11:53 - 2014-10-10 18:32 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-12-11 11:44 - 2013-10-09 20:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-12-10 18:46 - 2014-12-03 11:33 - 00008704 _____ () C:\Users\Monika\Documents\Contributor contact details.xls Some content of TEMP: ==================== C:\Users\Monika\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpi4bq4b.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-30 11:33 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-01-2015 03 Ran by Monika at 2015-01-04 12:36:44 Running from C:\Users\Monika\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.2 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.4.154 - Adobe Systems, Inc.) Akamai NetSession Interface (HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Aktualizacje NVIDIA 16.18.9 (Version: 16.18.9 - NVIDIA Corporation) Hidden Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Astro123 v1.62 (HKLM-x32\...\Astro123_is1) (Version: - Allen Edwall/AstroWin) AstroWin v3.67 (HKLM-x32\...\AstroWin_is1) (Version: - Allen Edwall/AstroWin) Atheros Client Installation Program (HKLM-x32\...\{D1434266-0486-4469-B338-A60082CC04E1}) (Version: 1.0.2.1119 - Atheros) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software) avast! Ad Blocker (HKLM-x32\...\{021C6667-63D3-4416-B537-865E77F4DF4F}) (Version: 1.0.0.0 - AVAST Software) Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.6.7716 - ) BatteryLifeExtender (HKLM-x32\...\{853F8A41-A3C9-43FA-87FA-1AE74FC6F3F7}) (Version: 1.0.1 - Samsung) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{EB3D23E3-91A7-46A0-9D7F-698151973A41}) (Version: 2.12.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 3.00 - Piriform) CD Recovery Toolbox Free 2.1 (HKLM-x32\...\CD Recovery Toolbox Free_is1) (Version: - Recovery Toolbox, Inc.) ChargeableUSB (HKLM-x32\...\{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}) (Version: 1.0.0.0 - SAMSUNG) CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2806 - CyberLink Corp.) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1916 - CyberLink Corp.) CyberLink PhotoDirector 4 (HKLM-x32\...\InstallShield_{44510C84-AE2A-4079-A75B-D44E68D73B9A}) (Version: 4.0.4317.0 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3108a - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3213 - CyberLink Corp.) CyberLink PowerDVD 8 (HKLM-x32\...\InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}) (Version: 8.0.2815b - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.3625 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Document Express DjVu Plug-in (HKLM-x32\...\{CC83DD3A-5989-4C4E-986B-46B302D0B719}) (Version: 6.1.33592 - Cuminas Corporation) Dropbox (HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink) DVDStyler v2.3 beta 1 (HKLM-x32\...\DVDStyler_is1) (Version: - ) Easy Display Manager (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.0 - Samsung Electronics Co., Ltd.) Easy Network Manager (HKLM-x32\...\{34B76DCB-BF7C-440F-B058-C84172C1E338}) (Version: 4.2.8 - Samsung) Easy SpeedUp Manager (HKLM-x32\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 3.0.0.5 - Samsung Electronics Co.,Ltd.) EasyBatteryManager (HKLM-x32\...\{178EE5F4-0F86-4BF0-A0D1-9790AFF409D1}) (Version: 4.0.0.3 - Samsung) e-Deklaracje Desktop (HKLM-x32\...\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1) (Version: 6.0.1 - Ministerstwo Finansow) e-Deklaracje Desktop (x32 Version: 6.0.1 - Ministerstwo Finansow) Hidden e-Kiosk Reader 1.0.61 (HKLM-x32\...\e-Kiosk Reader) (Version: 1.0.61 - e-Kiosk S.A.) ePUBee DRM Removal (HKLM-x32\...\ePUBee DRM Removal) (Version: 3.1.5.1 - ePUBee Inc.) f.lux (HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\Flux) (Version: - ) focus booster (HKLM-x32\...\com.focusboosterapp.focusbooster.air) (Version: 1.3.2 - UNKNOWN) focus booster (x32 Version: 1.3.2 - UNKNOWN) Hidden Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory) Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden GoToMeeting 4.5.0.457 (HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\GoToMeeting) (Version: - ) IDrive Version - 6.0 (HKLM-x32\...\IDrive_is1) (Version: 6.0 - Pro Softnet Corp) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!) Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.3.1001 - Intel Corporation) Intel® Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation) Intel® Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.3 - Intel) Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation) Jpg2Pdf version 1.2 (HKLM-x32\...\{533D415A-4151-4AC5-858E-4068524C8051}_is1) (Version: 1.2 - Office Necessities inc.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 9.1.4 (64-bit) (HKLM\...\KLiteCodecPack64_is1) (Version: 9.1.4 - ) K-Lite Codec Pack 9.1.4 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.1.4 - ) LAME v3.98.2 for Audacity (HKLM-x32\...\LAME for Audacity_is1) (Version: - ) LibreOffice 4.2 Help Pack (Polish) (HKLM-x32\...\{CF063EE8-B452-4325-AB61-F1689DA6B639}) (Version: 4.2.8.2 - The Document Foundation) LibreOffice 4.2.8.2 (HKLM-x32\...\{2D3234B2-FC7B-41CD-9FC8-4F9C2C20C131}) (Version: 4.2.8.2 - The Document Foundation) Lizardtech DjVu Control (HKLM-x32\...\{105CFC7C-6992-11D5-BD9D-000102C10FD8}) (Version: - ) Malwarebytes Anti-Malware wersja 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 11.45.4.3 - Marvell) Mendeley Desktop 0.9.8.2 (HKLM-x32\...\Mendeley Desktop) (Version: 0.9.8.2 - Mendeley Ltd.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Polski) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045) (Version: 4.5.50938 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{306B39C9-3AB1-4161-8567-9C7E50B41AE3}) (Version: 9.7.0621 - Microsoft Corporation) MiniLyrics (HKLM-x32\...\MiniLyrics) (Version: - ) <==== ATTENTION MiniTool Power Data Recovery (HKLM-x32\...\MiniTool Power Data Recovery_is1) (Version: - MiniTool Solution Ltd.) Mobipocket Creator 4.2 (HKLM-x32\...\{AFE499B5-FCC4-45E6-A1A5-3C51AE0E539B}) (Version: 4.2.41 - Mobipocket.com) Moduł Szybka instalacja pakietu Microsoft Office 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Moduł Szybka instalacja pakietu Microsoft Office 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden MozBackup 1.4.10 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla) Mozilla Thunderbird 31.3.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 pl)) (Version: 31.3.0 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) MyFreeCodec (HKU\S-1-5-21-2195184045-3265951034-2981680463-1000\...\MyFreeCodec) (Version: - ) Nokia Connectivity Cable Driver (HKLM-x32\...\{6FE12C01-2FBC-42E2-AEB9-4CA2238C462F}) (Version: 7.1.101.0 - Nokia) Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.7.22.0 - Nokia) Nokia Suite (x32 Version: 3.7.22.0 - Nokia) Hidden NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation) NVIDIA Oprogramowanie systemu PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Sterownik dźwięku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Sterownik graficzny 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) Obsługa programów Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) OmegaT version 2.5.5_03 (HKLM-x32\...\OmegaT 2.5.5_03_is1) (Version: - OmegaT) Oxford Collocations Dictionary (HKLM-x32\...\NSIS_ocoll2e) (Version: - ) paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC) Pakiet sterowników systemu Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security) Panel sterowania NVIDIA 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden PC Connectivity Solution (HKLM-x32\...\{6B722793-E77B-41F5-BAB3-6C9832274E75}) (Version: 12.0.76.0 - Nokia) PDFTK Builder 3.5.3 (HKLM-x32\...\PDFTK Builder_is1) (Version: - ) PDF-XChange Editor (HKLM-x32\...\{5400ac3b-582e-43db-8ce0-dabc2b5f4e69}) (Version: 5.5.309.0 - Tracker Software Products (Canada) Ltd.) PDF-XChange Editor (Version: 5.5.309.0 - Tracker Software Products (Canada) Ltd.) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden QT Lite 3.2.2 (HKLM-x32\...\qt7lite_is1) (Version: 3.2.2 - ) QUICKfind server v1.1 (HKLM-x32\...\QUICKfind) (Version: - IDM) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Raiffeisen (HKLM-x32\...\Raiffeisen.F548C4AC186788653C9BEEE3847318E64FD17CFE.1) (Version: 22.0.10 - Raiffeisen Bank Polska S.A.) Raiffeisen (x32 Version: 22.0.10 - Raiffeisen Bank Polska S.A.) Hidden Real Alternative 2.0.2 (HKLM-x32\...\RealAlt_is1) (Version: 2.0.2 - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Co