Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2013
Ran by daniel (administrator) on DANIEL-KOMPUTER on 06-09-2013 11:44:54
Running from C:\Users\daniel\Desktop
Microsoft Windows 7 Professional  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\system32\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(cake bake) C:\Program Files\Tepfel\WebCakeDesktop.Updater.exe
() C:\Users\daniel\AppData\Local\tuto4pc_pl_16\upt4pc_pl_16.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
() C:\Program Files\tuto4pc_pl_16\tuto4pc_pl_16.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Bake Cake) C:\Users\daniel\AppData\Roaming\Tepfel\WebCakeDesktop.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
() C:\Program Files\Opera\15.0.1147.153\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files\Opera\15.0.1147.153\opera.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [tuto4pc_pl_16] - C:\Program Files\tuto4pc_pl_16\tuto4pc_pl_16.exe [3977712 2013-07-30] ()
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\RunOnce: [upt4pc_pl_16.exe] - C:\Users\daniel\AppData\Local\tuto4pc_pl_16\upt4pc_pl_16.exe -runonce [3154416 2013-07-30] ()
HKLM\...\Policies\Explorer: [NoDriveAutoRun] 3
HKLM\...\Policies\Explorer: [NoDriveTypeAutoRun] 0
HKCU\...\Run: [WebCake Desktop] - C:\Users\daniel\AppData\Roaming\Tepfel\WebCakeDesktop.exe [52504 2013-08-10] (Bake Cake)
HKCU\...\Run: [Microsoft Windows System] - C:\Users\daniel\P-7-78-8964-9648-3874\windll.exe [48640 2013-08-28] ()
HKCU\...\Policies\Explorer: [NoDriveAutoRun] 3
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0
MountPoints2: {7b41fd9f-f067-11e2-8087-806e6f6e6963} - G:\Run.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=A69D94DE80204B83&affID=123621&tsp=4982
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=A69D94DE80204B83&affID=119357&tt=070813_wt3&tsp=4972
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A69D94DE80204B83&affID=123621&tsp=4982
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A69D94DE80204B83&affID=123621&tsp=4982
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
BHO: WebCake - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files\Tepfel\WebCakeIEClient.dll (Let Them Eat Web-Cake LLC)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Web Cake) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh\1.0.3_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_1
CHR Extension: (Gmail) - C:\Users\daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files\Tepfel\WebCakeLayers.crx

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-08-06] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838480 2013-08-13] ()
R2 WebCakeUpdater; C:\Program Files\Tepfel\WebCakeDesktop.Updater.exe [51992 2013-08-10] (cake bake)

==================== Drivers (Whitelisted) ====================

R3 amdhub30; C:\Windows\System32\DRIVERS\amdhub30.sys [83584 2012-03-30] (Advanced Micro Devices, INC.)
R3 amdxhc; C:\Windows\System32\DRIVERS\amdxhc.sys [176256 2012-03-30] (Advanced Micro Devices, INC.)
R0 amd_sata; C:\Windows\System32\DRIVERS\amd_sata.sys [70784 2012-04-11] (Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\DRIVERS\amd_xata.sys [34944 2012-04-11] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [19056 2012-03-08] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
S3 gdrv; \??\C:\Windows\gdrv.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-06 11:44 - 2013-09-06 11:44 - 00000000 ____D C:\FRST
2013-09-01 16:17 - 2013-09-01 16:18 - 00005129 _____ C:\UsbFix [Clean 1] DANIEL-KOMPUTER.txt
2013-09-01 16:16 - 2013-09-01 16:18 - 00000000 ____D C:\UsbFix
2013-09-01 16:16 - 2013-09-01 16:16 - 01144645 _____ (El Desaparecido - SosVirus.net) C:\Users\daniel\Desktop\UsbFix.exe
2013-09-01 16:16 - 2013-09-01 16:16 - 00007074 _____ C:\UsbFix [Listing 1 ] DANIEL-KOMPUTER.txt
2013-09-01 16:14 - 2013-09-01 16:14 - 00000000 ____D C:\_OTL
2013-09-01 16:11 - 2013-09-01 16:11 - 00074124 _____ C:\Users\daniel\Desktop\OTL.Txt
2013-09-01 16:11 - 2013-09-01 16:11 - 00035002 _____ C:\Users\daniel\Desktop\Extras.Txt
2013-09-01 16:08 - 2013-09-01 16:08 - 00602112 _____ (OldTimer Tools) C:\Users\daniel\Desktop\OTL.exe
2013-09-01 15:45 - 2013-09-01 16:43 - 00000000 ____D C:\Users\daniel\Desktop\Ania Peny
2013-08-28 18:28 - 2013-08-29 20:45 - 00000000 ____D C:\Users\daniel\Desktop\Stygmaty
2013-08-28 17:35 - 2013-08-28 17:35 - 00000069 _____ C:\Users\daniel\Desktop\Trailery Tekken.txt
2013-08-28 16:25 - 2013-08-28 16:25 - 00000000 ____D C:\ProgramData\id Software
2013-08-28 16:24 - 2013-08-28 16:24 - 02095104 _____ C:\Users\daniel\Desktop\QuakeLiveNP_520.msi
2013-08-28 15:06 - 2013-09-01 16:53 - 00000000 ____D C:\Users\daniel\AppData\Local\GHISLER
2013-08-28 15:05 - 2013-08-28 15:05 - 00000632 _____ C:\Users\daniel\Desktop\Total Commander.lnk
2013-08-28 15:05 - 2013-08-28 15:05 - 00000000 ____D C:\Users\daniel\AppData\Roaming\GHISLER
2013-08-28 15:05 - 2013-08-28 15:05 - 00000000 ____D C:\totalcmd
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\UC.PIF
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\RAR.PIF
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\PKZIP.PIF
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\PKUNZIP.PIF
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\LHA.PIF
2013-08-28 15:05 - 2012-08-03 08:01 - 00000545 _____ C:\Windows\ARJ.PIF
2013-08-28 15:02 - 2013-08-28 15:02 - 00000000 ____D C:\Users\daniel\P-7-78-8964-9648-3874
2013-08-25 15:26 - 2013-08-25 15:26 - 00000000 ____D C:\Users\daniel\AppData\Local\Microsoft Games
2013-08-25 15:25 - 2013-08-25 15:25 - 00000000 ____D C:\Program Files\Microsoft Games
2013-08-25 14:58 - 2013-08-25 14:58 - 00001087 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Opera Software
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Users\daniel\AppData\Local\Opera Software
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Program Files\Opera
2013-08-25 14:11 - 2013-08-25 14:18 - 31026832 _____ (Opera Software ASA) C:\Users\daniel\Desktop\Opera_15.0.1147.153_Setup.exe
2013-08-25 13:37 - 2013-09-06 11:42 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-25 13:37 - 2013-09-06 05:00 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-25 13:37 - 2013-09-04 22:46 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-25 13:32 - 2013-08-25 13:32 - 00784880 _____ (Google Inc.) C:\Users\daniel\Desktop\ChromeSetup.exe
2013-08-25 13:30 - 2013-08-25 13:30 - 00038684 _____ C:\Users\daniel\Desktop\bookmarks_25.08.2013.html
2013-08-23 12:11 - 2013-08-23 12:11 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-23 12:11 - 2013-08-23 12:11 - 00000000 ____D C:\Users\daniel\AppData\Local\avgchrome
2013-08-22 10:32 - 2013-09-04 10:28 - 00000000 ____D C:\Users\daniel\AppData\Roaming\ZipGenius
2013-08-22 10:32 - 2013-09-04 10:27 - 00000121 _____ C:\Users\daniel\AppData\Roaming\mainhst.zgh
2013-08-22 10:29 - 2013-08-22 10:29 - 03363691 _____ (PDFZilla, Inc.                                              ) C:\Users\daniel\Desktop\freepdfreader.exe
2013-08-22 10:29 - 2013-08-22 10:29 - 00000973 _____ C:\Users\Public\Desktop\Free PDF Reader.lnk
2013-08-22 10:29 - 2013-08-22 10:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\YcanPDF
2013-08-22 10:29 - 2013-08-22 10:29 - 00000000 ____D C:\Program Files\Free PDF Reader
2013-08-22 10:15 - 2013-08-22 10:15 - 00000000 ____D C:\Program Files\Microsoft Works
2013-08-22 10:15 - 2006-10-26 19:56 - 00032592 _____ (Microsoft Corporation) C:\Windows\system32\msonpmon.dll
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-08-22 10:13 - 2013-08-22 10:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-22 10:13 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 __RHD C:\MSOCache
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 ____D C:\Users\daniel\AppData\Local\Microsoft Help
2013-08-22 10:04 - 2013-09-06 09:03 - 00029696 _____ C:\Users\daniel\Desktop\sesja.xls
2013-08-20 11:34 - 2013-08-20 11:34 - 00000424 _____ C:\Users\daniel\Desktop\google.csv
2013-08-20 11:22 - 2013-08-20 11:22 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Macromedia
2013-08-20 11:22 - 2013-08-20 11:22 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Adobe
2013-08-20 11:07 - 2013-08-20 11:11 - 00000000 ____D C:\ProgramData\Nokia
2013-08-20 11:06 - 2013-09-06 10:56 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-20 11:06 - 2013-08-20 11:06 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-20 11:06 - 2013-08-20 11:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 11:06 - 2013-08-20 11:06 - 00000000 ____D C:\Windows\system32\Macromed
2013-08-20 11:04 - 2013-08-20 11:04 - 00001059 _____ C:\Users\Public\Desktop\ZipGenius 6.lnk
2013-08-20 11:04 - 2013-08-20 11:04 - 00000000 ____D C:\Program Files\ZipGenius 6
2013-08-20 11:00 - 2013-08-20 11:11 - 00000000 ____D C:\Program Files\Nokia
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Users\daniel\AppData\Roaming\PC Suite
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Nokia
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\ProgramData\PC Suite
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Program Files\PC Connectivity Solution
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Program Files\DIFX
2013-08-20 11:00 - 2012-06-11 11:33 - 00019072 _____ (Nokia) C:\Windows\system32\Drivers\pccsmcfd.sys
2013-08-20 11:00 - 2008-02-01 16:17 - 00090624 _____ (Nokia) C:\Windows\system32\nmwcdcls.dll
2013-08-20 10:59 - 2013-08-20 10:59 - 00000000 ____D C:\ProgramData\Installations
2013-08-19 11:55 - 2013-08-19 11:55 - 00000005 _____ C:\Users\daniel\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-08-12 11:55 - 2013-09-01 13:55 - 00000073 _____ C:\Users\daniel\AppData\Roaming\WB.CFG
2013-08-12 11:55 - 2013-09-01 13:55 - 00000005 _____ C:\Users\daniel\AppData\Roaming\WBPU-TTL.DAT
2013-08-12 10:29 - 2013-08-12 10:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Softland
2013-08-12 10:29 - 2010-11-25 11:41 - 00007549 _____ C:\Windows\system32\dopdf7.ctm
2013-08-12 10:29 - 2010-02-05 15:00 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2013-08-12 09:59 - 2013-08-12 09:59 - 00000000 ____D C:\Users\daniel\Qtrax
2013-08-12 09:55 - 2013-09-06 11:29 - 00000000 ____D C:\Users\daniel\AppData\Local\tuto4pc_pl_16
2013-08-12 09:55 - 2013-09-06 10:55 - 00000290 _____ C:\Windows\Tasks\DSite.job
2013-08-12 09:55 - 2013-09-06 10:15 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Tepfel
2013-08-12 09:55 - 2013-08-25 13:34 - 00000000 ____D C:\Users\daniel\AppData\Local\Lollipop
2013-08-12 09:55 - 2013-08-23 22:25 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-12 09:55 - 2013-08-22 10:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Babylon
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Windows\system32\searchplugins
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Windows\system32\Extensions
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\DSite
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Local\eorezo
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\ProgramData\Babylon
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\tuto4pc_pl_16
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Tepfel
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight

==================== One Month Modified Files and Folders =======

2013-09-06 11:44 - 2013-09-06 11:44 - 01081729 _____ (Farbar) C:\Users\daniel\Desktop\FRST.exe
2013-09-06 11:44 - 2013-09-06 11:44 - 00000000 ____D C:\FRST
2013-09-06 11:42 - 2013-08-25 13:37 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-06 11:29 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Local\tuto4pc_pl_16
2013-09-06 10:56 - 2013-08-20 11:06 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 10:55 - 2013-08-12 09:55 - 00000290 _____ C:\Windows\Tasks\DSite.job
2013-09-06 10:54 - 2009-07-14 06:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-06 10:54 - 2009-07-14 06:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-06 10:15 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Tepfel
2013-09-06 09:03 - 2013-08-22 10:04 - 00029696 _____ C:\Users\daniel\Desktop\sesja.xls
2013-09-06 08:54 - 2013-07-19 13:45 - 00478475 _____ C:\Windows\WindowsUpdate.log
2013-09-06 05:04 - 2013-07-19 13:48 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-06 05:04 - 2009-07-14 10:07 - 00737242 _____ C:\Windows\system32\perfh015.dat
2013-09-06 05:04 - 2009-07-14 10:07 - 00153930 _____ C:\Windows\system32\perfc015.dat
2013-09-06 05:00 - 2013-08-25 13:37 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-06 05:00 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 05:00 - 2009-07-14 06:39 - 00033203 _____ C:\Windows\setupact.log
2013-09-04 22:46 - 2013-08-25 13:37 - 00002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-04 10:28 - 2013-08-22 10:32 - 00000000 ____D C:\Users\daniel\AppData\Roaming\ZipGenius
2013-09-04 10:27 - 2013-08-22 10:32 - 00000121 _____ C:\Users\daniel\AppData\Roaming\mainhst.zgh
2013-09-01 16:53 - 2013-08-28 15:06 - 00000000 ____D C:\Users\daniel\AppData\Local\GHISLER
2013-09-01 16:43 - 2013-09-01 15:45 - 00000000 ____D C:\Users\daniel\Desktop\Ania Peny
2013-09-01 16:18 - 2013-09-01 16:17 - 00005129 _____ C:\UsbFix [Clean 1] DANIEL-KOMPUTER.txt
2013-09-01 16:18 - 2013-09-01 16:16 - 00000000 ____D C:\UsbFix
2013-09-01 16:16 - 2013-09-01 16:16 - 01144645 _____ (El Desaparecido - SosVirus.net) C:\Users\daniel\Desktop\UsbFix.exe
2013-09-01 16:16 - 2013-09-01 16:16 - 00007074 _____ C:\UsbFix [Listing 1 ] DANIEL-KOMPUTER.txt
2013-09-01 16:14 - 2013-09-01 16:14 - 00000000 ____D C:\_OTL
2013-09-01 16:11 - 2013-09-01 16:11 - 00074124 _____ C:\Users\daniel\Desktop\OTL.Txt
2013-09-01 16:11 - 2013-09-01 16:11 - 00035002 _____ C:\Users\daniel\Desktop\Extras.Txt
2013-09-01 16:08 - 2013-09-01 16:08 - 00602112 _____ (OldTimer Tools) C:\Users\daniel\Desktop\OTL.exe
2013-09-01 13:55 - 2013-08-12 11:55 - 00000073 _____ C:\Users\daniel\AppData\Roaming\WB.CFG
2013-09-01 13:55 - 2013-08-12 11:55 - 00000005 _____ C:\Users\daniel\AppData\Roaming\WBPU-TTL.DAT
2013-08-29 20:45 - 2013-08-28 18:28 - 00000000 ____D C:\Users\daniel\Desktop\Stygmaty
2013-08-29 17:24 - 2013-07-19 14:14 - 00007268 _____ C:\Windows\PFRO.log
2013-08-28 17:35 - 2013-08-28 17:35 - 00000069 _____ C:\Users\daniel\Desktop\Trailery Tekken.txt
2013-08-28 16:25 - 2013-08-28 16:25 - 00000000 ____D C:\ProgramData\id Software
2013-08-28 16:24 - 2013-08-28 16:24 - 02095104 _____ C:\Users\daniel\Desktop\QuakeLiveNP_520.msi
2013-08-28 15:05 - 2013-08-28 15:05 - 00000632 _____ C:\Users\daniel\Desktop\Total Commander.lnk
2013-08-28 15:05 - 2013-08-28 15:05 - 00000000 ____D C:\Users\daniel\AppData\Roaming\GHISLER
2013-08-28 15:05 - 2013-08-28 15:05 - 00000000 ____D C:\totalcmd
2013-08-28 15:02 - 2013-08-28 15:02 - 00000000 ____D C:\Users\daniel\P-7-78-8964-9648-3874
2013-08-28 15:02 - 2013-07-19 13:44 - 00000000 ____D C:\Users\daniel
2013-08-27 17:16 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-25 15:26 - 2013-08-25 15:26 - 00000000 ____D C:\Users\daniel\AppData\Local\Microsoft Games
2013-08-25 15:25 - 2013-08-25 15:25 - 00000000 ____D C:\Program Files\Microsoft Games
2013-08-25 14:58 - 2013-08-25 14:58 - 00001087 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Opera Software
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Users\daniel\AppData\Local\Opera Software
2013-08-25 14:58 - 2013-08-25 14:58 - 00000000 ____D C:\Program Files\Opera
2013-08-25 14:18 - 2013-08-25 14:11 - 31026832 _____ (Opera Software ASA) C:\Users\daniel\Desktop\Opera_15.0.1147.153_Setup.exe
2013-08-25 13:37 - 2013-07-19 14:06 - 00000000 ____D C:\Program Files\Google
2013-08-25 13:34 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Local\Lollipop
2013-08-25 13:32 - 2013-08-25 13:32 - 00784880 _____ (Google Inc.) C:\Users\daniel\Desktop\ChromeSetup.exe
2013-08-25 13:30 - 2013-08-25 13:30 - 00038684 _____ C:\Users\daniel\Desktop\bookmarks_25.08.2013.html
2013-08-23 22:25 - 2013-08-12 09:55 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-23 12:11 - 2013-08-23 12:11 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-23 12:11 - 2013-08-23 12:11 - 00000000 ____D C:\Users\daniel\AppData\Local\avgchrome
2013-08-22 10:29 - 2013-08-22 10:29 - 03363691 _____ (PDFZilla, Inc.                                              ) C:\Users\daniel\Desktop\freepdfreader.exe
2013-08-22 10:29 - 2013-08-22 10:29 - 00000973 _____ C:\Users\Public\Desktop\Free PDF Reader.lnk
2013-08-22 10:29 - 2013-08-22 10:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\YcanPDF
2013-08-22 10:29 - 2013-08-22 10:29 - 00000000 ____D C:\Program Files\Free PDF Reader
2013-08-22 10:29 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Babylon
2013-08-22 10:29 - 2013-07-19 14:32 - 00110784 _____ C:\Users\daniel\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-22 10:28 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-08-22 10:23 - 2009-07-14 06:33 - 00418272 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-22 10:15 - 2013-08-22 10:15 - 00000000 ____D C:\Program Files\Microsoft Works
2013-08-22 10:15 - 2013-08-22 10:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-22 10:15 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2013-08-22 10:15 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2013-08-22 10:14 - 2013-08-22 10:14 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-08-22 10:14 - 2013-08-22 10:13 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-22 10:14 - 2013-07-19 14:07 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-08-22 10:14 - 2009-07-14 10:28 - 00000000 ____D C:\Windows\ShellNew
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 __RHD C:\MSOCache
2013-08-22 10:13 - 2013-08-22 10:13 - 00000000 ____D C:\Users\daniel\AppData\Local\Microsoft Help
2013-08-22 10:13 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-22 10:13 - 2009-07-14 04:04 - 00000478 _____ C:\Windows\win.ini
2013-08-20 11:34 - 2013-08-20 11:34 - 00000424 _____ C:\Users\daniel\Desktop\google.csv
2013-08-20 11:22 - 2013-08-20 11:22 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Macromedia
2013-08-20 11:22 - 2013-08-20 11:22 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Adobe
2013-08-20 11:11 - 2013-08-20 11:07 - 00000000 ____D C:\ProgramData\Nokia
2013-08-20 11:11 - 2013-08-20 11:00 - 00000000 ____D C:\Program Files\Nokia
2013-08-20 11:10 - 2013-07-19 14:10 - 00034590 _____ C:\Windows\DPINST.LOG
2013-08-20 11:07 - 2013-07-19 13:44 - 00000000 ____D C:\Users\daniel\AppData\Local\VirtualStore
2013-08-20 11:06 - 2013-08-20 11:06 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-20 11:06 - 2013-08-20 11:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 11:06 - 2013-08-20 11:06 - 00000000 ____D C:\Windows\system32\Macromed
2013-08-20 11:04 - 2013-08-20 11:04 - 00001059 _____ C:\Users\Public\Desktop\ZipGenius 6.lnk
2013-08-20 11:04 - 2013-08-20 11:04 - 00000000 ____D C:\Program Files\ZipGenius 6
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Users\daniel\AppData\Roaming\PC Suite
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Nokia
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\ProgramData\PC Suite
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Program Files\PC Connectivity Solution
2013-08-20 11:00 - 2013-08-20 11:00 - 00000000 ____D C:\Program Files\DIFX
2013-08-20 10:59 - 2013-08-20 10:59 - 00000000 ____D C:\ProgramData\Installations
2013-08-19 11:55 - 2013-08-19 11:55 - 00000005 _____ C:\Users\daniel\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-08-19 00:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-08-12 10:29 - 2013-08-12 10:29 - 00000000 ____D C:\Users\daniel\AppData\Roaming\Softland
2013-08-12 09:59 - 2013-08-12 09:59 - 00000000 ____D C:\Users\daniel\Qtrax
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Windows\system32\searchplugins
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Windows\system32\Extensions
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\DSite
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Users\daniel\AppData\Local\eorezo
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\ProgramData\Babylon
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\tuto4pc_pl_16
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Tepfel
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-12 09:55 - 2013-08-12 09:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight

Files to move or delete:
====================
C:\Users\daniel\AppData\Local\Temp\MyDelta_sftnc.exe
C:\Users\daniel\AppData\Local\Temp\Notification.exe
C:\Users\daniel\AppData\Local\Temp\QtraxNotification.exe
C:\Users\daniel\AppData\Local\Temp\uninst1.exe
C:\Users\daniel\AppData\Local\Temp\tmp6688\silverlight.exe
C:\Users\daniel\AppData\Local\Temp\rmi\download-tcm801.exe
C:\Users\daniel\AppData\Local\Temp\isp6125.tmp\_Setup.dll
C:\Users\daniel\AppData\Local\Temp\is357113909\DeltaTB.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\LollipopInstaller.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\QtraxInstaller.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\QtraxNotification.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\Setup-D502DD2B71B5.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\Tuto4PC_Setup_PL.exe
C:\Users\daniel\AppData\Local\Temp\is357113909\uninstaller.exe
C:\Users\daniel\AppData\Local\Temp\is-GEPCU.tmp\babylon_download.exe
C:\Users\daniel\AppData\Local\Temp\is-8F7UM.tmp\innocallback.dll
C:\Users\daniel\AppData\Local\Temp\is-8F7UM.tmp\itdownload.dll
C:\Users\daniel\AppData\Local\Temp\is-8F7UM.tmp\_isetup\_shfoldr.dll
C:\Users\daniel\AppData\Local\Temp\is-138NT.tmp\package_babylon_installer_multilang.exe
C:\Users\daniel\AppData\Local\Temp\ir_ext_temp_0\autorun.exe
C:\Users\daniel\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Scripts\banish.exe
C:\Users\daniel\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Scripts\hosts.exe
C:\Users\daniel\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Scripts\touch.exe
C:\Users\daniel\AppData\Local\Temp\IDC2.tmp\FP_AX_CAB_INSTALLER64.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\BabMaint.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\BExternal.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\BUSolForMontiera.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\BUSolution.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\ccp.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\ChromeToolbarSetup.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\CrxInstaller.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\GUninstaller.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\IEHelper.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\MntrDLLInstall.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\MyDeltaTB.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\NTRedirect.dll
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\Setup.exe
C:\Users\daniel\AppData\Local\Temp\C1FAEC7A-BAB0-7891-9D79-FBBBAA93CAA8\Latest\sqlite3.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\BabMaint.exe
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\BExternal.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\BUSolForMontiera.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\BUSolution.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\ChromeToolbarSetup.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\enhancedNT.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\IEHelper.dll
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\Setup.exe
C:\Users\daniel\AppData\Local\Temp\91C077FD-BAB0-7891-A9F2-5C704F28395D\Latest\sqlite3.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\BabMaint.exe
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\BUSolForMontiera.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\BUSolution.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\ccp.exe
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\ChromeToolbarSetup.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\CrxInstaller.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\enhancedNT.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\GUninstaller.exe
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\MntrDLLInstall.dll
C:\Users\daniel\AppData\Local\Temp\3DE50A9B-BAB0-7891-B137-642AFE624501\MyBabylonTB.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 14:50

==================== End Of Log ============================