Nie mogę zainstalować żadnego antywirusa

[Seyraam]

Witam.
Postanowiłem dnia dzisiejszego zainstalować jakiś antywirus na moim laptopie i okazało się to niemożliwe.
Próbowałem z wieloma rodzajami (Kaspersky, Panda, Nod itp.). Wszystkie mogę ściągnąć na dysk, ale w trakcie instalacji każdy z tych programów nie może otworzyć jakiegoś pliku w systemie i pyta mnie, czy aby na pewno mam uprawnienia administratora.
Czytałem w gogle że może to być niejaki wirus polimorficzny. Chciałbym się w takim razie upewnić czy to na pewno on, bo wyczytałem że w takim wypadku pozostaje tylko format systemu.
Proszę o pomoc, jak to sprawdzić ?

[Łowca Androidów]

Pobierz >>>Farbar Recovery Scanner Tool (FRST)<<< zgodny z architekturą twojego systemu (x64 lub x86). Zapisz na pulpicie. Uruchom prawym myszy i opcja Uruchom jako administrator - po uruchomieniu kliknij przycisk SCAN - po zakończeniu wygenerowane zostaną 2 logi.
W dziale Bezpieczeństwo załóż nowy wątek i wstaw w nim oba logi w [code]
Oczywiście opisz tam problem.

[XMan 1]

jw

Do tego zaktualizuj system
a po drugie to poproś Administrację lub Moderację o przeniesienie tematu do działu Bezpieczeństwo



Zaraz chyba będzie reprymenda i przeczuwam od kogo

[Seyraam]

Oto logi z programu z programu FRST:

1) Additional http://www.wklej.eu/index.php?id=086bc06208
2) FRST http://www.wklej.eu/index.php?id=e005de4534

Kod: Zaznacz wszystko

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-05-2014
Ran by Karina (administrator) on KASIA on 15-05-2014 17:26:47
Running from C:\Users\Karina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZITHQRPS
Platform: Windows 8 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(ClientConnect Ltd.) C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
() C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\Cyfrowy Polsat MF821.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoggingDaemon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Redefine Sp. z o.o.) C:\Program Files (x86)\RedApp\redApp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [zLoader.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe [26480 2012-05-22] ()
HKLM\...\Run: [CancelAutoPlay.exe] => C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe [74096 2012-05-22] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ApnUpdater] => C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1646216 2013-03-31] (Ask)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-10-23] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [NeroFilterCheck] => C:\Windows\SysWOW64\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\Run: [IPLA!] => C:\Program Files (x86)\ipla\ipla.exe [21324384 2014-01-08] (Redefine Sp z o.o.)
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\Run: [98962e136f8432dcdb5889a0710f51cf] => \"C:\Users\Karina\AppData\Local\Temp\server.exe\" .. <===== ATTENTION
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\Run: [BackgroundContainerV2] => \"C:\Windows\SysWOW64\Rundll32.exe\" \"C:\Users\Karina\AppData\Local\Tbccint\BackgroundContainer\BackgroundContainer.dll\",DllRun
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\MountPoints2: E - \"E:\AutoRun.exe\" /s
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\MountPoints2: F - \"F:\AutoRun.exe\" /s
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\MountPoints2: {ca59ce94-8f45-11e2-be70-68942320954f} - \"F:\AutoRun.exe\" /s
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\MountPoints2: {cd60624b-97ec-11e3-bea8-00a0c6000000} - \"G:\LGAutoRun.exe\"
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\MountPoints2: {d2cfcaa2-73a3-11e3-bea0-00a0c6000000} - \"E:\AutoRun.exe\" /s
HKU\S-1-5-21-2136492792-3154435621-2738085978-1002\...\Winlogon: [Shell] C:\Windows\explorer.exe [2391280 2013-06-01] (Microsoft Corporation) <==== ATTENTION
AppInit_DLLs: C:\PROGRA~2\Linkey\IEEXTE~1\iedll64.dll => C:\PROGRA~2\Linkey\IEEXTE~1\iedll64.dll File Not Found
IFEO\AvastSvc.exe: [Debugger] nqij.exe
IFEO\AvastUI.exe: [Debugger] nqij.exe
IFEO\avcenter.exe: [Debugger] nqij.exe
IFEO\avconfig.exe: [Debugger] nqij.exe
IFEO\avgcsrvx.exe: [Debugger] nqij.exe
IFEO\avgidsagent.exe: [Debugger] nqij.exe
IFEO\avgnt.exe: [Debugger] nqij.exe
IFEO\avgrsx.exe: [Debugger] nqij.exe
IFEO\avguard.exe: [Debugger] nqij.exe
IFEO\avgui.exe: [Debugger] nqij.exe
IFEO\avgwdsvc.exe: [Debugger] nqij.exe
IFEO\avp.exe: [Debugger] nqij.exe
IFEO\avscan.exe: [Debugger] nqij.exe
IFEO\bdagent.exe: [Debugger] nqij.exe
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\blindman.exe: [Debugger] nqij.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\ccuac.exe: [Debugger] nqij.exe
IFEO\ComboFix.exe: [Debugger] nqij.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\egui.exe: [Debugger] nqij.exe
IFEO\hijackthis.exe: [Debugger] nqij.exe
IFEO\instup.exe: [Debugger] nqij.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\keyscrambler.exe: [Debugger] nqij.exe
IFEO\mbam.exe: [Debugger] nqij.exe
IFEO\mbamgui.exe: [Debugger] nqij.exe
IFEO\mbampt.exe: [Debugger] nqij.exe
IFEO\mbamscheduler.exe: [Debugger] nqij.exe
IFEO\mbamservice.exe: [Debugger] nqij.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rstrui.exe: [Debugger] nqij.exe
IFEO\SDFiles.exe: [Debugger] nqij.exe
IFEO\SDMain.exe: [Debugger] nqij.exe
IFEO\SDWinSec.exe: [Debugger] nqij.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\spybotsd.exe: [Debugger] nqij.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
IFEO\wireshark.exe: [Debugger] nqij.exe
IFEO\zlclient.exe: [Debugger] nqij.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)
Startup: C:\Users\Karina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://trovi.com?SearchSource=10&CUI=UN10407019466595236&UM=1&ctid=CT2504091
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
URLSearchHook: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
URLSearchHook: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: HKCU - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
URLSearchHook: HKCU - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=313&src=ds&p={searchTerms}
SearchScopes: HKLM - {D1A54C8A-403F-4F09-BDF6-2F7B03542105} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {4A73BDB7-1817-4EAB-90AC-D5CCF943827F} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=313&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 - {D1A54C8A-403F-4F09-BDF6-2F7B03542105} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {4A73BDB7-1817-4EAB-90AC-D5CCF943827F} URL = http://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091&CUI=UN10407019466595236&UM=1
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=180700A0C6000000&affID=128492&tsp=5213
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://start.qone8.com/web/?type=ds&ts=1383043888&from=cor&uid=WDCXWD3200BPVT-22JJ5T0_WD-WXL1E32HVSVXHVSVX&q={searchTerms}
SearchScopes: HKCU - {4A73BDB7-1817-4EAB-90AC-D5CCF943827F} URL = http://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091&CUI=UN10407019466595236&UM=1
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=313&src=ds&p={searchTerms}
SearchScopes: HKCU - {D1A54C8A-403F-4F09-BDF6-2F7B03542105} URL =
SearchScopes: HKCU - {E8E13E3A-6CFD-4C6B-91D6-366D96C20B4B} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=C2434837-E9EB-4E64-AD13-DDAB1CFAAF59&apn_sauid=78C913F6-1D8C-4A5C-9427-07934249BC19
BHO: No Name - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} -  No File
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Vuze Remote Toolbar - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
Toolbar: HKCU - Vuze Remote Toolbar - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Users\Karina\AppData\LocalLow\Vuze_Remote\prxtbVuz0.dll (ClientConnect Ltd.)
DPF: HKLM-x32 {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
Tcpip\Parameters: [DhcpNameServer] 212.2.96.53 212.2.96.54

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\7\NP_wtapp.dll ()
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

Chrome:
=======
CHR HomePage: hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=180700A0C6000000&affID=128492&tsp=5213
CHR StartupUrls: \"hxxp://www.buenosearch.com/?babsrc=HP_ss&mntrId=180700A0C6000000&affID=128492&tsp=5213\",
                  \"hxxp://www.default-search.net?sid=476&aid=132&itype=n&ver=12302&tm=313&src=hmp\"
CHR DefaultSearchProvider: default-search.net
CHR DefaultSearchURL: http://www.default-search.net/search?sid=476&aid=132&itype=n&ver=12302&tm=313&src=ds&p={searchTerms}
CHR Extension: (Google Docs) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-10]
CHR Extension: (Google Drive) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-10]
CHR Extension: (YouTube) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-10]
CHR Extension: (Google Search) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-10]
CHR Extension: (RealDownloader) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-10]
CHR Extension: (Google Wallet) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-10]
CHR Extension: (Gmail) - C:\Users\Karina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-10]
CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\Users\Karina\AppData\Local\APN\GoogleCRXs\apnorjtoolbar.crx [2013-11-10]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) =================

S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-24] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-09-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [28560 2012-08-30] (ELAN Microelectronics Corp.)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-22] (WildTangent)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-10-12] (Dritek System INC.)
R2 TBSrv; C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe [350528 2014-03-31] (ClientConnect Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6822984 2012-10-12] (Broadcom Corporation)
S3 ezplay; C:\Windows\System32\Drivers\ezplay.sys [118400 2014-04-08] (VSO Software)
S3 massfilter_lte; C:\Windows\system32\drivers\massfilter_lte.sys [18456 2011-12-14] (HandSet Incorporated)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-10-12] (Dritek System Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-10-29] (Duplex Secure Ltd.)
R3 zgdcat; C:\Windows\system32\DRIVERS\zgdcat.sys [130200 2011-12-14] (ZTE Incorporated)
R3 zgdcdiag; C:\Windows\system32\DRIVERS\zgdcdiag.sys [130200 2011-12-14] (ZTE Incorporated)
R3 zgdcmdm; C:\Windows\system32\DRIVERS\zgdcmdm.sys [130200 2011-12-14] (ZTE Incorporated)
R3 zgdcnet; C:\Windows\system32\DRIVERS\zgdcnet.sys [169496 2011-12-14] (ZTE Incorporated)
R3 zgdcnmea; C:\Windows\system32\DRIVERS\zgdcnmea.sys [130200 2011-12-14] (ZTE Incorporated)
U3 a0ehise9; C:\Windows\System32\Drivers\a0ehise9.sys [0 ] (Broadcom Corporation)
S3 athr; \SystemRoot\system32\DRIVERS\athrx.sys [X]
S1 gkkclnnl; \??\C:\Windows\system32\drivers\gkkclnnl.sys [X]
R4 KLIF; system32\DRIVERS\klif.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-15 17:26 - 2014-05-15 17:26 - 00000000 ____D () C:\FRST
2014-05-15 12:35 - 2014-05-15 12:35 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-05-15 12:23 - 2014-05-15 12:23 - 00000000 ____D () C:\Program Files\SkanerOnline
2014-05-15 12:20 - 2014-05-15 12:20 - 00000000 ____D () C:\ProgramData\ESET
2014-05-15 12:01 - 2014-05-15 12:05 - 127588448 _____ (AVAST Software) C:\Users\Karina\Downloads\avast_premier_antivirus_setup.exe
2014-05-15 12:00 - 2014-05-15 12:00 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_3 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_2 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_1 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:39 - 2014-05-09 15:39 - 00022355 _____ () C:\Users\Karina\Downloads\McKenna_Paul_-_Jak_zdobyc_pieniadze _madrosc_i_wolnosc_[Audiobook_PL]_[mp3 320][Torrenty.org].torrent
2014-05-09 15:35 - 2014-05-09 15:35 - 00036743 _____ () C:\Users\Karina\Downloads\Dean_Koontz_-_Niesmiertelny_[Audiobook_PL]_[mp3 56][Torrenty.org].torrent
2014-05-09 03:16 - 2014-05-09 03:16 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf6b24524963b3.job
2014-05-08 13:32 - 2014-05-08 13:32 - 00063002 _____ () C:\Users\Karina\Downloads\cooltext1553813699.psd
2014-05-08 13:14 - 2014-05-08 13:14 - 00077471 _____ () C:\Users\Karina\Downloads\cooltext1553790711.psd
2014-05-08 13:10 - 2014-05-08 13:10 - 00146201 _____ () C:\Users\Karina\Downloads\cooltext1553784368.psd
2014-05-08 13:06 - 2014-05-08 13:06 - 00079241 _____ () C:\Users\Karina\Downloads\cooltext1553779019.psd
2014-05-08 13:01 - 2014-05-08 13:01 - 00048112 _____ () C:\Users\Karina\Downloads\cooltext1553771032.psd
2014-05-08 12:39 - 2014-05-08 12:39 - 00101839 _____ () C:\Users\Karina\Downloads\cooltext1553734628.psd
2014-05-08 12:35 - 2014-05-08 12:35 - 00104718 _____ () C:\Users\Karina\Desktop\cooltext1553727936.psd
2014-05-05 15:23 - 2014-05-08 13:35 - 00000000 ____D () C:\Users\Karina\Desktop\strona www
2014-05-05 11:44 - 2014-05-05 11:44 - 00001317 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-05-05 11:43 - 2014-05-05 11:44 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-05 11:06 - 2014-05-05 11:06 - 00002108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Update Management Tool.lnk
2014-05-05 11:01 - 2014-05-05 11:01 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-05-05 11:00 - 2014-05-05 11:24 - 00000000 ____D () C:\Program Files\Adobe
2014-05-05 11:00 - 2014-05-05 11:00 - 00001072 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC (64 Bit).lnk
2014-05-05 10:58 - 2014-05-05 10:58 - 00001208 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC.lnk
2014-05-05 10:56 - 2014-05-05 11:41 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-05 10:54 - 2014-05-05 11:22 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-05 10:48 - 2014-05-05 11:07 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-05 10:47 - 2014-05-15 17:14 - 00000000 ____D () C:\Users\Karina\AppData\Local\Adobe
2014-05-04 22:58 - 2014-05-04 22:59 - 00000000 ____D () C:\Users\Karina\Desktop\fb
2014-05-03 14:06 - 2014-05-04 13:35 - 00000000 ____D () C:\Users\Karina\Desktop\wesele szymona
2014-04-26 12:24 - 2014-04-26 12:24 - 00000000 ____D () C:\Users\Karina\Documents\Ashampoo Burning Studio FREE
2014-04-24 01:35 - 2014-04-24 02:09 - 1573011248 _____ () C:\Users\Karina\Downloads\Wielki Rok 2012.PL.480p.BRRip.XviD.AC3-BiDA.avi
2014-04-24 01:35 - 2014-04-24 01:50 - 965980220 _____ () C:\Users\Karina\Downloads\Rok 1612 - Lektor PL.avi
2014-04-24 01:35 - 2014-04-24 01:47 - 734578978 _____ () C:\Users\Karina\Downloads\Nowa Ziemia 2011.PLSUBBED.BDRip.XviD-BiDA.avi
2014-04-22 21:42 - 2014-04-22 21:42 - 00000390 _____ () C:\Windows\Tasks\ReclaimerResumeInstall_Karina.job
2014-04-15 23:21 - 2014-04-15 23:23 - 00000061 _____ () C:\Users\Karina\Desktop\Nowy dokument tekstowy.txt

==================== One Month Modified Files and Folders =======

2014-05-15 17:26 - 2014-05-15 17:26 - 00000000 ____D () C:\FRST
2014-05-15 17:14 - 2014-05-05 10:47 - 00000000 ____D () C:\Users\Karina\AppData\Local\Adobe
2014-05-15 17:14 - 2013-11-24 10:16 - 00000000 ____D () C:\ProgramData\ipla
2014-05-15 17:14 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-05-15 12:35 - 2014-05-15 12:35 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files
2014-05-15 12:23 - 2014-05-15 12:23 - 00000000 ____D () C:\Program Files\SkanerOnline
2014-05-15 12:20 - 2014-05-15 12:20 - 00000000 ____D () C:\ProgramData\ESET
2014-05-15 12:05 - 2014-05-15 12:01 - 127588448 _____ (AVAST Software) C:\Users\Karina\Downloads\avast_premier_antivirus_setup.exe
2014-05-15 12:00 - 2014-05-15 12:00 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-05-15 10:19 - 2014-04-09 20:05 - 00000000 __SHD () C:\ProgramData\Windows Server
2014-05-15 10:19 - 2013-11-24 10:16 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\ipla
2014-05-14 23:51 - 2013-03-17 23:04 - 01261306 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 23:40 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-05-10 01:21 - 2014-04-09 20:05 - 01021548 _____ () C:\Users\Karina\AppData\Roaming\msconfig.ini
2014-05-09 23:07 - 2014-04-08 11:31 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\Azureus
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_3 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_2 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:41 - 2014-05-09 15:41 - 00000000 _____ () C:\Users\Karina\Downloads\Lapidus_Jens_-_Szybki_cash__ cz_1 3 _[Audiobook_PL]_[mp3 64][Torrenty.org].torrent
2014-05-09 15:39 - 2014-05-09 15:39 - 00022355 _____ () C:\Users\Karina\Downloads\McKenna_Paul_-_Jak_zdobyc_pieniadze _madrosc_i_wolnosc_[Audiobook_PL]_[mp3 320][Torrenty.org].torrent
2014-05-09 15:35 - 2014-05-09 15:35 - 00036743 _____ () C:\Users\Karina\Downloads\Dean_Koontz_-_Niesmiertelny_[Audiobook_PL]_[mp3 56][Torrenty.org].torrent
2014-05-09 03:16 - 2014-05-09 03:16 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf6b24524963b3.job
2014-05-08 13:35 - 2014-05-05 15:23 - 00000000 ____D () C:\Users\Karina\Desktop\strona www
2014-05-08 13:32 - 2014-05-08 13:32 - 00063002 _____ () C:\Users\Karina\Downloads\cooltext1553813699.psd
2014-05-08 13:14 - 2014-05-08 13:14 - 00077471 _____ () C:\Users\Karina\Downloads\cooltext1553790711.psd
2014-05-08 13:10 - 2014-05-08 13:10 - 00146201 _____ () C:\Users\Karina\Downloads\cooltext1553784368.psd
2014-05-08 13:06 - 2014-05-08 13:06 - 00079241 _____ () C:\Users\Karina\Downloads\cooltext1553779019.psd
2014-05-08 13:01 - 2014-05-08 13:01 - 00048112 _____ () C:\Users\Karina\Downloads\cooltext1553771032.psd
2014-05-08 12:58 - 2012-10-12 14:39 - 00794946 _____ () C:\Windows\system32\perfh015.dat
2014-05-08 12:58 - 2012-10-12 14:39 - 00159530 _____ () C:\Windows\system32\perfc015.dat
2014-05-08 12:58 - 2012-07-26 09:28 - 01793398 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-08 12:39 - 2014-05-08 12:39 - 00101839 _____ () C:\Users\Karina\Downloads\cooltext1553734628.psd
2014-05-08 12:35 - 2014-05-08 12:35 - 00104718 _____ () C:\Users\Karina\Desktop\cooltext1553727936.psd
2014-05-07 23:33 - 2014-04-08 11:32 - 00000000 ____D () C:\Users\Karina\AppData\Local\Tbccint
2014-05-07 15:33 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-06 12:26 - 2013-12-09 23:40 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\vlc
2014-05-05 19:16 - 2013-03-17 23:06 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\Adobe
2014-05-05 11:48 - 2014-03-25 21:24 - 05023856 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-05 11:44 - 2014-05-05 11:44 - 00001317 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2014-05-05 11:44 - 2014-05-05 11:43 - 00000000 ____D () C:\ProgramData\Package Cache
2014-05-05 11:41 - 2014-05-05 10:56 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-05 11:24 - 2014-05-05 11:00 - 00000000 ____D () C:\Program Files\Adobe
2014-05-05 11:22 - 2014-05-05 10:54 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-05 11:07 - 2014-05-05 10:48 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-05 11:06 - 2014-05-05 11:06 - 00002108 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Update Management Tool.lnk
2014-05-05 11:01 - 2014-05-05 11:01 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-05-05 11:00 - 2014-05-05 11:00 - 00001072 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC (64 Bit).lnk
2014-05-05 10:58 - 2014-05-05 10:58 - 00001208 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC.lnk
2014-05-05 10:54 - 2013-03-17 23:05 - 00000000 ____D () C:\Users\Karina\AppData\Local\VirtualStore
2014-05-04 22:59 - 2014-05-04 22:58 - 00000000 ____D () C:\Users\Karina\Desktop\fb
2014-05-04 13:35 - 2014-05-03 14:06 - 00000000 ____D () C:\Users\Karina\Desktop\wesele szymona
2014-05-03 14:35 - 2013-12-25 14:26 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\dvdcss
2014-05-01 18:09 - 2013-10-24 18:20 - 00000000 ____D () C:\Users\Karina\Desktop\Zdjęcia
2014-05-01 17:46 - 2012-07-26 09:21 - 00034390 _____ () C:\Windows\setupact.log
2014-04-28 11:51 - 2013-03-17 23:14 - 00000000 ____D () C:\Users\Karina\AppData\Local\CrashDumps
2014-04-26 12:44 - 2013-03-17 23:06 - 00000000 ___RD () C:\Users\Karina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-26 12:44 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-04-26 12:24 - 2014-04-26 12:24 - 00000000 ____D () C:\Users\Karina\Documents\Ashampoo Burning Studio FREE
2014-04-24 02:09 - 2014-04-24 01:35 - 1573011248 _____ () C:\Users\Karina\Downloads\Wielki Rok 2012.PL.480p.BRRip.XviD.AC3-BiDA.avi
2014-04-24 01:50 - 2014-04-24 01:35 - 965980220 _____ () C:\Users\Karina\Downloads\Rok 1612 - Lektor PL.avi
2014-04-24 01:47 - 2014-04-24 01:35 - 734578978 _____ () C:\Users\Karina\Downloads\Nowa Ziemia 2011.PLSUBBED.BDRip.XviD-BiDA.avi
2014-04-23 09:25 - 2014-04-09 19:03 - 00000000 ____D () C:\Users\Karina\AppData\Roaming\CbiervNd
2014-04-22 21:42 - 2014-04-22 21:42 - 00000390 _____ () C:\Windows\Tasks\ReclaimerResumeInstall_Karina.job
2014-04-16 12:02 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-04-15 23:23 - 2014-04-15 23:21 - 00000061 _____ () C:\Users\Karina\Desktop\Nowy dokument tekstowy.txt
2014-04-15 23:20 - 2013-04-15 07:59 - 00000000 ____D () C:\Users\Karina\AppData\Local\Deployment
2014-04-15 00:54 - 2012-09-21 08:50 - 00067284 _____ () C:\Windows\PFRO.log

Files to move or delete:
====================
C:\Users\Karina\AppData\Roaming\msconfig.ini


Some content of TEMP:
====================
C:\Users\Karina\AppData\Local\Temp\AAMHelper.exe
C:\Users\Karina\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Karina\AppData\Local\Temp\APNStub.exe
C:\Users\Karina\AppData\Local\Temp\AxSFADownloader.exe
C:\Users\Karina\AppData\Local\Temp\BackupSetup.exe
C:\Users\Karina\AppData\Local\Temp\bitool.dll
C:\Users\Karina\AppData\Local\Temp\BuenoSearchTB.exe
C:\Users\Karina\AppData\Local\Temp\COMAP.EXE
C:\Users\Karina\AppData\Local\Temp\i4jdel0.exe
C:\Users\Karina\AppData\Local\Temp\InstHelper.exe
C:\Users\Karina\AppData\Local\Temp\ipl18BF.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl1F6C.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl24BF.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl266A.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl293E.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl40A6.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl519F.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl53E.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl55A8.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl58F0.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl5B24.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl5C4B.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl5DFC.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl6740.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl73F0.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl799A.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl842A.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl852A.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl8684.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl87D8.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl996.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl9A6.tmp.exe
C:\Users\Karina\AppData\Local\Temp\ipl9FA3.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplA874.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplA8B6.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplAB56.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplAF10.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplAFDD.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplB6F3.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplBA8D.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplC170.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplC303.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplC356.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplC434.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplC69D.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplD995.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplDFDB.tmp.exe
C:\Users\Karina\AppData\Local\Temp\iplEC26.tmp.exe
C:\Users\Karina\AppData\Local\Temp\SettingsManagerSetup.exe
C:\Users\Karina\AppData\Local\Temp\tmp18C8.tmp.exe
C:\Users\Karina\AppData\Local\Temp\tmpA99B.tmp.exe
C:\Users\Karina\AppData\Local\Temp\UNNeroVision.exe
C:\Users\Karina\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-07 19:27

==================== End Of Log ============================

Kod: Zaznacz wszystko

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-05-2014
Ran by Karina at 2014-05-15 17:28:07
Running from C:\Users\Karina\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZITHQRPS
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

clear.fi SDK - Video 2 (x32 Version: 2.1.1925 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.1.2008 - CyberLink Corp.) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3007 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Update Management Tool (HKLM-x32\...\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 6.2 - PainteR)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)
Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.23.0 - Ask.com) <==== ATTENTION
Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.5.36191 - Ask.com) <==== ATTENTION
Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Bridge It Plus (x32 Version: 3.0.2.59 - WildTangent) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.20 - Broadcom Corporation)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3108 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3108 - Acer Incorporated)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3103_44819 - CyberLink Corp.) Hidden
Cyfrowy Polsat MF821 (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: PCW_PLSPOLLV1.0.0B12 - ZTE  Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5971CA1F-6BDE-498F-952C-9F2BF94070A4}) (Version:  - Microsoft)
Delicious: Emily's True Love Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Droga Do Sukcesu wersja 1.0 (HKLM-x32\...\{9D1742DE-321C-4F31-BCE4-31DDAE3C05FD}_is1) (Version: 1.0 - Alawar)
Dustforce (x32 Version: 3.0.2.59 - WildTangent) Hidden
eBay Worldwide (HKLM-x32\...\{A694AF57-9891-4D62-824C-7E55A1361A14}) (Version: 2.3.0630 - OEM)
ETDWare PS/2-X64 11.6.8.001_WHQL (HKLM\...\Elantech) (Version: 11.6.8.001 - ELAN Microelectronic Corp.)
Finding Teddy (x32 Version: 3.0.2.51 - WildTangent) Hidden
Game Channels (x32 Version: 7.1.0.17 - WildTangent, Inc.) Hidden
Gear Grinder (x32 Version: 2.2.0.95 - WildTangent) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
ipla 2.7 (HKLM-x32\...\ipla) (Version: 2.7 - Redefine Sp z o.o.)
Island Realms wersja 1.0 (HKLM-x32\...\{5385CC35-FA99-4C65-B8BC-0C00C86C1425}_is1) (Version: 1.0 - Alawar)
Island Tribe (x32 Version: 2.2.0.98 - WildTangent) Hidden
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jeweller: The Cursed Treasures (x32 Version: 3.0.2.59 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Journey: The Heart of Gaia (x32 Version: 3.0.2.48 - WildTangent) Hidden
Karaoke Extra Hity 2 (HKLM-x32\...\{44DA5F0C-0F82-446B-89B6-312B24DBC427}_is1) (Version: 2.0 - Techland)
K-Lite Codec Pack 6.2.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.2.0 - )
Kwiatowa Przygoda (HKLM-x32\...\Kwiatowa Przygoda_is1) (Version:  - Nowe Media)
Kwiecista Dolina (HKLM-x32\...\Kwiecista Dolina_is1) (Version:  - Nowe Media s.c.)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.5 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3004 - Acer Incorporated)
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Microsoft Office 2010 dla Użytkowników Domowych i Małych Firm (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Access MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Polish) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Polish) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (x32 Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Military Life: Tank Simulator (x32 Version: 2.2.0.98 - WildTangent) Hidden
Moje Puzzle - Urocza Przyroda wersja Moje Puzzle - Urocza Przyroda (HKLM-x32\...\{E5684D44-407B-4376-B96B-A0DB5CAF9743}_is1) (Version: Moje Puzzle - Urocza Przyroda - nowe-media.eu)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
New Yankee in King Arthur's Court 2 (x32 Version: 3.0.2.38 - WildTangent) Hidden
Northern Tale 2 (x32 Version: 3.0.2.59 - WildTangent) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9008 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
Odlotowa Farma 2 (HKLM-x32\...\Odlotowa Farma 2_is1) (Version:  - Nowe Media s.c.)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.01.3200 - Acer)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Plus500 (HKLM-x32\...\Plus500) (Version:  - )
Podwodne Skarby (HKLM-x32\...\{41E2EE0A-B096-497A-B74E-78846CB3DE6D}_is1) (Version:  - nowe-media.eu)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
PoznajSwiatZwierzeta (HKCU\...\PoznajSwiatZwierzeta) (Version:  - )
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedApp 1.0 (HKLM-x32\...\RedApp) (Version: 1.0 - Redefine Sp z o.o.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sticky Linky wersja 1.0 (HKLM-x32\...\{45D7D4AA-2E1B-4851-9BC5-A803A2247588}_is1) (Version: 1.0 - Alawar)
Stronghold Kingdoms (HKLM-x32\...\{D1D632A2-E249-466D-A094-B1B934D37645}_is1) (Version: 1.17 - Firefly Studios)
Swipe (HKLM-x32\...\Swipe_is1) (Version:  - Nowe Media)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
Turystyczne Imperium wersja 1.0 (HKLM-x32\...\{AAC3814E-4B61-4462-88B1-A60752BCC3CE}_is1) (Version: 1.0 - Alawar)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0415-0000-0000000FF1CE}_Office14.SingleImage_{70D90D6A-7373-40DD-BF09-9F0B9C55FA36}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0415-0000-0000000FF1CE}_Office14.SingleImage_{9618F6D0-1BE0-42EB-9B55-5EF9BB2ECDC9}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player 2.1.1 (HKLM-x32\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)
Vuze Remote Toolbar for IE (HKLM-x32\...\IECT2504091) (Version: 6.19.0.18 - Vuze Remote) <==== ATTENTION
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.2 - WildTangent) Hidden
WinRAR 5.01 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
ZTE LTE Device USB Driver (HKLM\...\{00C1EF09-B5B7-4082-B1F4-C35CE7A7FCA9}) (Version:  - ZTE Corporation)
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Restore Points  =========================

19-03-2014 15:37:22 Windows Update
03-04-2014 00:09:20 Zaplanowany punkt kontrolny
09-04-2014 16:49:15 Installed Nero 2014.
05-05-2014 09:42:55 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {13244125-14A9-4D24-B584-E991697D490B} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-03-31] () <==== ATTENTION
Task: {14EC1DFD-A783-4629-88AE-63D3F0F59949} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10] (Google Inc.)
Task: {19BAF158-F3D4-4AA6-BAB7-A0A2AC5A9AAB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2136492792-3154435621-2738085978-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {22A561A1-E729-4072-A7D5-C4D740D5CA3C} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {6B22BD78-7968-4795-9393-1E8124D75CA4} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {88AEF210-CFF0-43DC-86CB-FC3EFE793B53} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2136492792-3154435621-2738085978-1002 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {8C3DC9F4-1022-4BBB-9B02-B9192C155674} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-10] (Google Inc.)
Task: {90C97FFA-7C30-4419-BED2-66F9DC4195B1} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-09-05] (Acer Incorporated)
Task: {9B67A372-0742-42C6-ABAC-C6CC49D930FF} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CBA62588-6DA5-4879-9D5C-7E4FC9D453F2} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {DBDEA15A-2C53-4916-893E-B71C8A152135} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F140F7CE-9942-4C43-AB0F-C1992AFADE6A} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: C:\Windows\Tasks\EPUpdater.job => C:\Users\Karina\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf6b24524963b3.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_Karina.job => C:\Users\Karina\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.90\agent\rnupgagent.exe

==================== Loaded Modules (whitelisted) =============

2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-03-20 11:24 - 2014-03-20 11:24 - 00667808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-01-03 14:14 - 2012-05-22 08:29 - 00030576 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\Cyfrowy Polsat MF821.exe
2014-01-03 14:14 - 2012-05-22 08:29 - 00032112 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoggingDaemon.exe
2012-09-21 09:44 - 2012-08-28 02:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2012-10-12 13:54 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-01-03 14:14 - 2011-04-12 12:53 - 00043520 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\_socket.pyd
2014-01-03 14:14 - 2010-11-27 12:31 - 00721920 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\_ssl.pyd
2014-01-03 14:14 - 2010-05-14 12:19 - 00981504 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._core_.pyd
2014-01-03 14:14 - 2010-05-14 12:19 - 00746496 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._gdi_.pyd
2014-01-03 14:14 - 2010-05-14 12:20 - 00670720 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._windows_.pyd
2014-01-03 14:14 - 2010-05-14 12:20 - 00966144 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._controls_.pyd
2014-01-03 14:14 - 2010-05-14 12:21 - 00674816 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._misc_.pyd
2014-01-03 14:14 - 2010-05-14 12:22 - 00467456 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._aui.pyd
2014-01-03 14:14 - 2010-05-14 12:21 - 00395776 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._grid.pyd
2014-01-03 14:14 - 2010-05-14 12:22 - 00346112 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._html.pyd
2014-01-03 14:14 - 2010-05-14 12:22 - 00073216 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._animate.pyd
2014-01-03 14:14 - 2010-05-14 12:22 - 00065024 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\wx._media.pyd
2014-01-03 14:14 - 2011-02-26 20:00 - 00096768 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\win32api.pyd
2014-01-03 14:14 - 2011-02-27 18:13 - 00110080 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\pywintypes27.dll
2014-01-03 14:14 - 2011-04-12 12:54 - 00087040 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\_ctypes.pyd
2014-01-03 14:14 - 2011-02-26 20:02 - 00354304 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\pythoncom27.dll
2014-01-03 14:14 - 2011-02-26 19:59 - 00017408 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\win32event.pyd
2014-01-03 14:14 - 2011-02-26 20:00 - 00023552 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\win32pipe.pyd
2014-01-03 14:14 - 2011-02-26 19:59 - 00112128 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\win32file.pyd
2014-01-03 14:14 - 2010-11-27 12:31 - 00057344 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\_sqlite3.pyd
2014-01-03 14:14 - 2010-11-27 12:31 - 00635392 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\sqlite3.dll
2014-01-03 14:14 - 2011-04-12 12:54 - 00126976 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\pyexpat.pyd
2014-01-03 14:14 - 2011-02-26 20:00 - 00167424 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\win32gui.pyd
2014-01-03 14:14 - 2011-04-12 12:54 - 00010240 _____ () C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\select.pyd
2014-03-18 23:22 - 2014-03-18 23:22 - 32733088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/15/2014 05:28:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:28:39Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:28:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:28:09Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:27:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:27:39Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:27:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:27:09Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:26:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:26:39Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:26:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:26:09Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:25:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:25:39Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:25:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:25:09Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:24:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:24:39Z. Kod błędu: 0x80040154.

Error: (05/15/2014 05:24:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: Nie można zaplanować restartu usługi ochrony oprogramowania o 2114-04-21T15:24:09Z. Kod błędu: 0x80040154.


System errors:
=============
Error: (05/15/2014 00:00:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi fmpjexmp z powodu następującego błędu:
%%2

Error: (05/15/2014 01:12:49 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/15/2014 01:12:49 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/15/2014 01:12:49 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/15/2014 01:12:49 AM) (Source: DCOM) (EventID: 10010) (User: ZARZĄDZANIE NT)
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (05/10/2014 01:21:24 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa GamesAppIntegrationService niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (05/09/2014 11:08:43 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Poprzednie zamknięcie systemu przy 15:30:19 na ‎2014-‎05-‎09 było nieoczekiwane.

Error: (05/05/2014 11:48:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Poprzednie zamknięcie systemu przy 11:29:40 na ‎2014-‎05-‎05 było nieoczekiwane.

Error: (04/30/2014 10:55:45 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: System wykrył konflikt adresów między adresem IP 100.88.184.145 a komputerem o sieciowym
adresie sprzętowym 00-A0-C6-00-00-01. W rezultacie mogą być zakłócone operacje sieciowe na
tym komputerze.

Error: (04/30/2014 10:01:14 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: System wykrył konflikt adresów między adresem IP 100.88.220.157 a komputerem o sieciowym
adresie sprzętowym 00-A0-C6-00-00-01. W rezultacie mogą być zakłócone operacje sieciowe na
tym komputerze.


Microsoft Office Sessions:
=========================
Error: (05/15/2014 05:28:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:28:39Z

Error: (05/15/2014 05:28:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:28:09Z

Error: (05/15/2014 05:27:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:27:39Z

Error: (05/15/2014 05:27:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:27:09Z

Error: (05/15/2014 05:26:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:26:39Z

Error: (05/15/2014 05:26:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:26:09Z

Error: (05/15/2014 05:25:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:25:39Z

Error: (05/15/2014 05:25:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:25:09Z

Error: (05/15/2014 05:24:39 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:24:39Z

Error: (05/15/2014 05:24:09 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: 0x800401542114-04-21T15:24:09Z

Co do programu Malwarebytes Anti-Malware, to nie dam rady go uruchomić

[Łowca Androidów]

A prosiłem o logi w [ code]
Dzisiaj juz późno - sprawdze logi jutro.
W międzyczasie wciśnij WinKey+R i wpisz:

Kod: Zaznacz wszystko

control userpasswords2


w otwartym oknie zaznacz swoja nazwę użytkownika i kliknij przycisk Właściwości
teraz przejdź na zakładkę Członkostwo grupy i napisz która z pozycji jest zaznaczona:
- Użytkownik standardowy
- Administrator
- Inny
?

Dodano Dzisiaj, 11:04:
Poproszę pełny log Addtion - ten co wkleiłeś na wkej.eu jest niepełny.
Wstaw log w [code] tu na forum.