Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by Marta (administrator) on MARTA-SAMSUNG on 31-10-2013 13:09:14
Running from C:\Users\Marta\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() D:\openfm\open-fm.exe
(BitTorrent Inc.) C:\Users\Marta\AppData\Roaming\BitTorrent\BitTorrent.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2892080 2013-05-27] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [5392896 2010-07-07] (Broadcom Corporation)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286704 2013-03-22] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13631704 2013-07-04] (Realtek Semiconductor)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5618456 2013-09-12] (ESET)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - D:\Programy\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKCU\...\Run: [Advanced SystemCare 6] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
HKCU\...\Run: [GG] - C:\Users\Marta\AppData\Local\GG\Application\gghub.exe [4009024 2013-09-02] (GG Network S.A.)
HKCU\...\Run: [EA Core] - C:\Program Files (x86)\Electronic Arts\EADM\Core.exe [3325952 2009-03-28] (Electronic Arts)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1549120 2013-08-16] (IObit)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\firefox preloader.lnk
ShortcutTarget: firefox preloader.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
BootExecute: autocheck autochk * SmartDefragBootTime.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.22find.com/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=1363734109
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.com/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=1363734109
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=0
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=0
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=0
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=0
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=prs&from=prs&uid=SAMSUNGXHM321HI_S26VJ9CBA23223&ts=0
SearchScopes: HKCU - {CC04AC90-757C-458D-B99B-1B18309A00A6} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default
FF user.js: detected! => C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\user.js
FF NewTab: google.pl
FF SearchEngineOrder.1: Ask Search
FF Homepage: https://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\searchplugins\ask-search.xml
FF SearchPlugin: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\searchplugins\Funmoods.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\22find.xml
FF Extension: Ant Video Downloader - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\anttoolbar@ant.com
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: nasanightlaunch - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\nasanightlaunch@example.com.xpi
FF Extension: NoiaFoxoption - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\NoiaFoxoption@davidvincent.tld.xpi
FF Extension: No Name - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}.xpi
FF Extension: No Name - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{7b90e860-5d61-11e0-80e3-0800200c9a66}.xpi
FF Extension: No Name - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{8a8c1ada-2504-45c6-a2d2-265591abbd00}.xpi
FF Extension: fasterfox - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi
FF Extension: Adblock Plus - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\umjccaxt.default\Extensions\{fd2f951f-77ea-4938-9493-0c892c027a13}.xpi
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

Chrome: 
=======
CHR HomePage: hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
CHR RestoreOnStartup: "hxxp://searchfunmoods.com/?f=1&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710"
CHR DefaultSearchURL: (Funmoods) - http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&ir=iron2&cd=2XzuyEtN2Y1L1Qzu0EzztCtCtAtB0D0A0FtBzyyC0EyDtBzztN0D0Tzu0CtAzytCtN1L2XzutBtFtBtFtCtFyEtDyB&cr=473534710
CHR DefaultSuggestURL: (Funmoods) - {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (Funmoods) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.1.3_0
CHR Extension: (YouTube) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (New Tab) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\7.0.19_0
CHR Extension: (Google Search) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR Extension: (Facebook Fast Delete Messages) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\klmpnhheahecaojonebajllddfhpilan\0.3_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Marta\AppData\Local\funmoods.crx
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Marta\AppData\Local\funmoods-speeddial_sf.crx
CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Marta\AppData\Local\funmoods.crx
CHR HKLM-x32\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Marta\AppData\Local\funmoods-speeddial_sf.crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-03-22] (Intel Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
S2 PCSUService; C:\Program Files (x86)\Przyspiesz Komputer\PCSUService.exe [235232 2011-11-07] ()
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-05-20] ()
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE [48128 2010-07-07] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

S3 catchme; No ImagePath
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-01-07] (DT Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-16] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-16] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [157432 2013-09-16] (ESET)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [223744 2013-05-20] (Huawei Technologies Co., Ltd.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-03-22] (Intel Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2011-10-25] (Windows (R) 2003 DDK 3790 provider)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
R3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [x]
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-16] (ESET)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2013-05-20] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-31 13:08 - 2013-10-31 13:08 - 00000000 ____D C:\FRST
2013-10-31 13:07 - 2013-10-31 13:07 - 01956614 _____ (Farbar) C:\Users\Marta\Desktop\FRST64.exe
2013-10-30 18:15 - 2013-10-30 18:15 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-10-30 18:13 - 2013-10-30 18:13 - 00001091 _____ C:\Users\Public\Desktop\EA Download Manager.lnk
2013-10-30 18:13 - 2013-10-30 18:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-10-30 18:12 - 2013-10-30 18:12 - 00000743 _____ C:\Users\Public\Desktop\The Sims™ 3 Po zmroku.lnk
2013-10-28 23:19 - 2013-10-28 23:19 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-28 23:19 - 2013-10-28 22:57 - 00000000 ____D C:\Users\Marta\Desktop\fotka
2013-10-28 23:18 - 2013-10-28 23:18 - 01847816 _____ C:\Users\Marta\Desktop\wrar500pl.exe
2013-10-28 23:16 - 2013-10-28 23:16 - 00643840 _____ C:\Users\Marta\Desktop\wrar500pl_Downloader.exe
2013-10-28 23:15 - 2013-10-28 23:16 - 00000000 _____ C:\Users\Marta\Desktop\WinRAR(12398).exe
2013-10-28 23:05 - 2013-10-28 23:05 - 14873250 _____ C:\Users\Marta\Downloads\fotka.rar
2013-10-28 23:03 - 2013-10-28 23:05 - 14873250 _____ C:\Users\Marta\Desktop\fotka.rar
2013-10-25 12:52 - 2013-10-25 12:52 - 00003324 _____ C:\windows\System32\Tasks\SamsungSupportCenter
2013-10-25 12:52 - 2013-10-25 12:52 - 00002074 _____ C:\Users\Public\Desktop\Samsung Support Center.lnk
2013-10-22 22:10 - 2013-10-22 22:10 - 00000000 ____D C:\ProgramData\ESET
2013-10-13 13:35 - 2013-10-13 14:46 - 00000000 ____D C:\Users\Marta\AppData\Roaming\vlc
2013-10-13 13:35 - 2013-10-13 13:35 - 00001026 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-10-13 13:34 - 2013-10-13 13:34 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-10-13 13:31 - 2013-10-13 13:33 - 24278649 _____ C:\Users\Marta\Downloads\vlc-2.1.0-win32.exe
2013-10-13 12:47 - 2013-10-13 12:47 - 70672384 _____ C:\windows\system32\config\software.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00876544 _____ C:\windows\system32\config\default.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00061440 _____ C:\windows\system32\config\sam.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00028672 _____ C:\windows\system32\config\security.iobit
2013-10-13 12:39 - 2013-10-13 12:39 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-13 09:05 - 2013-10-20 10:50 - 00000000 ____D C:\windows\Minidump
2013-10-11 17:17 - 2013-10-11 17:17 - 00001150 _____ C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2013-10-11 17:17 - 2013-10-11 17:17 - 00001142 _____ C:\Users\Marta\Desktop\GG.lnk
2013-10-11 05:38 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-11 05:38 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-11 05:38 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-11 05:38 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-11 05:38 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-11 05:38 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-11 05:38 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-11 05:38 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-11 05:38 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-11 05:38 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-11 05:38 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-10-11 05:38 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-11 05:37 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-11 05:37 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 10:36 - 2013-10-09 19:49 - 17750408 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-09 07:43 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-10-09 07:43 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-09 07:43 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-10-09 07:43 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-10-09 07:43 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-10-09 07:43 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-10-09 07:43 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-10-09 07:43 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-10-09 07:43 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-10-09 07:43 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-10-09 07:43 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-10-09 07:43 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-10-09 07:43 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-10-09 07:43 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-10-09 07:43 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-10-09 07:43 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-10-09 07:43 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-10-09 07:43 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-10-09 07:43 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-10-09 07:43 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 07:43 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-10-09 07:43 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 07:43 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 07:43 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-10-09 07:43 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 07:43 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-10-09 07:43 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-10-09 07:43 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-10-09 07:43 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 07:43 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-10-09 07:43 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys
2013-10-09 07:43 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 07:43 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 07:43 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 07:43 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-10-09 07:43 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-10-09 07:43 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-10-09 07:43 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 07:43 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-10-09 07:43 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-10-09 07:43 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-10-09 07:43 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 07:43 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-09 07:43 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 07:38 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-10-09 07:38 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:38 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 07:33 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-10-09 07:33 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-07 18:35 - 2013-10-07 18:35 - 00219648 _____ C:\Users\Marta\Desktop\Rozklad_zajec_sem_zimowy(1).xls
2013-10-04 16:28 - 2013-10-04 16:28 - 00003166 _____ C:\windows\System32\Tasks\SmartDefrag_Startup
2013-10-04 16:28 - 2013-10-04 16:28 - 00003164 _____ C:\windows\System32\Tasks\SmartDefragUpdate
2013-10-04 16:28 - 2013-05-22 17:49 - 00032600 _____ (IObit) C:\windows\system32\SmartDefragBootTime.exe
2013-10-04 16:27 - 2013-05-22 17:49 - 00017720 _____ C:\windows\system32\Drivers\SmartDefragDriver.sys
2013-10-04 16:24 - 2013-10-04 16:24 - 00000000 ____D C:\Users\Marta\AppData\Roaming\CrystalIdea Software
2013-10-04 16:23 - 2013-10-04 16:24 - 00607704 _____ (SpeedyFox) C:\Users\Marta\Desktop\speedyfox.exe
2013-10-04 16:20 - 2013-10-04 16:20 - 00001138 _____ C:\Users\Marta\Desktop\Mozilla Firefox.lnk
2013-10-04 15:32 - 2013-10-04 15:32 - 00111281 _____ C:\Users\Marta\Downloads\[www.tnt24.info] Poradnik pozytywnego myślenia - Silver Linings Playbook -2012- [DVDSCR XVID AC3 BHRG] [ENG].torrent
2013-10-04 15:25 - 2013-10-04 15:36 - 00000000 ____D C:\Users\Marta\AppData\Roaming\NapiProjekt
2013-10-04 15:25 - 2013-10-04 15:25 - 00001000 _____ C:\Users\Marta\Desktop\NapiProjekt.lnk
2013-10-04 15:25 - 2013-10-04 15:25 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2013-10-04 15:23 - 2013-10-04 15:24 - 09989013 _____ (                                                            ) C:\Users\Marta\Downloads\NapiProjektBuild_2.2.0.2399.exe
2013-10-04 15:20 - 2013-10-04 15:44 - 00000000 ____D C:\Users\Marta\Desktop\Adore 2013 BRRip XViD juggs
2013-10-04 15:19 - 2013-10-04 15:19 - 00057293 _____ C:\Users\Marta\Downloads\[www.tnt24.info] Idealne matki - Adore -2013- [BRRip] [XviD-juggs] [ENG].torrent
2013-10-04 14:26 - 2013-10-04 14:29 - 03826018 _____ C:\Users\Marta\Downloads\Whitney Houston & Enrique Iglesias - Could I Have This Kiss Forever HD.aac
2013-10-03 12:35 - 2013-10-03 12:35 - 00219136 _____ C:\Users\Marta\Desktop\Rozklad_zajec_sem_zimowy.xls
2013-10-01 21:31 - 2013-10-01 21:31 - 00219136 _____ C:\Users\Marta\Desktop\EKONOMIA.xls
2013-10-01 21:21 - 2013-10-04 16:20 - 00000000 ____D C:\Users\Marta\Desktop\BILETY WAŻNE
2013-10-01 20:51 - 2013-10-13 12:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-01 17:57 - 2013-10-01 17:57 - 00007040 _____ C:\Users\Marta\AppData\Local\recently-used.xbel

==================== One Month Modified Files and Folders =======

2013-10-31 13:09 - 2013-03-20 15:33 - 00000000 ____D C:\Users\Marta\AppData\Roaming\BitTorrent
2013-10-31 13:08 - 2013-10-31 13:08 - 00000000 ____D C:\FRST
2013-10-31 13:07 - 2013-10-31 13:07 - 01956614 _____ (Farbar) C:\Users\Marta\Desktop\FRST64.exe
2013-10-31 13:06 - 2009-07-14 05:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-31 13:06 - 2009-07-14 05:45 - 00021200 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-31 13:05 - 2012-01-07 17:04 - 00000000 ____D C:\Users\Marta\AppData\Roaming\DAEMON Tools Lite
2013-10-31 13:04 - 2013-05-22 06:36 - 00000000 ____D C:\Users\Marta\AppData\Roaming\GG
2013-10-31 12:51 - 2012-05-13 11:08 - 00000930 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-10-31 12:29 - 2012-06-02 15:50 - 00001046 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-30 19:29 - 2012-06-02 15:49 - 00001042 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-30 18:15 - 2013-10-30 18:15 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-10-30 18:13 - 2013-10-30 18:13 - 00001091 _____ C:\Users\Public\Desktop\EA Download Manager.lnk
2013-10-30 18:13 - 2013-10-30 18:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-10-30 18:12 - 2013-10-30 18:12 - 00000743 _____ C:\Users\Public\Desktop\The Sims™ 3 Po zmroku.lnk
2013-10-30 18:08 - 2011-07-29 03:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-30 13:41 - 2013-02-15 17:19 - 01767418 _____ C:\windows\WindowsUpdate.log
2013-10-29 23:15 - 2013-05-24 12:24 - 00003350 _____ C:\windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3320401313-292135679-1673298299-1001
2013-10-29 23:15 - 2013-05-24 12:24 - 00003216 _____ C:\windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3320401313-292135679-1673298299-1001
2013-10-28 23:19 - 2013-10-28 23:19 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-28 23:18 - 2013-10-28 23:18 - 01847816 _____ C:\Users\Marta\Desktop\wrar500pl.exe
2013-10-28 23:18 - 2013-02-02 19:18 - 00000000 ____D C:\Program Files (x86)\WinRAR
2013-10-28 23:16 - 2013-10-28 23:16 - 00643840 _____ C:\Users\Marta\Desktop\wrar500pl_Downloader.exe
2013-10-28 23:16 - 2013-10-28 23:15 - 00000000 _____ C:\Users\Marta\Desktop\WinRAR(12398).exe
2013-10-28 23:05 - 2013-10-28 23:05 - 14873250 _____ C:\Users\Marta\Downloads\fotka.rar
2013-10-28 23:05 - 2013-10-28 23:03 - 14873250 _____ C:\Users\Marta\Desktop\fotka.rar
2013-10-28 22:57 - 2013-10-28 23:19 - 00000000 ____D C:\Users\Marta\Desktop\fotka
2013-10-27 19:42 - 2012-01-13 21:53 - 00000000 ____D C:\Users\Marta\.gstreamer-0.10
2013-10-27 06:02 - 2011-07-29 18:36 - 00739714 _____ C:\windows\system32\perfh015.dat
2013-10-27 06:02 - 2011-07-29 18:36 - 00155610 _____ C:\windows\system32\perfc015.dat
2013-10-27 06:02 - 2009-07-14 06:13 - 01668530 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-27 05:57 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-25 12:52 - 2013-10-25 12:52 - 00003324 _____ C:\windows\System32\Tasks\SamsungSupportCenter
2013-10-25 12:52 - 2013-10-25 12:52 - 00002074 _____ C:\Users\Public\Desktop\Samsung Support Center.lnk
2013-10-25 12:52 - 2011-07-29 03:11 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-10-23 02:14 - 2012-01-01 18:15 - 00000000 ____D C:\windows\System32\Tasks\Games
2013-10-22 22:40 - 2012-05-13 11:08 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-22 22:40 - 2012-05-13 11:08 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-22 22:40 - 2012-05-13 11:08 - 00003868 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-10-22 22:14 - 2012-01-02 16:45 - 00000000 ____D C:\Users\Marta\AppData\Roaming\SoftGrid Client
2013-10-22 22:10 - 2013-10-22 22:10 - 00000000 ____D C:\ProgramData\ESET
2013-10-20 10:50 - 2013-10-13 09:05 - 00000000 ____D C:\windows\Minidump
2013-10-20 10:34 - 2012-06-02 15:50 - 00002361 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-14 21:49 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-10-14 20:29 - 2013-08-29 20:01 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Media Player Classic
2013-10-14 20:26 - 2012-05-07 00:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-13 14:46 - 2013-10-13 13:35 - 00000000 ____D C:\Users\Marta\AppData\Roaming\vlc
2013-10-13 13:35 - 2013-10-13 13:35 - 00001026 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-10-13 13:34 - 2013-10-13 13:34 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-10-13 13:33 - 2013-10-13 13:31 - 24278649 _____ C:\Users\Marta\Downloads\vlc-2.1.0-win32.exe
2013-10-13 12:47 - 2013-10-13 12:47 - 70672384 _____ C:\windows\system32\config\software.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00876544 _____ C:\windows\system32\config\default.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00061440 _____ C:\windows\system32\config\sam.iobit
2013-10-13 12:47 - 2013-10-13 12:47 - 00028672 _____ C:\windows\system32\config\security.iobit
2013-10-13 12:47 - 2011-12-31 20:40 - 00000000 ____D C:\Users\Marta
2013-10-13 12:39 - 2013-10-13 12:39 - 00001107 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-13 12:39 - 2013-10-01 20:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-10-13 10:50 - 2013-03-20 00:01 - 00000000 ____D C:\Users\Marta\AppData\Roaming\eDownload
2013-10-12 10:08 - 2011-02-11 20:57 - 00000000 ____D C:\windows\Panther
2013-10-11 17:17 - 2013-10-11 17:17 - 00001150 _____ C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
2013-10-11 17:17 - 2013-10-11 17:17 - 00001142 _____ C:\Users\Marta\Desktop\GG.lnk
2013-10-11 17:17 - 2013-05-22 06:48 - 00001621 _____ C:\Users\Marta\Desktop\GG dysk.lnk
2013-10-11 17:17 - 2013-05-22 06:35 - 00000000 ____D C:\Users\Marta\AppData\Local\GG
2013-10-11 12:33 - 2012-01-02 22:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 12:33 - 2012-01-02 22:54 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-11 12:33 - 2009-07-14 05:45 - 00286272 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-11 05:34 - 2012-01-02 16:44 - 01644668 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-10-11 05:26 - 2013-09-22 15:12 - 00000000 ____D C:\windows\system32\MRT
2013-10-11 05:22 - 2013-09-22 15:12 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-09 19:49 - 2013-10-09 10:36 - 17750408 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2013-10-07 18:35 - 2013-10-07 18:35 - 00219648 _____ C:\Users\Marta\Desktop\Rozklad_zajec_sem_zimowy(1).xls
2013-10-07 18:24 - 2012-06-02 15:50 - 00004042 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-07 18:24 - 2012-06-02 15:49 - 00003790 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-06 02:40 - 2013-06-21 11:45 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth
2013-10-04 16:28 - 2013-10-04 16:28 - 00003166 _____ C:\windows\System32\Tasks\SmartDefrag_Startup
2013-10-04 16:28 - 2013-10-04 16:28 - 00003164 _____ C:\windows\System32\Tasks\SmartDefragUpdate
2013-10-04 16:27 - 2013-08-27 19:31 - 00001130 _____ C:\Users\Public\Desktop\Smart Defrag 2.lnk
2013-10-04 16:24 - 2013-10-04 16:24 - 00000000 ____D C:\Users\Marta\AppData\Roaming\CrystalIdea Software
2013-10-04 16:24 - 2013-10-04 16:23 - 00607704 _____ (SpeedyFox) C:\Users\Marta\Desktop\speedyfox.exe
2013-10-04 16:21 - 2011-12-31 20:51 - 00000000 ___RD C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-04 16:20 - 2013-10-04 16:20 - 00001138 _____ C:\Users\Marta\Desktop\Mozilla Firefox.lnk
2013-10-04 16:20 - 2013-10-01 21:21 - 00000000 ____D C:\Users\Marta\Desktop\BILETY WAŻNE
2013-10-04 16:09 - 2011-07-29 03:12 - 00000000 ____D C:\ProgramData\CyberLink
2013-10-04 16:02 - 2011-12-31 14:29 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Skype
2013-10-04 15:44 - 2013-10-04 15:20 - 00000000 ____D C:\Users\Marta\Desktop\Adore 2013 BRRip XViD juggs
2013-10-04 15:36 - 2013-10-04 15:25 - 00000000 ____D C:\Users\Marta\AppData\Roaming\NapiProjekt
2013-10-04 15:32 - 2013-10-04 15:32 - 00111281 _____ C:\Users\Marta\Downloads\[www.tnt24.info] Poradnik pozytywnego myślenia - Silver Linings Playbook -2012- [DVDSCR XVID AC3 BHRG] [ENG].torrent
2013-10-04 15:25 - 2013-10-04 15:25 - 00001000 _____ C:\Users\Marta\Desktop\NapiProjekt.lnk
2013-10-04 15:25 - 2013-10-04 15:25 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2013-10-04 15:24 - 2013-10-04 15:23 - 09989013 _____ (                                                            ) C:\Users\Marta\Downloads\NapiProjektBuild_2.2.0.2399.exe
2013-10-04 15:19 - 2013-10-04 15:19 - 00057293 _____ C:\Users\Marta\Downloads\[www.tnt24.info] Idealne matki - Adore -2013- [BRRip] [XviD-juggs] [ENG].torrent
2013-10-04 14:29 - 2013-10-04 14:26 - 03826018 _____ C:\Users\Marta\Downloads\Whitney Houston & Enrique Iglesias - Could I Have This Kiss Forever HD.aac
2013-10-03 12:35 - 2013-10-03 12:35 - 00219136 _____ C:\Users\Marta\Desktop\Rozklad_zajec_sem_zimowy.xls
2013-10-01 22:33 - 2012-01-02 12:28 - 00000000 ____D C:\Users\Marta\AppData\Local\Mozilla
2013-10-01 21:31 - 2013-10-01 21:31 - 00219136 _____ C:\Users\Marta\Desktop\EKONOMIA.xls
2013-10-01 17:58 - 2013-04-03 12:31 - 00000000 ____D C:\Users\Marta\.gimp-2.8
2013-10-01 17:57 - 2013-10-01 17:57 - 00007040 _____ C:\Users\Marta\AppData\Local\recently-used.xbel

Files to move or delete:
====================
C:\Users\Marta\AppData\Roaming\CamLayout.ini
C:\Users\Marta\AppData\Roaming\CamShapes.ini


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-21 13:43

==================== End Of Log ============================