Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Olga Wiesio (administrator) on OLGAWIESIO on 11-10-2013 20:54:01
Running from C:\Users\Olga Wiesio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\12IEMZ5W
Windows 8 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
() C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\windows\system32\igfxext.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
() C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BusinessEverywhere.exe
() C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\SMSNotifier.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [zLoader.exe] - "C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\zLoader.exe"
HKLM\...\Run: [CancelAutoPlay.exe] - "C:\Program Files (x86)\Cyfrowy Polsat\MF821\Bin\CancelAutoPlay.exe"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {84802d7d-08df-11e3-be98-50b7c3fef9ce} - "F:\MicroLauncher.exe" 
MountPoints2: {91eced1f-08e6-11e3-be99-50b7c3fef9ce} - "E:\MicroLauncher.exe" 
MountPoints2: {d1b0e61d-024f-11e3-be8f-50b7c3fef9ce} - "E:\AutoRun.exe" /s
MountPoints2: {d3995f4f-0753-11e3-be97-50b7c3fef9ce} - "E:\MicroLauncher.exe" 
MountPoints2: {d3996072-0753-11e3-be97-50b7c3fef9ce} - "E:\MicroLauncher.exe" 
MountPoints2: {fbbdb984-08ef-11e3-be9c-50b7c3fef9ce} - "E:\Setup.exe" 
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [OrderReminder] - C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe [98304 2006-01-30] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [Start_BusinessEverywhere_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BusinessEverywhere.exe [3443168 2012-12-13] ()
HKLM-x32\...\Run: [Start_Update_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\UpdteApp.exe [981960 2012-12-13] ()
HKLM-x32\...\Run: [Start_SMSNotifier_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\SMSNotifier.exe [1375696 2012-12-13] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [GProton] - %ALLUSERSPROFILE%\GProton.exe
Startup: C:\Users\Olga Wiesio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/
SearchScopes: HKLM - DefaultScope {3CD242FD-3221-4896-B3F0-1AB473ED083A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {3CD242FD-3221-4896-B3F0-1AB473ED083A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {3CD242FD-3221-4896-B3F0-1AB473ED083A} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {42168F92-DA71-42E6-BC7F-132EAC1F1899} URL = http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q={searchTerms}&sa=Search&siteurl=qooqlle.com%2F <===== ATTENTION
SearchScopes: HKCU - {3CD242FD-3221-4896-B3F0-1AB473ED083A} URL = 
SearchScopes: HKCU - {42168F92-DA71-42E6-BC7F-132EAC1F1899} URL = http://www.google.com/cse?cx=partner-pub-5462406484424654%3A8q0sn8-w2ss&ie=ISO-8859-1&q={searchTerms}&sa=Search&siteurl=qooqlle.com%2F <===== ATTENTION
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: searchgol Helper Object - {8F547BDD-FCD4-48F8-A06F-573D6F404A3C} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\bh\searchgol.dll (Montera Technologeis LTD)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - searchgol Toolbar - {00078E95-3A4A-4137-8DE7-2824908D1C17} - C:\Program Files (x86)\searchgol\searchgol\1.8.16.19\searchgolTlbr.dll (Montera Technologeis LTD)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 217.116.104.104 217.116.100.100

FireFox:
========
FF ProfilePath: C:\Users\Olga Wiesio\AppData\Roaming\Mozilla\Firefox\Profiles\qbgisrg1.default
FF user.js: detected! => C:\Users\Olga Wiesio\AppData\Roaming\Mozilla\Firefox\Profiles\qbgisrg1.default\user.js
FF DefaultSearchEngine: qooqlle
FF SelectedSearchEngine: qooqlle
FF Homepage: https://www.google.pl/
FF NetworkProxy: "backup.ftp", "127.0.0.1"
FF NetworkProxy: "backup.ftp_port", 9666
FF NetworkProxy: "backup.gopher", "127.0.0.1"
FF NetworkProxy: "backup.gopher_port", 9666
FF NetworkProxy: "backup.socks", "127.0.0.1"
FF NetworkProxy: "backup.socks_port", 9666
FF NetworkProxy: "backup.ssl", "127.0.0.1"
FF NetworkProxy: "backup.ssl_port", 9666
FF NetworkProxy: "ftp", "127.0.0.1"
FF NetworkProxy: "ftp_port", 9666
FF NetworkProxy: "gopher", "127.0.0.1"
FF NetworkProxy: "gopher_port", 9666
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 9666
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "127.0.0.1"
FF NetworkProxy: "socks_port", 9666
FF NetworkProxy: "ssl", "127.0.0.1"
FF NetworkProxy: "ssl_port", 9666
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Olga Wiesio\AppData\Roaming\Mozilla\Firefox\Profiles\qbgisrg1.default\searchplugins\search.xml
FF SearchPlugin: C:\Users\Olga Wiesio\AppData\Roaming\Mozilla\Firefox\Profiles\qbgisrg1.default\searchplugins\searchgol.xml
FF Extension: SearchGol - C:\Users\Olga Wiesio\AppData\Roaming\Mozilla\Firefox\Profiles\qbgisrg1.default\Extensions\ffxtlbr@searchgol.com
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF

Chrome: 
=======
CHR HomePage: hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=98372089841BD620&affID=125032&tsp=5032
CHR RestoreOnStartup: "hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=98372089841BD620&affID=125032&tsp=5032"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Extension: (Search-Gol Toolbar) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac\1.0_0
CHR Extension: (Google Docs) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Norton Identity Protection) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Olga Wiesio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [aipfmkinhleccnodemkoofnnofpbbpac] - C:\Users\Olga Wiesio\AppData\Roaming\BabSolution\CR\searchgol.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171664 2012-11-06] (Adobe Systems Incorporated)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 BEWConfigSrv; C:\Program Files (x86)\OrangeBusinessServices\Business Everywhere\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe [195536 2012-12-13] ()
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3017776 2013-07-12] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [222360 2012-12-05] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2012-12-05] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20131010.001\IDSvia64.sys [520280 2013-10-09] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20131010.001\IDSvia64.sys [520280 2013-10-09] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131010.023\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131010.023\ENG64.SYS [126040 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131010.023\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20131010.023\EX64.SYS [2099288 2013-08-29] (Symantec Corporation)
R3 orange_zte_cdc_acm; C:\Windows\system32\DRIVERS\orange_zte_cdc_acm.sys [77824 2012-12-13] (ZTE)
R3 orange_zte_cdc_ecm; C:\Windows\system32\DRIVERS\orange_zte_cdc_ecm.sys [36352 2012-12-13] (ZTE)
R3 orange_zte_ecm_enum; C:\Windows\System32\drivers\orange_zte_ecm_enum.sys [52224 2012-12-13] (ZTE)
R3 orange_zte_ecm_enum_filter; C:\Windows\System32\drivers\orange_zte_ecm_enum_filter.sys [52224 2012-12-13] (ZTE)
S3 orange_zte_wcpo; C:\Windows\system32\DRIVERS\orange_zte_wcpo.sys [10752 2012-12-13] (ZTE)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-20] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-08-13] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [x]
S3 massfilter_lte; \??\C:\windows\system32\drivers\massfilter_lte.sys [x]
S3 RSUSBVSTOR; \SystemRoot\System32\Drivers\RtsUVStor.sys [x]
U2 wuaserv; 
S3 zgdcat; \SystemRoot\system32\DRIVERS\zgdcat.sys [x]
S3 zgdcdiag; \SystemRoot\system32\DRIVERS\zgdcdiag.sys [x]
S3 zgdcmdm; \SystemRoot\system32\DRIVERS\zgdcmdm.sys [x]
S3 zgdcnet; \SystemRoot\system32\DRIVERS\zgdcnet.sys [x]
S3 zgdcnmea; \SystemRoot\system32\DRIVERS\zgdcnmea.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-11 20:53 - 2013-10-11 20:53 - 00000000 ____D C:\FRST
2013-10-11 20:48 - 2013-10-11 20:48 - 00000000 ___RD C:\Users\Olga Wiesio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-10-11 20:33 - 2013-10-11 20:33 - 00003422 _____ C:\windows\System32\Tasks\EPUpdater
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\searchgol
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\BabSolution
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Program Files (x86)\searchgol
2013-10-11 20:32 - 2013-10-11 20:32 - 00000000 ____D C:\ProgramData\Babylon
2013-10-11 20:09 - 2013-10-11 20:53 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (6)
2013-10-11 19:48 - 2013-10-11 19:48 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\dysk
2013-10-11 10:38 - 2013-10-11 10:41 - 25563472 _____ (                                   ) C:\Users\Olga Wiesio\Downloads\AdbeRdr910_pl_PL.exe
2013-10-11 10:32 - 2013-10-11 10:32 - 00685248 _____ C:\Users\Olga Wiesio\Downloads\Adobe-Reader(12627).exe
2013-10-11 08:26 - 2013-10-11 08:27 - 39057384 _____ (Microsoft Corporation) C:\Users\Olga Wiesio\Downloads\FileFormatConverters.exe
2013-10-10 22:46 - 2013-10-10 22:46 - 00000000 _____ C:\Users\Olga Wiesio\agent.log
2013-10-10 15:52 - 2013-10-10 15:52 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-10-10 15:50 - 2013-10-10 15:50 - 03326400 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 00:03 - 2013-10-02 03:38 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-10 00:03 - 2013-10-02 03:38 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 22:50 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 22:50 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 22:50 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 22:50 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 22:50 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 22:50 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 22:50 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 22:50 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 22:50 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 22:50 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 22:50 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 22:50 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 22:50 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 22:50 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 22:50 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 22:50 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 22:50 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 22:50 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 22:50 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 22:50 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 22:50 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 22:50 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 22:50 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 22:50 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 22:50 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 22:50 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 22:50 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 22:50 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 22:50 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 22:50 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 22:49 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 22:49 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 22:49 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 22:44 - 2013-08-23 07:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 22:44 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 22:44 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 22:44 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 22:44 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 22:44 - 2013-07-02 03:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 22:44 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 22:44 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 22:44 - 2013-07-02 00:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys
2013-10-09 22:44 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 22:44 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 22:44 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 22:44 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 22:44 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 22:44 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 22:44 - 2013-06-29 05:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 22:44 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 22:44 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 22:44 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 22:44 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 22:44 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 22:44 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 22:44 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 22:44 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-09 15:29 - 2013-10-09 15:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-09 15:03 - 2013-10-09 15:03 - 00000000 ____D C:\windows\erdnt
2013-10-09 15:02 - 2013-10-09 15:04 - 00000000 ___SD C:\32788R22FWJFW
2013-10-09 11:09 - 2013-10-09 11:09 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\searchplugins
2013-10-09 11:02 - 2013-10-09 12:13 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\NPE
2013-10-09 10:13 - 2003-06-23 02:44 - 01415680 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMV9VCM.dll
2013-10-09 10:13 - 2003-04-21 15:09 - 00245408 _____ (Microsoft Corporation) C:\windows\SysWOW64\unicows.dll
2013-10-09 10:13 - 2002-08-20 01:41 - 00413760 _____ (Microsoft Corporation) C:\windows\SysWOW64\mpg4c32.dll
2013-10-09 10:13 - 2002-01-05 13:37 - 00344064 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr70.dll
2013-10-09 10:13 - 2001-09-17 13:20 - 00019968 _____ C:\windows\SysWOW64\cpuinf32.dll
2013-10-08 19:06 - 2013-10-08 19:06 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Media Player Classic
2013-10-08 19:04 - 2013-10-08 19:04 - 07793152 __RSH C:\ProgramData\GProton.exe
2013-10-08 19:04 - 2010-03-15 11:31 - 00165376 _____ C:\windows\SysWOW64\unrar.dll
2013-10-08 08:37 - 2013-10-08 08:37 - 00000000 ____D C:\Users\Olga Wiesio\Documents\Fax
2013-10-07 20:52 - 2013-10-11 09:44 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (5)
2013-10-07 14:13 - 2013-10-07 14:17 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\monety
2013-10-06 12:05 - 2013-10-10 22:48 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zd na stronę
2013-10-05 15:49 - 2013-10-05 15:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-10-03 20:18 - 2013-10-03 20:20 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\laptop
2013-10-03 10:42 - 2013-10-03 10:43 - 00001646 _____ C:\Users\Olga Wiesio\certyfikat
2013-10-03 10:31 - 2013-10-03 10:31 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00000000 ____D C:\ProgramData\Sun
2013-10-03 10:31 - 2013-10-03 10:31 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-03 10:14 - 2013-10-03 10:31 - 00000000 ____D C:\ProgramData\Oracle
2013-10-03 08:38 - 2013-10-03 08:38 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-09-26 04:01 - 2013-09-26 04:30 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\od Agnieszki
2013-09-24 19:36 - 2013-09-24 19:37 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (4)
2013-09-24 15:56 - 2013-09-29 21:03 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\2013-09 (wrz)
2013-09-23 14:19 - 2013-09-23 14:19 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\Ahead
2013-09-23 10:53 - 2013-10-03 08:35 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\odbiory
2013-09-23 10:47 - 2013-09-23 10:48 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\rysunki
2013-09-23 09:01 - 2013-09-24 18:37 - 00000000 ____D C:\Program Files (x86)\Ahead
2013-09-23 09:01 - 2013-09-23 09:01 - 00000000 ____D C:\ProgramData\Ahead
2013-09-23 09:01 - 2004-07-26 17:16 - 01568768 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\ImagX7.dll
2013-09-23 09:01 - 2004-07-26 17:16 - 00476320 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\ImagXpr7.dll
2013-09-23 09:01 - 2004-07-26 17:16 - 00471040 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\ImagXRA7.dll
2013-09-23 09:01 - 2004-07-26 17:16 - 00262144 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\ImagXR7.dll
2013-09-23 09:01 - 2004-07-09 09:43 - 00364544 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\TwnLib4.dll
2013-09-23 09:01 - 2001-06-26 08:15 - 00038912 ____N (Pegasus Imaging Corp.) C:\windows\SysWOW64\picn20.dll
2013-09-23 09:01 - 2000-06-26 11:45 - 00106496 _____ (Pegasus Software) C:\windows\SysWOW64\TwnLib20.dll
2013-09-22 21:35 - 2013-09-22 21:38 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zdjecia zlobek
2013-09-21 23:53 - 2013-09-21 23:53 - 00490511 _____ C:\Users\Olga Wiesio\Desktop\zdjecia Arturek Lidia.zip
2013-09-16 18:45 - 2013-09-19 19:39 - 00000000 ____D C:\Program Files\Google
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\IrfanView
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-09-13 15:37 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\windows\system32\WSService.dll
2013-09-13 15:37 - 2013-08-16 07:32 - 00209200 _____ (Microsoft Corporation) C:\windows\system32\NotificationUI.exe
2013-09-13 15:37 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\windows\system32\sppsvc.exe
2013-09-13 15:37 - 2013-08-16 07:21 - 03275776 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2013-09-13 15:37 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\windows\system32\sppobjs.dll
2013-09-13 15:37 - 2013-08-16 07:21 - 00773120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2013-09-13 15:37 - 2013-08-16 07:21 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll
2013-09-13 15:37 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\windows\system32\sppwinob.dll
2013-09-13 15:37 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\windows\system32\sppc.dll
2013-09-13 15:37 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2013-09-13 15:37 - 2013-08-16 00:43 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll
2013-09-13 15:37 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\windows\SysWOW64\sppc.dll
2013-09-13 15:36 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dam.sys
2013-09-13 15:36 - 2013-08-16 07:39 - 00059416 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2013-09-13 15:36 - 2013-08-16 07:22 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2013-09-13 15:36 - 2013-08-16 07:21 - 01621504 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00252416 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\WSClient.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\WSSync.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00174592 _____ (Microsoft Corporation) C:\windows\system32\storewuauth.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00142848 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\setupcln.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2013-09-13 15:36 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00628736 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSClient.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSSync.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00143872 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00084992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00083968 _____ C:\windows\SysWOW64\OEMLicense.dll
2013-09-13 15:36 - 2013-08-16 00:43 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2013-09-13 15:36 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2013-09-13 15:36 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\windows\SysWOW64\setupcln.dll
2013-09-13 15:36 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msgpioclx.sys
2013-09-13 15:36 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\windows\system32\WerFault.exe
2013-09-13 15:36 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\windows\SysWOW64\WerFault.exe
2013-09-13 15:36 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\windows\SysWOW64\LocationApi.dll
2013-09-13 15:36 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\windows\system32\wwanmm.dll
2013-09-13 15:36 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\windows\system32\wwanconn.dll
2013-09-13 15:36 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\windows\system32\Wwanadvui.dll
2013-09-13 15:36 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\windows\system32\LocationApi.dll
2013-09-13 15:36 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2013-09-13 15:36 - 2013-07-03 02:23 - 00778752 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2013-09-13 15:36 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-09-13 15:36 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll
2013-09-13 15:36 - 2013-07-03 02:22 - 01300480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-09-13 15:36 - 2013-07-03 02:11 - 00551424 _____ (Microsoft Corporation) C:\windows\SysWOW64\oleaut32.dll
2013-09-13 15:36 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-09-13 15:36 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll
2013-09-13 15:36 - 2013-07-02 00:08 - 00387583 _____ C:\windows\system32\ApnDatabase.xml
2013-09-13 15:36 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\windows\SysWOW64\openfiles.exe
2013-09-13 15:36 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\openfiles.exe
2013-09-13 15:36 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\sdbus.sys
2013-09-13 15:36 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dumpsd.sys
2013-09-13 15:36 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Classpnp.sys
2013-09-13 15:36 - 2013-06-29 03:12 - 01022464 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-09-13 15:36 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\udfs.sys
2013-09-13 15:36 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\Drivers\HdAudio.sys
2013-09-13 15:36 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2013-09-13 15:36 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\windows\system32\wcmsvc.dll
2013-09-13 15:36 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\windows\system32\wcmcsp.dll
2013-09-13 15:36 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\windows\system32\winmmbase.dll
2013-09-13 15:36 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\winmm.dll
2013-09-13 15:36 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmmbase.dll
2013-09-13 15:36 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\winmm.dll
2013-09-13 15:36 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\windows\SysWOW64\WinSCard.dll
2013-09-13 15:36 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\windows\system32\WinSCard.dll
2013-09-13 15:36 - 2013-06-10 23:17 - 00096512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\wfplwfs.sys
2013-09-13 15:36 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-09-13 15:36 - 2013-06-10 21:15 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-09-13 15:36 - 2013-06-10 21:15 - 00723968 _____ (Microsoft Corporation) C:\windows\system32\BFE.DLL
2013-09-13 15:36 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-09-13 15:36 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-09-13 15:36 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-09-13 15:36 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBSTOR.SYS
2013-09-13 15:20 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\tssdisai.dll
2013-09-12 21:36 - 2013-09-12 21:36 - 00000789 _____ C:\Users\Public\Desktop\ASGRAF EuroTEST 2013.lnk
2013-09-12 21:31 - 2013-09-12 21:31 - 00000000 ____D C:\ASGRAF

==================== One Month Modified Files and Folders =======

2013-10-11 20:54 - 2013-08-22 06:44 - 00001080 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-11 20:53 - 2013-10-11 20:53 - 00000000 ____D C:\FRST
2013-10-11 20:53 - 2013-10-11 20:09 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (6)
2013-10-11 20:51 - 2013-01-25 02:56 - 00000000 ____D C:\ProgramData\WinClon
2013-10-11 20:49 - 2013-08-28 09:15 - 00005138 _____ C:\windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for OlgaWiesio-Olga Wiesio OlgaWiesio
2013-10-11 20:48 - 2013-10-11 20:48 - 00000000 ___RD C:\Users\Olga Wiesio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-10-11 20:48 - 2013-08-22 06:44 - 00001076 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-11 20:48 - 2013-01-25 02:47 - 00000868 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-10-11 20:48 - 2012-07-26 09:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-11 20:46 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-11 20:33 - 2013-10-11 20:33 - 00003422 _____ C:\windows\System32\Tasks\EPUpdater
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\searchgol
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\BabSolution
2013-10-11 20:33 - 2013-10-11 20:33 - 00000000 ____D C:\Program Files (x86)\searchgol
2013-10-11 20:32 - 2013-10-11 20:32 - 00000000 ____D C:\ProgramData\Babylon
2013-10-11 20:18 - 2013-01-25 02:00 - 02008653 _____ C:\windows\WindowsUpdate.log
2013-10-11 20:00 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\sru
2013-10-11 19:50 - 2013-01-25 19:33 - 00795984 _____ C:\windows\system32\perfh015.dat
2013-10-11 19:50 - 2013-01-25 19:33 - 00160066 _____ C:\windows\system32\perfc015.dat
2013-10-11 19:50 - 2012-07-26 09:28 - 01796820 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-11 19:48 - 2013-10-11 19:48 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\dysk
2013-10-11 19:48 - 2013-08-21 07:50 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-11 14:52 - 2013-08-20 20:55 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\opieka
2013-10-11 10:41 - 2013-10-11 10:38 - 25563472 _____ (                                   ) C:\Users\Olga Wiesio\Downloads\AdbeRdr910_pl_PL.exe
2013-10-11 10:32 - 2013-10-11 10:32 - 00685248 _____ C:\Users\Olga Wiesio\Downloads\Adobe-Reader(12627).exe
2013-10-11 09:44 - 2013-10-07 20:52 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (5)
2013-10-11 09:37 - 2013-08-20 21:02 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\ulotki
2013-10-11 08:43 - 2013-08-20 20:55 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\DOKUMENTY NA STRONE
2013-10-11 08:34 - 2012-07-26 10:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-11 08:27 - 2013-10-11 08:26 - 39057384 _____ (Microsoft Corporation) C:\Users\Olga Wiesio\Downloads\FileFormatConverters.exe
2013-10-10 22:48 - 2013-10-06 12:05 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zd na stronę
2013-10-10 22:46 - 2013-10-10 22:46 - 00000000 _____ C:\Users\Olga Wiesio\agent.log
2013-10-10 22:46 - 2013-08-10 15:41 - 00000000 ____D C:\Users\Olga Wiesio
2013-10-10 22:45 - 2012-08-05 23:07 - 00026102 _____ C:\windows\PFRO.log
2013-10-10 22:25 - 2013-08-29 14:03 - 00000000 ____D C:\Program Files (x86)\SmartClient
2013-10-10 15:53 - 2012-07-26 07:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-10-10 15:52 - 2013-10-10 15:52 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-10-10 15:50 - 2013-10-10 15:50 - 03326400 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 08:14 - 2013-08-10 15:48 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4118013680-3836196915-2330699128-1001
2013-10-10 00:05 - 2013-08-16 16:08 - 00000000 ____D C:\windows\system32\MRT
2013-10-10 00:04 - 2013-08-14 20:31 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-09 23:49 - 2013-08-10 15:41 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\Packages
2013-10-09 16:00 - 2013-01-25 02:58 - 00000000 ____D C:\ProgramData\Adobe
2013-10-09 16:00 - 2013-01-25 02:58 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-09 15:39 - 2012-07-26 09:21 - 00042109 _____ C:\windows\setupact.log
2013-10-09 15:38 - 2013-01-25 01:59 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-09 15:29 - 2013-10-09 15:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-09 15:29 - 2013-08-20 16:54 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Mozilla
2013-10-09 15:19 - 2013-01-25 03:03 - 00000000 ____D C:\ProgramData\CyberLink
2013-10-09 15:04 - 2013-10-09 15:02 - 00000000 ___SD C:\32788R22FWJFW
2013-10-09 15:03 - 2013-10-09 15:03 - 00000000 ____D C:\windows\erdnt
2013-10-09 14:50 - 2013-08-21 07:50 - 00003818 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 12:13 - 2013-10-09 11:02 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\NPE
2013-10-09 11:09 - 2013-10-09 11:09 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\searchplugins
2013-10-09 11:02 - 2013-01-25 02:52 - 00000000 ____D C:\ProgramData\Norton
2013-10-09 10:14 - 2013-08-10 15:42 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\CrashDumps
2013-10-09 10:12 - 2012-07-26 10:12 - 00000000 ____D C:\windows\Help
2013-10-08 19:17 - 2013-08-17 15:49 - 00000000 ____D C:\Users\Public\CyberLink
2013-10-08 19:06 - 2013-10-08 19:06 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Media Player Classic
2013-10-08 19:05 - 2013-08-10 15:42 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\VirtualStore
2013-10-08 19:04 - 2013-10-08 19:04 - 07793152 __RSH C:\ProgramData\GProton.exe
2013-10-08 13:49 - 2013-08-22 06:44 - 00004052 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-08 13:49 - 2013-08-22 06:44 - 00003816 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 08:38 - 2012-07-26 10:12 - 00000000 ____D C:\windows\system32\FxsTmp
2013-10-08 08:37 - 2013-10-08 08:37 - 00000000 ____D C:\Users\Olga Wiesio\Documents\Fax
2013-10-07 14:17 - 2013-10-07 14:13 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\monety
2013-10-07 12:52 - 2013-08-29 16:19 - 00014034 _____ C:\Users\Olga Wiesio\Desktop\cennik dzieci.xlsx
2013-10-07 12:32 - 2013-01-25 02:47 - 00000870 _____ C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-10-06 15:05 - 2013-08-20 16:54 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\Mozilla
2013-10-06 12:39 - 2013-08-20 21:20 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\moje dokumenty
2013-10-05 15:49 - 2013-10-05 15:49 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-10-04 12:14 - 2013-08-20 21:02 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\wydatki
2013-10-03 20:20 - 2013-10-03 20:18 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\laptop
2013-10-03 10:43 - 2013-10-03 10:42 - 00001646 _____ C:\Users\Olga Wiesio\certyfikat
2013-10-03 10:31 - 2013-10-03 10:31 - 00868264 _____ (Oracle Corporation) C:\windows\SysWOW64\npDeployJava1.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00790440 _____ (Oracle Corporation) C:\windows\SysWOW64\deployJava1.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-10-03 10:31 - 2013-10-03 10:31 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-03 10:31 - 2013-10-03 10:31 - 00000000 ____D C:\ProgramData\Sun
2013-10-03 10:31 - 2013-10-03 10:31 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-03 10:31 - 2013-10-03 10:14 - 00000000 ____D C:\ProgramData\Oracle
2013-10-03 08:38 - 2013-10-03 08:38 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-10-03 08:38 - 2013-08-10 15:42 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Adobe
2013-10-03 08:35 - 2013-09-23 10:53 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\odbiory
2013-10-02 03:38 - 2013-10-10 00:03 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-02 03:38 - 2013-10-10 00:03 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-01 22:57 - 2013-08-20 21:39 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zdjecia
2013-10-01 08:10 - 2013-08-20 20:55 - 00034304 _____ C:\Users\Olga Wiesio\Desktop\godziny pracownikow.xls
2013-09-30 21:20 - 2013-08-11 08:17 - 00000000 ____D C:\ProgramData\HP
2013-09-29 22:38 - 2013-08-20 21:14 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zdjecia do30czerwca
2013-09-29 21:03 - 2013-09-24 15:56 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\2013-09 (wrz)
2013-09-26 04:30 - 2013-09-26 04:01 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\od Agnieszki
2013-09-24 19:37 - 2013-09-24 19:36 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\Nowy folder (4)
2013-09-24 18:37 - 2013-09-23 09:01 - 00000000 ____D C:\Program Files (x86)\Ahead
2013-09-23 14:19 - 2013-09-23 14:19 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\Ahead
2013-09-23 10:48 - 2013-09-23 10:47 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\rysunki
2013-09-23 09:01 - 2013-09-23 09:01 - 00000000 ____D C:\ProgramData\Ahead
2013-09-23 01:28 - 2013-10-09 22:50 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 22:50 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 22:50 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 22:50 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 22:50 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 22:50 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 22:50 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 22:49 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-23 00:55 - 2013-10-09 22:50 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 22:50 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 22:50 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 22:50 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 22:50 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 22:50 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 22:50 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 22:50 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 22:50 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-22 21:38 - 2013-09-22 21:35 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\zdjecia zlobek
2013-09-21 23:53 - 2013-09-21 23:53 - 00490511 _____ C:\Users\Olga Wiesio\Desktop\zdjecia Arturek Lidia.zip
2013-09-20 11:45 - 2013-08-20 20:55 - 00000000 ____D C:\Users\Olga Wiesio\Desktop\atesty certyfikaty
2013-09-19 19:39 - 2013-09-16 18:45 - 00000000 ____D C:\Program Files\Google
2013-09-19 19:39 - 2013-08-21 21:35 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-18 20:20 - 2013-08-21 21:34 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Local\Google
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Users\Olga Wiesio\AppData\Roaming\IrfanView
2013-09-16 18:44 - 2013-09-16 18:44 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-09-14 19:48 - 2012-07-26 10:12 - 00000000 ____D C:\windows\rescache
2013-09-14 15:05 - 2012-07-26 10:12 - 00000000 ____D C:\windows\WinStore
2013-09-14 15:05 - 2012-07-26 10:12 - 00000000 ____D C:\windows\PolicyDefinitions
2013-09-14 15:04 - 2012-07-26 07:38 - 00000000 ____D C:\windows\system32\oobe
2013-09-12 21:36 - 2013-09-12 21:36 - 00000789 _____ C:\Users\Public\Desktop\ASGRAF EuroTEST 2013.lnk
2013-09-12 21:31 - 2013-09-12 21:31 - 00000000 ____D C:\ASGRAF

Files to move or delete:
====================
C:\ProgramData\GProton.exe
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe


Some content of TEMP:
====================
C:\Users\Olga Wiesio\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 08:14

==================== End Of Log ============================