Jeśli jesteś właścicielem tej strony, możesz wyłączyć reklamę poniżej zmieniając pakiet na PRO lub VIP w panelu naszego hostingu już od 4zł!


Wątek zamknięty 
Reklamy/banery/ cała strona zawalona :(
Autor Wiadomość
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #1
Exclamation Reklamy/banery/ cała strona zawalona :(
Witam/Siema !
Jestem nowy i przychodzę do was z problemem reklam. Gdyż próbowałem antywirusem je zlikwidowac ,Adblock,AdwCleaner - nie pomogło reklamy nadal się wyświetlają. (samo otwierające się nowe zakładki z reklamami po kliknięciu na obojętnie jaki punkt strony)
Help , nie wiem co robić Sad !
http://postimg.org/image/4z9ai6vnz/
http://postimg.org/image/z3s4nirml/
(np.ADS by WanderBust)
Pozdrawiam.
09-08-2015 16:33
Znajdź wszystkie posty użytkownika
jason Offline
Administrator
******
Administrators

Liczba postów: 445
Dołączył: Dec 2012
Reputacja: 19
Post: #2
RE: Reklamy/banery/ cała strona zawalona :(
Gdybyś napisał Wątek w prawidłowym do tego dziale "Dezynfekcja systemu", wiedziałbyś, że trzeba czytać Regulamin, aby uniknąć pomyłek i przyspieszyć sobie pomoc.

Pokaż raporty z narzędzia Farbar Recovery Scan Tool.

Wątek przenoszę do działu "Dezynfekcja systemu".

*****************************************

Pomoc jest bezpłatna, Dotacja to tylko Twój miły gest wdzięczności
09-08-2015 19:28
Znajdź wszystkie posty użytkownika
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #3
RE: Reklamy/banery/ cała strona zawalona :(
Przepraszam za pomyłkę działu. Prosże oto skan.
Cytat:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015 01
Ran by Bartek Mateusz (administrator) on ADMINBOLO (09-08-2015 16:15:54)
Running from C:\Users\Bartek Mateusz\Downloads
Loaded Profiles: Bartek Mateusz (Available Profiles: Bartek Mateusz)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ALLPlayer Group Ltd.) C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
() C:\Program Files (x86)\Common Files\fccb0821-00ee-466c-acb5-2a5cec258511\updater.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\PluginContainer.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\2\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\10\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\8\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\7\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\12\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\5\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\3\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\3\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\7\Plugin.exe
() C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\plugins\12\Plugin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2319817023-748649177-3454870343-1000\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2765256 2015-04-27] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2319817023-748649177-3454870343-1000\...\Run: [ALLPlayer WiFi Remote] => C:\Program Files (x86)\ALLPlayer Remote\ALLPlayerRemoteControl.exe [5182896 2014-07-23] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-2319817023-748649177-3454870343-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5585136 2015-03-31] (Disc Soft Ltd)
Startup: C:\Users\Bartek Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rejestracja FIFA 10.lnk [2015-07-22]
ShortcutTarget: Rejestracja FIFA 10.lnk -> C:\Program Files (x86)\EA Sports\FIFA 10\Support\EAregister.exe (Leader Technologies)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-01] (Avast Software s.r.o.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-2319817023-748649177-3454870343-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-07-23] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-01] (Avast Software s.r.o.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation)
BHO-x32: Wander Burst -> {0f4e02f8-f10e-493d-a1a7-3aed7ba7b110} -> C:\Program Files (x86)\Wander Burst\Extensions\0f4e02f8-f10e-493d-a1a7-3aed7ba7b110.dll No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-03-09] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-22] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-01] (Avast Software s.r.o.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-22] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{9B44B5AE-939A-474F-B289-B565C4562888}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{A5EE52F8-9EC0-46D8-9C58-12BC14E2160F}: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-01]

Chrome:
=======
CHR Profile: C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-08-08]
CHR Extension: (Stylish) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2015-08-08]
CHR Extension: (AdBlock) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-08-08]
CHR Extension: (Speed Test Internet) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlhbmnfdcklajeaeikfinieljfegamko [2015-08-08]
CHR Extension: (Adblock Super) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\knebimhcckndhiglamoabbnifdkijidd [2015-08-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-01]
CHR Extension: (Adblock Pro) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2015-08-08]
CHR Extension: (Stylist) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pabfempgigicdjjlccdgnbmeggkbjdhd [2015-08-08]
CHR Extension: (Facebook Themes (Facebook Theme Gallery)) - C:\Users\Bartek Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\phejagnmddcjhjblnacgmejghffmhjfp [2015-08-08]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-01]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-01]

Opera:
=======
OPR Extension: (Wander Burst) - C:\Users\Bartek Mateusz\AppData\Roaming\Opera Software\Opera Stable\Extensions\iobadhdhohjejblckfnebclcigmodege [2015-08-07]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-01] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-01] (Avast Software)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1277680 2015-03-31] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-24] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-24] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
R2 Service Mgr WanderBurst; C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511\PluginContainer.exe [1146592 2015-08-09] ()
R2 Update Mgr WanderBurst; C:\Program Files (x86)\Common Files\fccb0821-00ee-466c-acb5-2a5cec258511\updater.exe [1074400 2015-08-09] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 tbsvc_1.10.0.16; "C:\Program Files (x86)\TermBlazer_1.10.0.16\Service\tbsvc.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-01] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-01] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-01] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-01] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-01] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-01] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-01] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-08-05] (Disc Soft Ltd)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-24] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
S3 pfc; C:\Windows\SysWOW64\drivers\pfc.sys [10368 2004-04-01] (Padus, Inc.) [File not signed]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-01] (Avast Software)
U3 Winsock; no ImagePath
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-09 16:15 - 2015-08-09 16:16 - 00017323 _____ C:\Users\Bartek Mateusz\Downloads\FRST.txt
2015-08-09 16:15 - 2015-08-09 16:15 - 00000000 ____D C:\FRST
2015-08-09 16:10 - 2015-08-09 16:10 - 02169856 _____ (Farbar) C:\Users\Bartek Mateusz\Downloads\FRST64.exe
2015-08-08 21:26 - 2015-08-08 21:26 - 00000000 ____D C:\Program Files (x86)\Wander Burst
2015-08-08 21:16 - 2015-08-08 21:17 - 00000000 ____D C:\AdwCleaner
2015-08-07 18:52 - 2015-08-07 18:52 - 00000000 ____D C:\Program Files (x86)\Car mechanic simulator 2015
2015-08-07 18:49 - 2015-08-07 18:49 - 00000000 ____D C:\Users\Bartek Mateusz\Desktop\GRY
2015-08-07 13:13 - 2015-08-07 13:13 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-07 13:05 - 2015-08-07 13:05 - 02248704 _____ C:\Users\Bartek Mateusz\Desktop\AdwCleaner.exe
2015-08-06 00:44 - 2015-08-06 00:44 - 00020614 _____ C:\Users\Bartek Mateusz\.recently-used.xbel
2015-08-05 23:29 - 2015-08-05 23:29 - 00000266 __RSH C:\ProgramData\ntuser.pol
2015-08-05 22:15 - 2015-08-09 16:10 - 00000000 ____D C:\ProgramData\fccb0821-00ee-466c-acb5-2a5cec258511
2015-08-05 22:15 - 2015-08-05 22:15 - 00001140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goat Simulator.lnk
2015-08-05 22:15 - 2015-08-05 22:15 - 00000000 ____D C:\Users\Bartek Mateusz\Documents\My Games
2015-08-05 22:14 - 2015-08-05 22:15 - 00000000 ____D C:\Program Files (x86)\Goat Simulator
2015-08-05 22:13 - 2015-08-05 22:14 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\DAEMON Tools Lite
2015-08-05 22:13 - 2015-08-05 22:13 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-08-05 22:13 - 2015-08-05 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-08-05 22:13 - 2015-08-05 22:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2015-08-05 22:12 - 2015-08-05 22:12 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2015-08-05 13:30 - 2015-08-05 13:30 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Local\CEF
2015-07-30 13:06 - 2015-07-30 13:06 - 00000000 ____D C:\Windows\Downloaded Installations
2015-07-24 18:01 - 2015-07-24 18:01 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-07-23 14:27 - 2015-07-23 14:27 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-07-23 14:27 - 2015-07-23 14:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-07-23 14:27 - 2015-07-23 14:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-07-23 14:27 - 2015-07-23 14:27 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-07-23 14:27 - 2015-07-23 14:27 - 00000000 ____D C:\Program Files\Java
2015-07-22 23:11 - 2015-07-22 23:11 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-22 23:11 - 2015-07-22 23:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-07-22 23:11 - 2015-07-22 23:11 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-22 21:19 - 2015-06-17 08:03 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-07-22 21:17 - 2015-08-07 18:48 - 00000000 ____D C:\drollbox
2015-07-22 21:17 - 2015-06-17 11:10 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-07-22 21:17 - 2015-06-17 11:10 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00408392 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00407296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00204648 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-07-22 21:17 - 2015-06-17 11:10 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-07-22 21:17 - 2015-06-17 11:10 - 00040280 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-07-22 20:44 - 2015-07-03 06:28 - 00065896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-07-22 20:44 - 2015-07-03 06:28 - 00047976 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-07-22 19:25 - 2015-07-23 22:05 - 00000000 ____D C:\Users\Bartek Mateusz\Documents\FIFA 10
2015-07-22 19:09 - 2015-07-22 19:09 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Leadertech
2015-07-22 18:44 - 2015-07-22 18:44 - 00000000 ____D C:\Program Files (x86)\EA Sports
2015-07-17 15:02 - 2015-08-05 14:02 - 00000945 _____ C:\Users\Bartek Mateusz\Desktop\margo ZIPPY.txt
2015-07-11 18:58 - 2015-07-11 18:58 - 00000000 ____D C:\Program Files\Titan Quest
2015-07-11 18:24 - 2015-07-11 18:24 - 00000000 ____D C:\ProgramData\McAfee

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-09 16:11 - 2015-05-01 18:23 - 01389663 _____ C:\Windows\WindowsUpdate.log
2015-08-09 16:11 - 2009-07-14 06:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-09 16:11 - 2009-07-14 06:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-09 16:04 - 2015-05-01 19:11 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-09 16:04 - 2015-05-01 18:58 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-09 16:04 - 2009-07-14 06:51 - 00089869 _____ C:\Windows\setupact.log
2015-08-09 16:03 - 2015-05-01 19:21 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-09 16:03 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-08 23:10 - 2015-05-01 20:33 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-08-08 21:37 - 2015-05-01 18:58 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-08 12:25 - 2015-05-15 20:31 - 00000000 ____D C:\Program Files (x86)\Opera
2015-08-07 21:08 - 2010-11-21 05:47 - 00028030 _____ C:\Windows\PFRO.log
2015-08-07 18:57 - 2015-05-01 20:14 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-08-07 18:57 - 2015-05-01 20:13 - 00000000 ____D C:\Program Files (x86)\Image-Line
2015-08-07 18:49 - 2015-05-01 19:12 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Dropbox
2015-08-06 21:39 - 2015-05-01 18:59 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-06 12:24 - 2015-05-01 18:58 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Local\Google
2015-08-06 00:57 - 2015-05-01 20:32 - 00000000 ____D C:\Users\Bartek Mateusz\Desktop\Grafika Tapety
2015-08-06 00:44 - 2015-05-05 19:57 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\gtk-2.0
2015-08-06 00:44 - 2015-05-01 20:22 - 00000000 ____D C:\Users\Bartek Mateusz\.gimp-2.6
2015-08-06 00:44 - 2015-05-01 18:23 - 00000000 ____D C:\Users\Bartek Mateusz
2015-08-05 22:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\GroupPolicy
2015-08-05 21:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-08-05 12:04 - 2015-05-15 20:33 - 00003874 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1431714801
2015-08-04 21:59 - 2011-03-21 21:49 - 00737730 _____ C:\Windows\system32\perfh015.dat
2015-08-04 21:59 - 2011-03-21 21:49 - 00154418 _____ C:\Windows\system32\perfc015.dat
2015-08-04 21:59 - 2009-07-14 07:13 - 01662556 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-04 21:40 - 2015-05-22 22:14 - 00000000 ____D C:\ProgramData\Origin
2015-08-03 11:23 - 2015-05-05 20:52 - 00000080 _____ C:\Users\Bartek Mateusz\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-08-01 21:30 - 2015-05-01 19:48 - 00000000 ___RD C:\Users\Bartek Mateusz\Desktop\MUZA
2015-07-30 14:08 - 2015-05-01 20:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-30 14:07 - 2015-05-03 12:00 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Adobe
2015-07-30 13:27 - 2015-06-09 19:16 - 00000000 ____D C:\Users\Bartek Mateusz\Desktop\Projekty
2015-07-27 22:26 - 2015-05-01 19:22 - 00001377 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-07-27 22:26 - 2015-05-01 19:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-26 23:02 - 2015-05-04 21:09 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Local\WMTools Downloaded Files
2015-07-26 23:01 - 2015-05-04 21:06 - 00008192 _____ C:\Users\Bartek Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-26 11:26 - 2015-05-01 21:53 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\.minecraft
2015-07-26 09:34 - 2015-05-01 21:53 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\.minecraftzyczu
2015-07-25 15:13 - 2015-05-22 22:14 - 00000000 ____D C:\Program Files (x86)\Origin
2015-07-25 12:03 - 2015-05-01 20:33 - 00003906 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-07-25 12:02 - 2015-05-01 20:33 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-25 12:02 - 2015-05-01 20:33 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-24 06:21 - 2015-05-01 19:21 - 01756608 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-07-24 06:21 - 2015-05-01 19:21 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-07-24 06:21 - 2015-05-01 19:21 - 01423304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-07-24 06:21 - 2015-05-01 19:21 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-07-23 07:53 - 2009-07-14 07:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-22 23:12 - 2015-05-01 19:26 - 00000000 ____D C:\ProgramData\Oracle
2015-07-22 21:20 - 2015-05-01 19:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-22 21:19 - 2015-05-01 19:14 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-07-22 21:18 - 2015-06-02 17:13 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-22 19:09 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-22 18:44 - 2015-05-02 22:36 - 00331716 _____ C:\Windows\DirectX.log
2015-07-22 18:12 - 2015-05-22 22:21 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Origin
2015-07-16 10:32 - 2015-05-01 18:58 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 10:32 - 2015-05-01 18:58 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 12:29 - 2015-05-01 20:27 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-15 11:57 - 2015-05-01 20:27 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-14 22:44 - 2015-05-01 20:20 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Roaming\Skype
2015-07-13 11:24 - 2009-07-14 06:45 - 00438032 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-11 18:25 - 2015-05-01 20:26 - 00000000 ____D C:\Users\Bartek Mateusz\AppData\Local\Adobe

==================== Files in the root of some directories =======

2015-05-04 21:06 - 2015-07-26 23:01 - 0008192 _____ () C:\Users\Bartek Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-16 21:17 - 2015-06-16 21:17 - 0007609 _____ () C:\Users\Bartek Mateusz\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Bartek Mateusz\AppData\Local\Temp\Burn4Free.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkum5vf.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\i4jdel0.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\Napisy24.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\nvStInst.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\ose00000.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\Quarantine.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\sqlite3.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{04783E6E-6C60-4100-BB27-552E4BC65026}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{04C16DC8-D4BE-4C36-8D7C-F95DE8A48C91}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{30FA6F0A-B6CF-446F-8DB0-246D39554803}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{35E11711-0120-4818-8B64-80A3EB1F7469}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{3C309027-FAF8-45E2-A99A-1F1406D29FAE}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{3C5F4F6E-413A-420B-8F60-93B78A5E0E3B}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{3F869C7A-1926-4F1C-AAF0-42546D91D669}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{40209958-674C-429A-8450-1309963781AE}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{4761391F-2DF7-4E7D-923C-DF32AB7130DB}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{4A4338D3-0F56-4111-BC63-24C5AD556BB3}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{4BCDC207-130C-4903-ADD0-BBA3923468C5}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{532DD89A-59B2-42FC-A4AD-20BEDFD99DAB}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{5731B56B-F509-43C9-A1D5-1EE908F79CFD}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{5F6C0046-5AB9-41E8-889E-B3B2D87AA8A6}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{6B64885B-8BD1-4F67-995C-9D7FACFB1304}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{7D2C1F57-1000-46A6-BBCD-46B8420DE31F}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{87DC65BA-2C24-4DAC-94B7-BD320E95A48D}-43.0.2357.124_43.0.2357.81_chrome_updater.exe
C:\Users\Bartek Mateusz\AppData\Local\Temp\{8944E7DE-6EC1-4300-98D4-D25898D26939}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{9AF82929-FE94-43B1-A594-D77A6E28C233}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{B0FDE59A-7038-44A7-A522-F4707CB66308}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{B3B19E43-8FEC-4B64-8254-9B8D7166C140}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{B5235FB2-C166-4C26-8C80-994351EA44BB}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{BA013EF3-E89F-4660-BA32-3C03C61FC015}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{C53EA9CF-EDE0-4AAD-8040-1BFD2113CA7C}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{C884662E-06BB-4439-929A-64822470BBA5}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{CA6B6E76-C43F-4B2E-9AAF-8A7682D1E332}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{D280716B-E000-4687-8E94-A9D8F1B0F462}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{DAC386C3-AB3A-455A-9830-C57BA6A6DC28}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{E8EAD7ED-FAF3-4453-9D67-82269D9F51FE}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{EA485C42-4E4B-488D-9390-F81AA9410A7C}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{F7261EDD-0896-4E76-AF48-C12DB7C129E4}.dll
C:\Users\Bartek Mateusz\AppData\Local\Temp\{FB0442DC-6F11-4EC4-B5EF-84507A8DF696}.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-06 11:09

==================== End of log ============================
Sad
09-08-2015 20:58
Znajdź wszystkie posty użytkownika
jason Offline
Administrator
******
Administrators

Liczba postów: 445
Dołączył: Dec 2012
Reputacja: 19
Post: #4
RE: Reklamy/banery/ cała strona zawalona :(
Podałeś jedynie FRST.txt.

Brakuje raportu Addition.txt.

Pokaż dwa nowe raporty ale nie wklejaj ich do posta. Wrzuć je na zewnętrzny hosting plików tekstowych, np: wklej.org lub inny, a tu podaj jedynie do nich linki.

*****************************************

Pomoc jest bezpłatna, Dotacja to tylko Twój miły gest wdzięczności
09-08-2015 22:49
Znajdź wszystkie posty użytkownika
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #5
RE: Reklamy/banery/ cała strona zawalona :(
Proszę oto raporty.
http://wklej.to/B7EbK
http://wklej.to/JStrM
10-08-2015 21:42
Znajdź wszystkie posty użytkownika
jason Offline
Administrator
******
Administrators

Liczba postów: 445
Dołączył: Dec 2012
Reputacja: 19
Post: #6
RE: Reklamy/banery/ cała strona zawalona :(
Otwórz Notatnik i wklej tekst:

Kod:
Musisz być zalogowany, aby przeczytać ukrytą wiadomość

Plik zapisz pod nazwą fixlist.txt i umieść obok narzędzia FRST. Uruchom FRST i kliknij Fix.
Pokaż log z usuwania fixlog.txt.

Pobierz AdwCleaner i użyj z opcji Szukaj (Scan) a później Usuń (Clean).
Przeglądarka musi być zamknięta.
Pokaż raport.

Pobierz program Malwarebytes 'Anti-Malware (wersja darmowa).
Wykonaj skanowanie ale tylko i wyłącznie z podanej niżej opcji:
Skanowanie niestandardowe --> zaznacz wszystkie dyski oraz włącz wyszukiwanie rootkitów.
Skanowanie w takiej formie jest tu nezbędne z powodu kilku podejrzeń, o których nie będę pisał, abyś nie poszedł na skróty.
Skanuj i pokaż raport, o ile program coś znajdzie.

Na koniec pokaż nowe raporty z narzędzia FRST i opisz sytuację.

*****************************************

Pomoc jest bezpłatna, Dotacja to tylko Twój miły gest wdzięczności
11-08-2015 00:41
Znajdź wszystkie posty użytkownika
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #7
RE: Reklamy/banery/ cała strona zawalona :(
Oto raporty.
http://wklej.to/RGcHN
http://wklej.to/v45HG
http://wklej.to/LeFUS


Więc tak, reklamy nie mineło ,a wręcz wzrosły bo już nawet nie mg posta dodać na forum bo jak tylko klikne lub napisze zdanie to włącza się kolejna karta(reklama).
11-08-2015 21:37
Znajdź wszystkie posty użytkownika
jason Offline
Administrator
******
Administrators

Liczba postów: 445
Dołączył: Dec 2012
Reputacja: 19
Post: #8
RE: Reklamy/banery/ cała strona zawalona :(
Przeinstaluj przeglądarkę Opera bez zachowania ustawień i pokaż nowe raporty z FRST.

*****************************************

Pomoc jest bezpłatna, Dotacja to tylko Twój miły gest wdzięczności
11-08-2015 23:49
Znajdź wszystkie posty użytkownika
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #9
RE: Reklamy/banery/ cała strona zawalona :(
Nie wiem jakim cudem ,ale włączyłem rano komputer> przeglądarkę> i reklam zero :O !!!
Jak to możliwe ?! Big Grin
12-08-2015 14:52
Znajdź wszystkie posty użytkownika
jason Offline
Administrator
******
Administrators

Liczba postów: 445
Dołączył: Dec 2012
Reputacja: 19
Post: #10
RE: Reklamy/banery/ cała strona zawalona :(
Mnie tymczasem lekko zdziwiło, dlaczego jeszcze je widzisz pomimo prawidłowo wykonanego skryptu.
Skoro wszystko już gra, nowych raportów pokazywać nie musisz.

*****************************************

Pomoc jest bezpłatna, Dotacja to tylko Twój miły gest wdzięczności
12-08-2015 20:29
Znajdź wszystkie posty użytkownika
bolo66 Offline
Junior Member
**
Registered

Liczba postów: 6
Dołączył: Aug 2015
Reputacja: 0
Post: #11
RE: Reklamy/banery/ cała strona zawalona :(
Dziękuję za pomoc !
Smile
12-08-2015 21:42
Znajdź wszystkie posty użytkownika
Wątek zamknięty 


Skocz do:


Użytkownicy przeglądający ten wątek: 1 gości

Kontakt | BlackHats | Wróć do góry | Wróć do forów | Wersja bez grafiki | RSS
Bezpieczna strona stat4u