Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-10-2013
Ran by Kasia (administrator) on KASIA-KOMPUTER on 20-10-2013 22:11:06
Running from G:\
Windows 7 Professional Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18678376 2013-04-19] (Skype Technologies S.A.)
HKCU\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKCU\...\Run: [EPSON B1100 Series] - C:\Windows\TEMP\E_SD3BE.tmp [140 2012-03-30] ()
MountPoints2: F - F:\AidemMediaSplash.exe
MountPoints2: {e8b20f26-7bd4-11e1-b1df-20cf30484bab} - G:\V-Secure.exe
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchgol.com/?babsrc=HP_ss&mntrId=B85C74F06D913930&affID=123627&tt=240913_91213&tsp=5019
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=ism&from=ism&uid=ST9320325AS_5VD52MQD____5VD52MQD&ts=1350535265
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=ism&from=ism&uid=ST9320325AS_5VD52MQD____5VD52MQD&ts=1350535265
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/downloadsourcenet/{058AFFC1-828D-4B4D-8A15-B97116D4327A}
URLSearchHook: (No Name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} -  No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B85C74F06D913930&affID=123627&tt=240913_91213&tsp=5019
SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B85C74F06D913930&affID=123627&tt=240913_91213&tsp=5019
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = http://www.bigseekpro.com/search/browser/downloadsourcenet/{058AFFC1-828D-4B4D-8A15-B97116D4327A}?q={searchTerms}
SearchScopes: HKCU - {FF1756E7-25E2-40FB-AC45-B8F650EBBD4E} URL = http://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=616163_yserp2tst&p={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -  No Name - {BA14329E-9550-4989-B3F2-9732E92D17CC} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.241.146.40 8.8.8.8

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx

==================== Services (Whitelisted) =================

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-06-17] (Kaspersky Lab ZAO)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-03-18] ()
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)

==================== Drivers (Whitelisted) ====================

S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-27] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-27] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-27] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-05-06] (Kaspersky Lab ZAO)
S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [619616 2013-08-29] (Kaspersky Lab ZAO)
S1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2013-06-10] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-05-05] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-05-05] (Kaspersky Lab ZAO)
S1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
S1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATK64AMD.sys [13680 2007-08-09] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-04-23] (Duplex Secure Ltd.)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)
S1 StarOpen; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-20 22:07 - 2013-10-20 22:07 - 00271296 _____ C:\Windows\Minidump\102013-23665-01.dmp
2013-10-20 22:06 - 2013-10-20 22:06 - 00279680 _____ C:\Windows\Minidump\102013-24336-01.dmp
2013-10-20 22:05 - 2013-10-20 22:05 - 00271296 _____ C:\Windows\Minidump\102013-19936-01.dmp
2013-10-20 22:04 - 2013-10-20 22:04 - 00279680 _____ C:\Windows\Minidump\102013-24460-01.dmp
2013-10-20 21:56 - 2013-10-20 21:56 - 00279680 _____ C:\Windows\Minidump\102013-23212-01.dmp
2013-10-20 21:55 - 2013-10-20 21:55 - 00279680 _____ C:\Windows\Minidump\102013-19422-01.dmp
2013-10-19 22:04 - 2013-10-19 22:04 - 00000000 ____D C:\FRST
2013-10-19 21:45 - 2013-10-19 21:45 - 00271296 _____ C:\Windows\Minidump\101913-88639-01.dmp
2013-10-19 21:43 - 2013-10-19 21:43 - 00279680 _____ C:\Windows\Minidump\101913-23478-01.dmp
2013-10-19 21:35 - 2013-10-19 21:46 - 00000000 ____D C:\Windows\pss
2013-10-19 21:24 - 2013-10-19 21:24 - 00271296 _____ C:\Windows\Minidump\101913-23056-01.dmp
2013-10-19 21:23 - 2013-10-19 21:23 - 00279680 _____ C:\Windows\Minidump\101913-24523-01.dmp
2013-10-19 20:26 - 2013-10-19 20:26 - 00279680 _____ C:\Windows\Minidump\101913-30248-01.dmp
2013-10-19 20:25 - 2013-10-19 20:25 - 00279680 _____ C:\Windows\Minidump\101913-24414-01.dmp
2013-10-19 18:59 - 2013-10-19 18:58 - 00001089 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2013-10-19 18:58 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2013-10-19 18:57 - 2013-10-19 18:57 - 00000000 ____D C:\Windows\ELAMBKUP
2013-10-19 18:56 - 2013-10-19 19:04 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-10-19 18:56 - 2013-10-19 18:56 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-10-19 18:56 - 2013-08-29 11:45 - 00619616 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-10-19 18:56 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-10-19 18:00 - 2013-10-19 18:07 - 246185648 _____ (Kaspersky Lab) C:\Users\Kasia\Downloads\kav14.0.0.4651pl-pl.exe
2013-10-19 17:18 - 2013-10-19 17:18 - 00550371 _____ C:\Users\Kasia\Downloads\Autoruns.zip
2013-10-19 17:16 - 2013-10-19 17:40 - 00413218 _____ C:\Users\Kasia\Downloads\AutoRuns(13208).exe
2013-10-16 18:40 - 2013-10-16 19:32 - 00000000 ____D C:\Users\Kasia\Desktop\domek - pomysły Kasi
2013-10-13 19:13 - 2013-10-13 19:53 - 190264430 _____ C:\Users\Kasia\Downloads\p-vcb.avi
2013-10-01 18:34 - 2013-10-19 21:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-28 17:40 - 2013-09-28 17:40 - 00001880 _____ C:\Users\Kasia\Desktop\Search.lnk
2013-09-28 17:40 - 2013-09-28 17:40 - 00001110 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2013-09-28 17:40 - 2013-09-28 17:40 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-28 17:39 - 2013-09-28 17:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-28 17:28 - 2013-09-28 17:28 - 00400696 _____ (Softonic                                        ) C:\Users\Kasia\Downloads\SoftonicDownloader_dla_picasa.exe

==================== One Month Modified Files and Folders =======

2013-10-20 22:07 - 2013-10-20 22:07 - 00271296 _____ C:\Windows\Minidump\102013-23665-01.dmp
2013-10-20 22:07 - 2012-04-24 08:06 - 212394942 _____ C:\Windows\MEMORY.DMP
2013-10-20 22:07 - 2012-04-06 05:56 - 00000000 ____D C:\Windows\Minidump
2013-10-20 22:06 - 2013-10-20 22:06 - 00279680 _____ C:\Windows\Minidump\102013-24336-01.dmp
2013-10-20 22:05 - 2013-10-20 22:05 - 00271296 _____ C:\Windows\Minidump\102013-19936-01.dmp
2013-10-20 22:05 - 2009-07-14 06:51 - 00056504 _____ C:\Windows\setupact.log
2013-10-20 22:04 - 2013-10-20 22:04 - 00279680 _____ C:\Windows\Minidump\102013-24460-01.dmp
2013-10-20 21:56 - 2013-10-20 21:56 - 00279680 _____ C:\Windows\Minidump\102013-23212-01.dmp
2013-10-20 21:55 - 2013-10-20 21:55 - 00279680 _____ C:\Windows\Minidump\102013-19422-01.dmp
2013-10-19 22:04 - 2013-10-19 22:04 - 00000000 ____D C:\FRST
2013-10-19 21:46 - 2013-10-19 21:35 - 00000000 ____D C:\Windows\pss
2013-10-19 21:46 - 2012-03-18 10:50 - 00000000 ___RD C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-19 21:45 - 2013-10-19 21:45 - 00271296 _____ C:\Windows\Minidump\101913-88639-01.dmp
2013-10-19 21:44 - 2010-11-21 05:47 - 00112000 _____ C:\Windows\PFRO.log
2013-10-19 21:43 - 2013-10-19 21:43 - 00279680 _____ C:\Windows\Minidump\101913-23478-01.dmp
2013-10-19 21:26 - 2013-10-01 18:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-19 21:26 - 2012-03-18 11:06 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\Mozilla
2013-10-19 21:24 - 2013-10-19 21:24 - 00271296 _____ C:\Windows\Minidump\101913-23056-01.dmp
2013-10-19 21:23 - 2013-10-19 21:23 - 00279680 _____ C:\Windows\Minidump\101913-24523-01.dmp
2013-10-19 20:26 - 2013-10-19 20:26 - 00279680 _____ C:\Windows\Minidump\101913-30248-01.dmp
2013-10-19 20:25 - 2013-10-19 20:25 - 00279680 _____ C:\Windows\Minidump\101913-24414-01.dmp
2013-10-19 20:24 - 2013-04-18 12:35 - 00196608 _____ C:\Windows\system32\Ikeext.etl
2013-10-19 20:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2013-10-19 20:23 - 2012-03-18 10:19 - 01792722 _____ C:\Windows\WindowsUpdate.log
2013-10-19 20:12 - 2012-04-12 21:58 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-19 19:04 - 2013-10-19 18:56 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-10-19 18:58 - 2013-10-19 18:59 - 00001089 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2013-10-19 18:57 - 2013-10-19 18:57 - 00000000 ____D C:\Windows\ELAMBKUP
2013-10-19 18:56 - 2013-10-19 18:56 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-10-19 18:56 - 2011-02-04 19:38 - 00697912 _____ C:\Windows\system32\perfh015.dat
2013-10-19 18:56 - 2011-02-04 19:38 - 00134990 _____ C:\Windows\system32\perfc015.dat
2013-10-19 18:56 - 2009-07-14 07:13 - 01563106 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-19 18:07 - 2013-10-19 18:00 - 246185648 _____ (Kaspersky Lab) C:\Users\Kasia\Downloads\kav14.0.0.4651pl-pl.exe
2013-10-19 17:47 - 2013-04-28 17:02 - 00000000 ____D C:\Users\Public\Documents\Pinnacle
2013-10-19 17:40 - 2013-10-19 17:16 - 00413218 _____ C:\Users\Kasia\Downloads\AutoRuns(13208).exe
2013-10-19 17:39 - 2013-04-28 17:16 - 00000013 _____ C:\ProgramData\__FileUploader.log
2013-10-19 17:18 - 2013-10-19 17:18 - 00550371 _____ C:\Users\Kasia\Downloads\Autoruns.zip
2013-10-19 16:40 - 2013-04-28 17:02 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-10-19 15:17 - 2009-07-14 06:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-19 15:17 - 2009-07-14 06:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-19 15:12 - 2012-03-19 17:01 - 00000000 ____D C:\Users\Kasia\AppData\Roaming\Skype
2013-10-19 15:11 - 2013-06-14 13:24 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-19 15:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-18 19:13 - 2012-04-22 21:54 - 00000000 ____D C:\Users\Kasia\Documents\Pliki programu Outlook
2013-10-16 19:32 - 2013-10-16 18:40 - 00000000 ____D C:\Users\Kasia\Desktop\domek - pomysły Kasi
2013-10-13 20:12 - 2012-04-12 21:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-13 20:12 - 2012-04-12 21:58 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-13 20:12 - 2012-03-18 11:53 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-13 19:53 - 2013-10-13 19:13 - 190264430 _____ C:\Users\Kasia\Downloads\p-vcb.avi
2013-10-01 18:55 - 2012-03-18 11:06 - 00000000 ____D C:\Users\Kasia\AppData\Local\Mozilla
2013-09-29 12:58 - 2012-03-18 11:31 - 00000000 ____D C:\Users\Kasia\Documents\Corel
2013-09-29 12:36 - 2012-04-13 17:43 - 00000000 ____D C:\ftp
2013-09-29 12:25 - 2012-03-31 13:19 - 00000000 ___RD C:\Users\Kasia\Desktop\Moje
2013-09-29 12:14 - 2012-06-11 06:29 - 00000000 ____D C:\Users\Kasia\dwhelper
2013-09-28 17:47 - 2013-08-18 15:33 - 00000000 ____D C:\Users\Kasia\Desktop\Materiał filmowy
2013-09-28 17:45 - 2013-05-21 16:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-09-28 17:40 - 2013-09-28 17:40 - 00001880 _____ C:\Users\Kasia\Desktop\Search.lnk
2013-09-28 17:40 - 2013-09-28 17:40 - 00001110 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2013-09-28 17:40 - 2013-09-28 17:40 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-28 17:40 - 2013-04-28 16:08 - 00000000 ____D C:\Users\Kasia\AppData\Local\Google
2013-09-28 17:39 - 2013-09-28 17:39 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-28 17:29 - 2013-07-14 14:45 - 00000000 _____ C:\Windows\ka.ini
2013-09-28 17:28 - 2013-09-28 17:28 - 00400696 _____ (Softonic                                        ) C:\Users\Kasia\Downloads\SoftonicDownloader_dla_picasa.exe

Some content of TEMP:
====================
C:\Users\Kasia\AppData\Local\Temp\bi_cleaner.exe
C:\Users\Kasia\AppData\Local\Temp\MyDelta_sftnc.exe
C:\Users\Kasia\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Kasia\AppData\Local\Temp\uninst1.exe
C:\Users\Kasia\AppData\Local\Temp\_is1753.exe
C:\Users\Kasia\AppData\Local\Temp\_is8570.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-13 20:30

==================== End Of Log ============================