Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2013 01
Ran by jakub (administrator) on JAKUB-KOMPUTER on 12-11-2013 11:33:35
Running from C:\Users\jakub\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\windows\SysWOW64\svchost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Control Center\WifiManager.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Control Center\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Control Center\SmartSetting.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Control Center\MovieColorEnhancer.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Eco Mode\SmartEco.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(Intel Corporation) C:\windows\system32\igfxtray.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Control Center\EasySpeedUpManager.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(OldTimer Tools) C:\Users\jakub\Desktop\OTL.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2011-05-19] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {2e2989ad-4160-11e2-bf0d-dca971caa06b} - F:\Autorun.exe
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [Bonus.SSR.FR11] - C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
AppInit_DLLs: C:\windows\system32\nvinitx.dll [226920 2011-03-07] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll [192616 2011-03-07] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=19.9.1.14
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=pl&pid=NIS&pvid=19.9.1.14
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coieplg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ips\ipsbho.dll (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coieplg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\jakub\AppData\Roaming\Mozilla\Firefox\Profiles\8i9c88vu.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFF
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn\
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (Docs) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Google Wallet) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe [138272 2012-06-16] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20131101.003\BHDrvx64.sys [1524824 2013-10-23] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1309010.00E\ccSetx64.sys [167072 2012-06-07] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-09-17] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-09-13] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20131111.002\IDSvia64.sys [521816 2013-10-25] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131111.032\ENG64.SYS [126040 2013-10-31] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20131111.032\EX64.SYS [2099288 2013-10-31] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1309010.00E\SRTSP64.SYS [737952 2012-07-06] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1309010.00E\SRTSPX64.SYS [37536 2012-07-06] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1309010.00E\SYMDS64.SYS [451192 2011-07-25] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1309010.00E\SYMEFA64.SYS [1129120 2012-05-22] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [175736 2013-09-14] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1309010.00E\Ironx64.SYS [190072 2012-04-18] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1309010.00E\SYMNETS.SYS [405624 2012-04-18] (Symantec Corporation)
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-12 11:33 - 2013-11-12 11:33 - 00000000 ____D C:\FRST
2013-11-12 11:32 - 2013-11-12 11:32 - 01957590 _____ (Farbar) C:\Users\jakub\Desktop\FRST64.exe
2013-11-12 11:27 - 2013-11-12 11:27 - 00124906 _____ C:\Users\jakub\Desktop\Extras.Txt
2013-11-12 11:23 - 2013-11-12 11:23 - 00100858 _____ C:\Users\jakub\Desktop\OTL.Txt
2013-11-12 11:05 - 2013-11-12 11:05 - 00602112 _____ (OldTimer Tools) C:\Users\jakub\Desktop\OTL.exe
2013-11-12 10:29 - 2013-11-12 10:29 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\jakub\Desktop\SPTDinst-v184-x64.exe
2013-11-06 20:52 - 2013-11-06 20:54 - 00000000 ____D C:\AdwCleaner
2013-11-05 23:27 - 2013-11-12 10:38 - 00001046 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-05 23:27 - 2013-11-12 10:35 - 00001042 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-05 23:27 - 2013-11-05 23:41 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-05 23:27 - 2013-11-05 23:33 - 00004042 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-05 23:27 - 2013-11-05 23:33 - 00003790 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-05 23:26 - 2013-11-05 23:26 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 23:26 - 2013-11-05 23:26 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-11-05 23:01 - 2013-11-05 23:01 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-11-05 22:59 - 2013-11-05 22:59 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-11-05 22:58 - 2013-11-05 22:58 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2013-11-05 22:58 - 2013-11-05 22:58 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-11-05 22:56 - 2013-11-05 22:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-05 22:53 - 2013-11-05 22:58 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2013-11-05 22:52 - 2013-11-05 22:52 - 00000000 __RHD C:\MSOCache
2013-11-05 22:30 - 2013-11-05 22:32 - 31668120 _____ (Adobe Systems Incorporated) C:\Users\jakub\Desktop\AdbeRdr950_pl_PL.exe
2013-11-05 21:13 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2013-11-05 21:12 - 2013-11-05 21:12 - 00005521 _____ C:\windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-05 21:12 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-05 21:12 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2013-11-05 21:12 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2013-11-05 20:49 - 2013-11-05 20:55 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-11-05 20:49 - 2013-11-05 20:55 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-02 08:29 - 2013-11-02 08:30 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-11-01 22:10 - 2013-11-01 22:10 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-11-01 22:10 - 2013-11-01 22:10 - 00000000 ____D C:\Program Files\Java
2013-11-01 22:08 - 2013-11-01 22:08 - 30694824 _____ (Oracle Corporation) C:\Users\jakub\Downloads\jre-7u45-windows-x64(1).exe
2013-11-01 22:07 - 2013-11-01 22:10 - 00000000 ____D C:\ProgramData\Oracle
2013-11-01 22:05 - 2013-11-01 22:06 - 30694824 _____ (Oracle Corporation) C:\Users\jakub\Downloads\jre-7u45-windows-x64.exe
2013-11-01 22:01 - 2013-11-01 22:01 - 00000000 ____D C:\Users\jakub\AppData\Local\Macromedia
2013-11-01 22:00 - 2013-11-02 08:30 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2013-11-01 22:00 - 2013-11-01 22:00 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-11-01 22:00 - 2013-11-01 22:00 - 00000000 ____D C:\ProgramData\McAfee
2013-11-01 21:54 - 2013-11-06 20:54 - 00001049 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-01 21:54 - 2013-11-05 20:57 - 00000000 ____D C:\Users\jakub\AppData\Local\Mozilla
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\Users\jakub\AppData\Roaming\Mozilla
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-28 13:00 - 2013-10-28 13:00 - 00281976 _____ (Mozilla) C:\Users\jakub\Desktop\Firefox Setup Stub 24.0.exe
2013-10-25 17:03 - 2013-10-25 17:03 - 00000000 ____D C:\Program Files\Atari
2013-10-20 19:43 - 2013-10-20 19:43 - 00155603 _____ C:\Users\jakub\Desktop\test_drive_unlimited_pl_patch_vistapl.zip
2013-10-20 19:09 - 2013-10-20 19:09 - 00003088 _____ C:\windows\System32\Tasks\{55F346C6-B35B-4541-BAD7-5B375BF6D592}
2013-10-20 19:03 - 2013-10-20 19:03 - 00003086 _____ C:\windows\System32\Tasks\{70D914AF-E4EE-448D-9FBD-DE901EE96B34}
2013-10-20 19:00 - 2013-10-25 17:00 - 00012009 _____ C:\windows\KB893803v2.log
2013-10-20 18:59 - 2013-10-20 18:59 - 00003082 _____ C:\windows\System32\Tasks\{5FEE5BC5-08B4-482E-B715-CC829D4D845C}
2013-10-18 18:22 - 2013-10-30 13:59 - 00000000 ____D C:\Users\jakub\Documents\NFS Most Wanted
2013-10-18 18:22 - 2013-10-18 18:22 - 00002181 _____ C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk
2013-10-18 18:05 - 2013-10-18 18:05 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-10-17 10:34 - 2013-10-17 10:34 - 00685248 _____ C:\Users\jakub\Desktop\LogMeIn-Hamachi(12323).exe
2013-10-15 23:18 - 2013-10-15 23:18 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-15 23:18 - 2013-10-15 23:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-15 23:03 - 2013-10-15 23:03 - 00000000 ___RD C:\Program Files (x86)\Skype

==================== One Month Modified Files and Folders =======

2013-11-12 11:33 - 2013-11-12 11:33 - 00000000 ____D C:\FRST
2013-11-12 11:32 - 2013-11-12 11:32 - 01957590 _____ (Farbar) C:\Users\jakub\Desktop\FRST64.exe
2013-11-12 11:27 - 2013-11-12 11:27 - 00124906 _____ C:\Users\jakub\Desktop\Extras.Txt
2013-11-12 11:23 - 2013-11-12 11:23 - 00100858 _____ C:\Users\jakub\Desktop\OTL.Txt
2013-11-12 11:05 - 2013-11-12 11:05 - 00602112 _____ (OldTimer Tools) C:\Users\jakub\Desktop\OTL.exe
2013-11-12 11:03 - 2009-07-14 05:45 - 00029168 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-12 11:03 - 2009-07-14 05:45 - 00029168 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-12 10:40 - 2011-06-25 07:47 - 02072816 _____ C:\windows\WindowsUpdate.log
2013-11-12 10:40 - 2011-06-25 07:17 - 00698146 _____ C:\windows\system32\perfh015.dat
2013-11-12 10:40 - 2011-06-25 07:17 - 00135224 _____ C:\windows\system32\perfc015.dat
2013-11-12 10:40 - 2009-07-14 06:13 - 01549932 _____ C:\windows\system32\PerfStringBackup.INI
2013-11-12 10:38 - 2013-11-05 23:27 - 00001046 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-12 10:37 - 2013-02-14 16:28 - 00002896 _____ C:\windows\System32\Tasks\AutoKMS
2013-11-12 10:37 - 2013-01-03 17:36 - 00000266 _____ C:\windows\Tasks\AutoKMS.job
2013-11-12 10:35 - 2013-11-05 23:27 - 00001042 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-12 10:35 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-11-12 10:35 - 2009-07-14 05:51 - 00122016 _____ C:\windows\setupact.log
2013-11-12 10:32 - 2010-11-21 04:47 - 00356578 _____ C:\windows\PFRO.log
2013-11-12 10:29 - 2013-11-12 10:29 - 00621568 _____ (Duplex Secure Ltd.) C:\Users\jakub\Desktop\SPTDinst-v184-x64.exe
2013-11-11 19:33 - 2012-12-08 22:04 - 00000000 ____D C:\Users\jakub\Documents\FIFA 12
2013-11-08 16:07 - 2013-01-03 17:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-07 23:04 - 2012-12-15 12:36 - 00000000 ____D C:\Users\jakub\AppData\Local\CrashDumps
2013-11-06 20:54 - 2013-11-06 20:52 - 00000000 ____D C:\AdwCleaner
2013-11-06 20:54 - 2013-11-01 21:54 - 00001049 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-06 20:54 - 2012-12-08 19:05 - 00000963 _____ C:\Users\Public\Desktop\Opera.lnk
2013-11-06 20:54 - 2012-12-08 18:48 - 00000997 _____ C:\Users\jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-06 14:00 - 2012-12-08 18:58 - 00114752 _____ C:\Users\jakub\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-06 11:52 - 2013-05-12 16:49 - 00000000 ____D C:\Users\jakub\AppData\Local\Google
2013-11-06 11:19 - 2009-07-14 05:45 - 00428328 _____ C:\windows\system32\FNTCACHE.DAT
2013-11-06 08:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-06 08:03 - 2009-07-14 03:34 - 00000513 _____ C:\windows\win.ini
2013-11-05 23:41 - 2013-11-05 23:27 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-05 23:33 - 2013-11-05 23:27 - 00004042 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-05 23:33 - 2013-11-05 23:27 - 00003790 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-05 23:32 - 2012-12-08 18:46 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 23:27 - 2013-05-12 16:49 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-05 23:27 - 2012-12-08 18:47 - 00000000 ____D C:\Users\jakub\AppData\Local\Adobe
2013-11-05 23:26 - 2013-11-05 23:26 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 23:26 - 2013-11-05 23:26 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-11-05 23:01 - 2013-11-05 23:01 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-11-05 23:01 - 2011-06-25 07:11 - 00000000 ____D C:\windows\ShellNew
2013-11-05 23:01 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-11-05 22:59 - 2013-11-05 22:59 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2013-11-05 22:59 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-05 22:58 - 2013-11-05 22:58 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2013-11-05 22:58 - 2013-11-05 22:58 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-11-05 22:58 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-05 22:56 - 2013-11-05 22:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-05 22:53 - 2013-11-05 22:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2013-11-05 22:52 - 2013-11-05 22:52 - 00000000 __RHD C:\MSOCache
2013-11-05 22:32 - 2013-11-05 22:30 - 31668120 _____ (Adobe Systems Incorporated) C:\Users\jakub\Desktop\AdbeRdr950_pl_PL.exe
2013-11-05 21:12 - 2013-11-05 21:12 - 00005521 _____ C:\windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-11-05 21:12 - 2013-04-07 09:29 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-05 20:57 - 2013-11-01 21:54 - 00000000 ____D C:\Users\jakub\AppData\Local\Mozilla
2013-11-05 20:55 - 2013-11-05 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-11-05 20:55 - 2013-11-05 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 20:06 - 2012-12-08 19:03 - 00000000 ____D C:\Users\jakub\AppData\Roaming\Adobe
2013-11-02 08:30 - 2013-11-02 08:29 - 00000000 ____D C:\Program Files\McAfee Security Scan
2013-11-02 08:30 - 2013-11-01 22:00 - 00001931 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2013-11-01 22:10 - 2013-11-01 22:10 - 00312744 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00189352 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00189352 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-11-01 22:10 - 2013-11-01 22:10 - 00108968 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2013-11-01 22:10 - 2013-11-01 22:10 - 00000000 ____D C:\Program Files\Java
2013-11-01 22:10 - 2013-11-01 22:07 - 00000000 ____D C:\ProgramData\Oracle
2013-11-01 22:08 - 2013-11-01 22:08 - 30694824 _____ (Oracle Corporation) C:\Users\jakub\Downloads\jre-7u45-windows-x64(1).exe
2013-11-01 22:06 - 2013-11-01 22:05 - 30694824 _____ (Oracle Corporation) C:\Users\jakub\Downloads\jre-7u45-windows-x64.exe
2013-11-01 22:01 - 2013-11-01 22:01 - 00000000 ____D C:\Users\jakub\AppData\Local\Macromedia
2013-11-01 22:00 - 2013-11-01 22:00 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2013-11-01 22:00 - 2013-11-01 22:00 - 00000000 ____D C:\ProgramData\McAfee
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\Users\jakub\AppData\Roaming\Mozilla
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-01 21:54 - 2013-11-01 21:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-01 21:54 - 2013-07-30 09:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-01 12:44 - 2013-06-28 13:22 - 00000000 ____D C:\Users\jakub\Documents\Euro Truck Simulator 2
2013-10-30 13:59 - 2013-10-18 18:22 - 00000000 ____D C:\Users\jakub\Documents\NFS Most Wanted
2013-10-28 13:00 - 2013-10-28 13:00 - 00281976 _____ (Mozilla) C:\Users\jakub\Desktop\Firefox Setup Stub 24.0.exe
2013-10-25 17:03 - 2013-10-25 17:03 - 00000000 ____D C:\Program Files\Atari
2013-10-25 17:00 - 2013-10-20 19:00 - 00012009 _____ C:\windows\KB893803v2.log
2013-10-22 18:06 - 2012-12-08 19:05 - 00000000 ____D C:\Program Files (x86)\Opera
2013-10-20 20:17 - 2011-06-24 16:30 - 00122025 _____ C:\windows\DirectX.log
2013-10-20 19:43 - 2013-10-20 19:43 - 00155603 _____ C:\Users\jakub\Desktop\test_drive_unlimited_pl_patch_vistapl.zip
2013-10-20 19:09 - 2013-10-20 19:09 - 00003088 _____ C:\windows\System32\Tasks\{55F346C6-B35B-4541-BAD7-5B375BF6D592}
2013-10-20 19:03 - 2013-10-20 19:03 - 00003086 _____ C:\windows\System32\Tasks\{70D914AF-E4EE-448D-9FBD-DE901EE96B34}
2013-10-20 18:59 - 2013-10-20 18:59 - 00003082 _____ C:\windows\System32\Tasks\{5FEE5BC5-08B4-482E-B715-CC829D4D845C}
2013-10-20 16:48 - 2009-07-14 06:08 - 00032604 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-10-18 18:22 - 2013-10-18 18:22 - 00002181 _____ C:\Users\Public\Desktop\Need for Speed™ Most Wanted.lnk
2013-10-18 18:22 - 2012-12-09 11:19 - 00000000 ____D C:\Users\jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-18 18:05 - 2013-10-18 18:05 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-10-17 10:34 - 2013-10-17 10:34 - 00685248 _____ C:\Users\jakub\Desktop\LogMeIn-Hamachi(12323).exe
2013-10-15 23:18 - 2013-10-15 23:18 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-10-15 23:18 - 2013-10-15 23:18 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-10-15 23:03 - 2013-10-15 23:03 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-15 23:03 - 2012-12-08 18:47 - 00000000 ____D C:\ProgramData\Skype
2013-10-15 18:40 - 2011-06-24 16:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

Some content of TEMP:
====================
C:\Users\jakub\AppData\Local\Temp\AutoRun.exe
C:\Users\jakub\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\jakub\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\jakub\AppData\Local\Temp\ICReinstall_DownloadManagerSetup.exe
C:\Users\jakub\AppData\Local\Temp\install_reader11_pl_chra_awc_aih.exe
C:\Users\jakub\AppData\Local\Temp\iupdate.exe
C:\Users\jakub\AppData\Local\Temp\ose00000.exe
C:\Users\jakub\AppData\Local\Temp\ose00001.exe
C:\Users\jakub\AppData\Local\Temp\ose00002.exe
C:\Users\jakub\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-31 17:16

==================== End Of Log ============================