Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by ilpof (administrator) on ILPOF-KOMPUTER on 09-12-2013 18:06:38
Running from C:\Users\ilpof\Desktop\tttt
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(McAfee, Inc.) C:\Program Files\mcafee.com\agent\mcagent.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [564352 2011-12-15] (Conexant Systems, Inc.)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2809856 2012-01-16] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1022592 2012-04-28] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [801920 2012-04-28] (Atheros Commnucations)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2012-07-31] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [6202416 2012-07-31] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo EE Boot Optimizer] - C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [206176 2012-07-31] (Lenovo)
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
MountPoints2: {59b88061-f6a0-11e2-9fa1-b888e36f8c21} - E:\setup.exe
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [332BigDog] - C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [548864 2011-12-09] (Vimicro)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mcui_exe] - C:\Program Files\mcafee.com\agent\mcagent.exe [1535112 2012-09-12] (McAfee, Inc.)
HKLM-x32\...\Run: [Lenovo Registration] - C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2012-01-26] (Lenovo, Inc.)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2011-01-28] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [228448 2011-01-28] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2010-07-26] (CyberLink Corp.)
HKLM-x32\...\Run: [VeriFaceManager] - C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [329056 2012-07-31] (Lenovo)
HKLM-x32\...\Run: [UpdatePRCShortCut] - C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [LockKey] - C:\Program Files (x86)\LockKey\LockKey.exe [337776 2011-08-25] ( )
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-01-15] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-01-15] (Lenovo)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
URLSearchHook: HKCU - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\mcafee\systemcore\ScriptSn.20120731155728.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\mcafee\SystemCore\ScriptSn.20121229130848.dll (McAfee, Inc.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\ilpof\AppData\Roaming\Mozilla\Firefox\Profiles\67be9ng8.default-1386602438465
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF Extension: No Name - C:\Program Files (x86)\Common Files\McAfee\SystemCore
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=LENN&bmod=LENN"
CHR DefaultSearchKeyword: google.co.uk
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\ilpof\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.450.18) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U45) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll No File
CHR Plugin: (QUAKE LIVE) - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
CHR Plugin: (McAfee SecurityCenter) - c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (SiteAdvisor) - C:\Users\ilpof\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.2.1341_1
CHR Extension: (Google Wallet) - C:\Users\ilpof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx

==================== Services (Whitelisted) =================

S4 DamageGuardSvc; C:\Program Files\Lenovo\Instant Reset\DamageGuardSvc.exe [572976 2012-03-26] (Lenovo (Beijing) Limited)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\mcafee\msc\McAWFwk.exe [225216 2011-01-28] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 mcmscsvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McNASvc; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [383608 2012-11-16] (McAfee, Inc.)
R2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [241016 2012-12-26] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218320 2012-12-26] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182312 2012-12-26] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [201304 2012-08-31] (McAfee, Inc.)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-04-28] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [69672 2012-12-26] (McAfee, Inc.)
S4 DamageGuard; C:\Windows\System32\DRIVERS\DamageGuardX64.sys [217392 2012-02-10] (Lenovo)
S4 dgFltr; C:\Windows\System32\drivers\dgFltrX64.sys [23648 2011-12-13] (Lenovo)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104048 2012-03-02] (Qualcomm Atheros Co., Ltd.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [178840 2012-12-26] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [309400 2012-12-26] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515528 2012-12-26] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [771096 2012-12-26] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-12-26] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [339776 2012-12-26] (McAfee, Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-09 17:58 - 2013-12-09 17:58 - 00448512 _____ (OldTimer Tools) C:\Users\ilpof\Downloads\TFC.exe
2013-12-09 17:50 - 2013-12-09 17:53 - 00000000 ____D C:\AdwCleaner
2013-12-09 17:50 - 2013-12-09 17:50 - 01110034 _____ C:\Users\ilpof\Downloads\AdwCleaner.exe
2013-12-09 16:20 - 2013-12-09 16:20 - 00000000 ____D C:\Users\ilpof\Desktop\Stare dane programu Firefox
2013-12-09 16:13 - 2013-12-09 16:13 - 00000000 _____ C:\Users\ilpof\Desktop\Nowy dokument tekstowy.txt
2013-12-09 10:21 - 2013-12-09 10:21 - 00126048 _____ C:\Users\ilpof\Downloads\OTL.Txt
2013-12-08 20:30 - 2013-12-09 18:06 - 00000000 ____D C:\Users\ilpof\Desktop\tttt
2013-12-08 20:27 - 2013-12-09 18:06 - 00000000 ____D C:\FRST
2013-12-08 20:19 - 2013-12-08 20:19 - 00026498 _____ C:\Users\ilpof\Downloads\Addition.txt
2013-12-08 19:07 - 2013-12-08 19:07 - 00000000 ____D C:\Users\karrot\AppData\Roaming\WinRAR
2013-12-08 19:03 - 2013-12-08 19:03 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-08 18:26 - 2013-12-08 18:26 - 00000104 _____ C:\Users\karrot\Desktop\Panel sterowania — skrót.lnk
2013-12-08 18:05 - 2013-12-08 18:05 - 00017359 _____ C:\Users\karrot\Desktop\Opera 12 Notes.html
2013-12-08 18:05 - 2013-12-08 18:05 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Opera
2013-12-08 18:04 - 2013-12-08 18:04 - 00000363 _____ C:\Users\karrot\Desktop\Komputer — skrót.lnk
2013-12-08 17:59 - 2013-12-08 17:59 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Opera Software
2013-12-08 17:59 - 2013-12-08 17:59 - 00000000 ____D C:\Users\karrot\AppData\Local\Opera Software
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Roaming\LSC
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Local\LSC
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Local\Adobe
2013-12-08 17:23 - 2013-12-08 18:39 - 00000000 ____D C:\Users\karrot\AppData\Local\Google
2013-12-08 17:21 - 2013-12-09 16:16 - 00000000 ____D C:\Users\karrot
2013-12-08 17:21 - 2013-12-08 19:21 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 17:21 - 2013-12-08 19:03 - 00000000 ____D C:\Users\karrot\AppData\Local\VirtualStore
2013-12-08 17:21 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Adobe
2013-12-08 17:21 - 2013-12-08 17:21 - 00089752 _____ C:\Users\karrot\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-08 17:21 - 2013-12-08 17:21 - 00002097 _____ C:\Users\karrot\Desktop\OneKey Recovery.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00001432 _____ C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00001133 _____ C:\Users\karrot\Desktop\Cyberlink Power2Go.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00000020 ___SH C:\Users\karrot\ntuser.ini
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Ustawienia lokalne
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Szablony
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Moje dokumenty
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Menu Start
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moje wideo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moje obrazy
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moja muzyka
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Dane aplikacji
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Local\Historia
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Local\Dane aplikacji
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Lenovo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Leadertech
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Intel Corporation
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Atheros
2013-12-08 17:21 - 2013-11-03 13:15 - 00000000 ____D C:\Users\karrot\AppData\Local\Microsoft Help
2013-12-08 17:21 - 2012-07-31 15:05 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Macromedia
2013-12-08 17:21 - 2010-12-19 06:31 - 00000189 _____ C:\Users\karrot\Desktop\Lenovo Telephony Start Now.url
2013-12-08 17:21 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-08 17:21 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-03 18:45 - 2013-12-03 18:45 - 00000136 _____ C:\Users\ilpof\Desktop\Purble Place — skrót.lnk
2013-12-03 10:44 - 2013-12-08 18:03 - 00000000 ____D C:\Program Files (x86)\Opera
2013-12-03 10:44 - 2013-12-03 10:44 - 33808696 _____ (Opera Software ASA) C:\Users\ilpof\Downloads\Opera_18.0.1284.49_Setup.exe
2013-12-03 10:44 - 2013-12-03 10:44 - 00001140 _____ C:\Users\Public\Desktop\Opera.lnk
2013-12-03 10:44 - 2013-12-03 10:44 - 00000000 ____D C:\Users\ilpof\AppData\Roaming\Opera Software
2013-12-03 10:44 - 2013-12-03 10:44 - 00000000 ____D C:\Users\ilpof\AppData\Local\Opera Software
2013-11-14 22:34 - 2013-11-15 01:00 - 00000095 _____ C:\Users\ilpof\AppData\Roaming\WB.CFG
2013-11-14 22:34 - 2013-11-15 01:00 - 00000006 _____ C:\Users\ilpof\AppData\Roaming\WBPU-TTL.DAT
2013-11-14 21:51 - 2013-11-14 21:52 - 00000000 ____D C:\Users\ilpof\Desktop\nie ruszać
2013-11-14 00:00 - 2013-10-12 09:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 00:00 - 2013-10-12 09:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 00:00 - 2013-10-12 09:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 00:00 - 2013-10-12 09:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 00:00 - 2013-10-12 09:43 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 00:00 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 00:00 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 00:00 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 00:00 - 2013-10-12 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 00:00 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 00:00 - 2013-10-12 06:44 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 00:00 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-13 11:00 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 11:00 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 11:00 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 11:00 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 11:00 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 11:00 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 11:00 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 11:00 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 11:00 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 10:59 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 10:59 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 10:59 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 10:59 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 10:59 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 10:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 10:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 10:59 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 10:59 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 10:59 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 10:59 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 10:59 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 10:59 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 10:59 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 10:59 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 10:59 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 10:59 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 10:59 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 10:59 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 10:59 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 10:59 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-09 22:42 - 2013-12-01 21:21 - 00000000 ____D C:\Users\ilpof\Desktop\wysl

==================== One Month Modified Files and Folders =======

2013-12-09 18:06 - 2013-12-08 20:30 - 00000000 ____D C:\Users\ilpof\Desktop\tttt
2013-12-09 18:06 - 2013-12-08 20:27 - 00000000 ____D C:\FRST
2013-12-09 18:02 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 18:02 - 2009-07-14 05:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 17:59 - 2012-07-31 14:17 - 01071676 _____ C:\Windows\WindowsUpdate.log
2013-12-09 17:58 - 2013-12-09 17:58 - 00448512 _____ (OldTimer Tools) C:\Users\ilpof\Downloads\TFC.exe
2013-12-09 17:55 - 2012-12-28 21:04 - 02486080 _____ C:\FaceProv.log
2013-12-09 17:55 - 2012-07-31 15:05 - 00156831 _____ C:\Windows\system32\fastboot.set
2013-12-09 17:55 - 2012-07-31 15:03 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 17:55 - 2012-07-31 15:02 - 00000000 ____D C:\ProgramData\VeriFace
2013-12-09 17:54 - 2010-11-21 04:47 - 00169082 _____ C:\Windows\PFRO.log
2013-12-09 17:54 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-09 17:54 - 2009-07-14 05:51 - 00097132 _____ C:\Windows\setupact.log
2013-12-09 17:53 - 2013-12-09 17:50 - 00000000 ____D C:\AdwCleaner
2013-12-09 17:50 - 2013-12-09 17:50 - 01110034 _____ C:\Users\ilpof\Downloads\AdwCleaner.exe
2013-12-09 17:35 - 2012-12-28 22:47 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-09 17:26 - 2012-07-31 15:03 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 16:20 - 2013-12-09 16:20 - 00000000 ____D C:\Users\ilpof\Desktop\Stare dane programu Firefox
2013-12-09 16:16 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot
2013-12-09 16:13 - 2013-12-09 16:13 - 00000000 _____ C:\Users\ilpof\Desktop\Nowy dokument tekstowy.txt
2013-12-09 13:04 - 2012-12-29 18:48 - 00000000 ____D C:\Users\ilpof\AppData\Roaming\Skype
2013-12-09 10:21 - 2013-12-09 10:21 - 00126048 _____ C:\Users\ilpof\Downloads\OTL.Txt
2013-12-08 20:19 - 2013-12-08 20:19 - 00026498 _____ C:\Users\ilpof\Downloads\Addition.txt
2013-12-08 19:21 - 2013-12-08 17:21 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 19:07 - 2013-12-08 19:07 - 00000000 ____D C:\Users\karrot\AppData\Roaming\WinRAR
2013-12-08 19:03 - 2013-12-08 19:03 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-08 19:03 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Local\VirtualStore
2013-12-08 18:39 - 2013-12-08 17:23 - 00000000 ____D C:\Users\karrot\AppData\Local\Google
2013-12-08 18:26 - 2013-12-08 18:26 - 00000104 _____ C:\Users\karrot\Desktop\Panel sterowania — skrót.lnk
2013-12-08 18:05 - 2013-12-08 18:05 - 00017359 _____ C:\Users\karrot\Desktop\Opera 12 Notes.html
2013-12-08 18:05 - 2013-12-08 18:05 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Opera
2013-12-08 18:04 - 2013-12-08 18:04 - 00000363 _____ C:\Users\karrot\Desktop\Komputer — skrót.lnk
2013-12-08 18:03 - 2013-12-03 10:44 - 00000000 ____D C:\Program Files (x86)\Opera
2013-12-08 18:01 - 2012-07-31 23:59 - 00698146 _____ C:\Windows\system32\perfh015.dat
2013-12-08 18:01 - 2012-07-31 23:59 - 00135224 _____ C:\Windows\system32\perfc015.dat
2013-12-08 18:01 - 2009-07-14 06:13 - 01549932 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-08 17:59 - 2013-12-08 17:59 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Opera Software
2013-12-08 17:59 - 2013-12-08 17:59 - 00000000 ____D C:\Users\karrot\AppData\Local\Opera Software
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Roaming\LSC
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Local\LSC
2013-12-08 17:31 - 2013-12-08 17:31 - 00000000 ____D C:\Users\karrot\AppData\Local\Adobe
2013-12-08 17:31 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Adobe
2013-12-08 17:21 - 2013-12-08 17:21 - 00089752 _____ C:\Users\karrot\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-08 17:21 - 2013-12-08 17:21 - 00002097 _____ C:\Users\karrot\Desktop\OneKey Recovery.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00001432 _____ C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00001133 _____ C:\Users\karrot\Desktop\Cyberlink Power2Go.lnk
2013-12-08 17:21 - 2013-12-08 17:21 - 00000020 ___SH C:\Users\karrot\ntuser.ini
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Ustawienia lokalne
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Szablony
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Moje dokumenty
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Menu Start
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moje wideo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moje obrazy
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Documents\Moja muzyka
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\Dane aplikacji
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Local\Historia
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 _SHDL C:\Users\karrot\AppData\Local\Dane aplikacji
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ___RD C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Lenovo
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Leadertech
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Intel Corporation
2013-12-08 17:21 - 2013-12-08 17:21 - 00000000 ____D C:\Users\karrot\AppData\Roaming\Atheros
2013-12-08 17:14 - 2013-10-05 09:57 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-07 20:21 - 2012-07-31 15:03 - 00004058 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 20:21 - 2012-07-31 15:03 - 00003806 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-03 18:45 - 2013-12-03 18:45 - 00000136 _____ C:\Users\ilpof\Desktop\Purble Place — skrót.lnk
2013-12-03 18:45 - 2013-10-19 15:11 - 00000000 ____D C:\Users\ilpof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-03 10:44 - 2013-12-03 10:44 - 33808696 _____ (Opera Software ASA) C:\Users\ilpof\Downloads\Opera_18.0.1284.49_Setup.exe
2013-12-03 10:44 - 2013-12-03 10:44 - 00001140 _____ C:\Users\Public\Desktop\Opera.lnk
2013-12-03 10:44 - 2013-12-03 10:44 - 00000000 ____D C:\Users\ilpof\AppData\Roaming\Opera Software
2013-12-03 10:44 - 2013-12-03 10:44 - 00000000 ____D C:\Users\ilpof\AppData\Local\Opera Software
2013-12-03 10:30 - 2012-12-28 21:18 - 00000000 ____D C:\Users\ilpof\AppData\Local\Google
2013-12-03 02:00 - 2013-01-01 21:54 - 00000000 ____D C:\Games
2013-12-01 21:21 - 2013-11-09 22:42 - 00000000 ____D C:\Users\ilpof\Desktop\wysl
2013-12-01 12:13 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-26 18:16 - 2012-12-29 18:48 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 18:16 - 2012-12-29 18:48 - 00000000 ____D C:\ProgramData\Skype
2013-11-22 11:43 - 2012-12-28 22:47 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-22 11:43 - 2012-12-28 21:37 - 00000000 ____D C:\Users\ilpof\AppData\Local\Adobe
2013-11-22 11:42 - 2012-12-28 22:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-22 11:42 - 2012-12-28 22:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-20 00:08 - 2012-12-29 19:59 - 00000000 ____D C:\Users\ilpof\AppData\Local\CrashDumps
2013-11-17 17:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 10:57 - 2013-11-06 20:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 10:57 - 2012-12-28 22:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-15 01:00 - 2013-11-14 22:34 - 00000095 _____ C:\Users\ilpof\AppData\Roaming\WB.CFG
2013-11-15 01:00 - 2013-11-14 22:34 - 00000006 _____ C:\Users\ilpof\AppData\Roaming\WBPU-TTL.DAT
2013-11-14 21:52 - 2013-11-14 21:51 - 00000000 ____D C:\Users\ilpof\Desktop\nie ruszać
2013-11-14 00:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-14 00:01 - 2012-12-28 23:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 23:59 - 2013-07-31 19:03 - 00000000 ____D C:\Windows\system32\MRT
2013-11-13 23:57 - 2012-12-29 16:19 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 18:29 - 2012-12-29 19:57 - 00000000 ____D C:\ŁUKASZOWE
2013-11-10 18:30 - 2013-01-05 22:55 - 00000000 ____D C:\ASIOWE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 18:34

==================== End Of Log ============================