Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 03 Ran by Dom (administrator) on DOM-KOMPUTER on 01-02-2014 14:04:52 Running from C:\Users\Dom\Desktop\fixitpc Windows 7 Home Premium (X64) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (BitTorrent Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe (DT Soft Ltd) C:\Users\Dom\DAEMON Tools Lite\DTLite.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Facebook) C:\Users\Dom\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Dom\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\Run: [BCSSync] - D:\Programy\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation) HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4282728 2012-08-21] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [1037648 2013-03-21] (BitTorrent Inc.) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [DAEMON Tools Lite] - C:\Users\Dom\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [Google Update] - C:\Users\Dom\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-08-11] (Google Inc.) HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2012-04-27] () HKU\S-1-5-21-3135873756-1747778033-1847798441-1000\...\Run: [Facebook Update] - C:\Users\Dom\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-12-14] (Facebook Inc.) AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => File Not Found Startup: C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Dom\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (Facebook) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie URLSearchHook: ATTENTION ==> Default URLSearchHook is missing. URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - {BA65B0A7-F7F3-43B7-97EB-2256CBCEB6EF} URL = http://startsear.ch/?aff=1&src=sp&cf=6e80fe10-8be0-11e1-a3d4-e811324774a0&q={searchTerms} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear SearchScopes: HKCU - {7BEE55D6-754D-5F73-64B8-4D64576CCEEB} URL = http://websearch.pu-results.info/?l=1&q={searchTerms}&pid=34&r=2013/03/04&hid=2185298518&lg=EN&cc=PL SearchScopes: HKCU - {BA65B0A7-F7F3-43B7-97EB-2256CBCEB6EF} URL = http://startsear.ch/?aff=1&src=sp&cf=6e80fe10-8be0-11e1-a3d4-e811324774a0&q={searchTerms} SearchScopes: HKCU - {BC74D380-D62B-40A9-8B77-566A25445AF5} URL = http://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^PL&apn_uid=38d1c749-2cc3-470d-9b74-94c7cd004c3e&apn_sauid=83249848-4480-4F10-838E-20FBAF260A4C SearchScopes: HKCU - {D4AC8468-3382-4F81-9FE3-571EB5E0D530} URL = http://start.funmoods.com/results.php?f=4&a=ironto&q={searchTerms} BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 217.172.224.160 89.231.1.206 FireFox: ======== FF ProfilePath: C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default FF user.js: detected! => C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\user.js FF Homepage: user_pref("browser.startup.homepage", ); FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - D:\Programy\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programy\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Dom\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Dom\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Dom\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Dom\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\Dom\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google) FF Plugin ProgramFiles/Appdata: C:\Users\Dom\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin ProgramFiles/Appdata: C:\Users\Dom\AppData\Roaming\mozilla\plugins\npo1d.dll (Google) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\whitesmoke.xml FF Extension: Giant Savings - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\crossriderapp4479@crossrider.com [2012-07-21] FF Extension: Torntv V6.0 - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\e2fd07a6-e282-4f2e-8965-85565fcb6384@b69158e6-3c3b-476c-9d98-ae5838c5b707.com [2014-01-30] FF Extension: WhiteSmoke - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\ffxtlbr@whitesmoke.com [2011-08-12] FF Extension: DVD Video Soft Toolbar - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\{cd8812d4-e5b8-41c6-94d4-59872a484bf1} [2012-01-24] FF Extension: FT Downloader - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\ftd@ftd.com.xpi [2013-06-26] FF Extension: GoPhotoIt - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\gophoto@gophoto.it.xpi [2013-08-08] FF Extension: Adblock Plus - C:\Users\Dom\AppData\Roaming\Mozilla\Firefox\Profiles\me179ahe.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-06-12] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-04-21] FF Extension: z - C:\Program Files (x86)\Mozilla Firefox\extensions\{9748d5dc-62ab-4e34-2e54-bcd87787d215} [2012-07-10] FF Extension: G Data WebFilter - C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2011-08-05] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} [2012-02-23] FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-08-23] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-03-23] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-03-23] Chrome: ======= CHR HomePage: hxxp://google.pl/ CHR Plugin: (Shockwave Flash) - C:\Users\Dom\AppData\Local\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Dom\AppData\Local\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Dom\AppData\Local\Google\Chrome\Application\32.0.1700.102\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.6.6) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Google Talk Plugin) - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Dom\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U9) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) CHR Plugin: (Windows Live0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\Dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll () CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Microsoft Office 2010) - D:\Programy\Office14\NPAUTHZ.DLL (Microsoft Corporation) CHR Plugin: (Microsoft Office 2010) - D:\Programy\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Extension: (Torntv V6.0) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmilhmcinpmpohfoiccaplbhgelbnim [2014-01-30] CHR Extension: (AdBlock) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-12-01] CHR Extension: (avast! WebRep) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2013-06-26] CHR Extension: (Skype Click to Call) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-06-26] CHR Extension: (Google Wallet) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24] CHR Extension: (GoPhoto.it) - C:\Users\Dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk [2014-01-30] CHR HKLM-x32\...\Chrome\Extension: [aaaaaakfopmidbfddimafofbdngbkidf] - C:\Users\Dom\AppData\Local\APN\GoogleCRXs\aaaaaakfopmidbfddimafofbdngbkidf_7.14.1.0.crx [2014-01-30] CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Dom\AppData\Local\Temp\crxE3FA.tmp [2014-01-30] CHR HKLM-x32\...\Chrome\Extension: [bildoibdboopgomcbiplincneeicgipj] - C:\Program Files (x86)\StartSearch plugin\startsplg.crx [2014-01-30] CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2011-08-23] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17] CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit16.crx [2013-08-08] CHR StartMenuInternet: Google Chrome - C:\Users\Denis\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-08-21] (AVAST Software) S3 Microsoft SharePoint Workspace Audit Service; D:\Programy\Office14\GROOVE.EXE [30963576 2010-01-21] (Microsoft Corporation) S4 otshot; C:\program files\otshot\ZalmanUpdateService.exe [x] ==================== Drivers (Whitelisted) ==================== R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-08-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [71600 2012-08-21] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-08-21] (AVAST Software) R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [969200 2012-08-21] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [359464 2012-08-21] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-08-21] (AVAST Software) R1 FlyCryptor; C:\Windows\SysWow64\drivers\FlyCryptor64.sys [56960 2010-05-27] (Everstrike Software (www.everstrike.com)) R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.) S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (http://libusb-win32.sourceforge.net) S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-03-28] (Windows (R) 2003 DDK 3790 provider) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-22] (Duplex Secure Ltd.) S3 usbsmi; C:\Windows\System32\DRIVERS\SMIksdrv.sys [205440 2009-10-06] (SMI) R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] () U3 ak3sedl7; C:\Windows\System32\Drivers\ak3sedl7.sys [0 ] (Advanced Micro Devices) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 14:04 - 2014-02-01 14:04 - 00000000 ____D () C:\Users\Dom\Desktop\fixitpc 2014-02-01 14:04 - 2014-02-01 14:04 - 00000000 ____D () C:\FRST 2014-02-01 12:10 - 2014-02-01 12:10 - 06984571 _____ () C:\Users\Dom\Downloads\MOV00609.3gp 2014-01-31 17:24 - 2014-01-31 17:26 - 00000000 ____D () C:\Users\Dom\Desktop\filmiki góry,Szczytno 2014-01-31 17:22 - 2014-01-31 17:24 - 00000000 ____D () C:\Users\Dom\Desktop\Szczytno-Olsztyn-Szczytno 2014-01-30 19:29 - 2014-01-30 19:29 - 00103901 _____ () C:\Users\Dom\Downloads\267F5F4B80CE477F2DA5DFA9EA30E3B059C1FD30.torrent 2014-01-30 19:27 - 2014-02-01 13:29 - 00001510 _____ () C:\Windows\Tasks\Torntv V6.0-updater.job 2014-01-30 19:27 - 2014-01-30 19:29 - 00004540 _____ () C:\Windows\System32\Tasks\Torntv V6.0-updater 2014-01-30 19:27 - 2014-01-30 19:27 - 00000000 ____D () C:\Program Files (x86)\Gophoto.it 2014-01-30 19:26 - 2014-02-01 13:34 - 00002166 _____ () C:\Windows\Tasks\Torntv V6.0-chromeinstaller.job 2014-01-30 19:26 - 2014-02-01 13:29 - 00002422 _____ () C:\Windows\Tasks\Torntv V6.0-firefoxinstaller.job 2014-01-30 19:26 - 2014-02-01 13:29 - 00001450 _____ () C:\Windows\Tasks\Torntv V6.0-codedownloader.job 2014-01-30 19:26 - 2014-01-30 19:29 - 00004480 _____ () C:\Windows\System32\Tasks\Torntv V6.0-codedownloader 2014-01-30 19:26 - 2014-01-30 19:29 - 00001015 _____ () C:\Users\Public\Desktop\TornTV.lnk 2014-01-30 19:26 - 2014-01-30 19:29 - 00000000 ____D () C:\Program Files (x86)\TornTV.com 2014-01-30 19:26 - 2014-01-30 19:27 - 00000000 ____D () C:\Program Files (x86)\Torntv V6.0 2014-01-30 19:25 - 2014-01-30 19:25 - 00448848 _____ () C:\Users\Dom\Downloads\Zeus_Pan_Olimpu_Zlota_Edycja_PL.exe 2014-01-30 19:08 - 2014-01-30 19:08 - 00003048 _____ () C:\Windows\System32\Tasks\{306AA7B3-D0F0-4197-98CE-4D8DCDB5C84C} 2014-01-30 19:02 - 2014-01-30 19:02 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-30 19:02 - 2014-01-30 19:02 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-30 19:02 - 2014-01-30 19:02 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-30 19:01 - 2014-01-30 19:01 - 04721920 _____ (Piriform Ltd) C:\Users\Dom\Downloads\ccsetup410.exe 2014-01-30 17:49 - 2014-01-30 17:49 - 00003214 _____ () C:\Windows\System32\Tasks\{62007726-8C29-4F88-862D-1BAA7088E2D9} 2014-01-30 17:43 - 2014-01-30 17:43 - 00002125 _____ () C:\Users\Public\Desktop\The Sims 2.lnk 2014-01-30 17:42 - 2014-01-30 17:42 - 00234694 _____ () C:\Users\Dom\Downloads\Roseclothes_091.rar 2014-01-30 17:38 - 2014-01-30 17:38 - 01113027 _____ () C:\Users\Dom\Downloads\rosehair_0006.zip 2014-01-30 17:37 - 2014-01-30 17:37 - 00000000 ____D () C:\Users\Dom\Desktop\do simsów 2014-01-30 17:27 - 2014-01-30 18:53 - 00000000 ____D () C:\Program Files (x86)\EA GAMES 2014-01-28 21:33 - 2014-01-28 21:36 - 00000000 ____D () C:\AdwCleaner 2014-01-28 21:30 - 2014-01-28 21:31 - 01060070 _____ () C:\Users\Dom\Downloads\AdwCleaner.exe 2014-01-25 23:04 - 2014-01-25 23:04 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-25 23:04 - 2014-01-25 23:04 - 00001922 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-25 23:04 - 2012-08-21 11:13 - 00054072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-25 12:09 - 2014-01-25 12:09 - 00018849 _____ () C:\Users\Dom\Downloads\karne-pohltatki.zip 2014-01-23 18:56 - 2014-01-28 21:35 - 00000000 ____D () C:\Users\Dom\Desktop\wszyyystko 2014-01-21 11:38 - 2014-01-21 11:38 - 00248832 _____ () C:\Users\Dom\Downloads\katalog_prac.xls 2014-01-16 12:07 - 2014-01-16 12:07 - 00330520 _____ (House Of Soft) C:\Users\Dom\Downloads\komentarze_zus_ustawy_emerytalnej.pdf.exe ==================== One Month Modified Files and Folders ======= 2014-02-01 14:04 - 2014-02-01 14:04 - 00000000 ____D () C:\Users\Dom\Desktop\fixitpc 2014-02-01 14:04 - 2014-02-01 14:04 - 00000000 ____D () C:\FRST 2014-02-01 14:02 - 2011-08-25 00:56 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\uTorrent 2014-02-01 13:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing 2014-02-01 13:47 - 2013-08-24 08:59 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\AIMP3 2014-02-01 13:46 - 2010-11-08 20:20 - 01917410 _____ () C:\Windows\WindowsUpdate.log 2014-02-01 13:34 - 2014-01-30 19:26 - 00002166 _____ () C:\Windows\Tasks\Torntv V6.0-chromeinstaller.job 2014-02-01 13:29 - 2014-01-30 19:27 - 00001510 _____ () C:\Windows\Tasks\Torntv V6.0-updater.job 2014-02-01 13:29 - 2014-01-30 19:26 - 00002422 _____ () C:\Windows\Tasks\Torntv V6.0-firefoxinstaller.job 2014-02-01 13:29 - 2014-01-30 19:26 - 00001450 _____ () C:\Windows\Tasks\Torntv V6.0-codedownloader.job 2014-02-01 13:24 - 2011-10-02 14:46 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-01 13:20 - 2011-08-11 16:18 - 00001050 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3135873756-1747778033-1847798441-1000UA.job 2014-02-01 12:24 - 2013-08-31 22:01 - 00000920 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3135873756-1747778033-1847798441-1000UA.job 2014-02-01 12:24 - 2013-08-31 22:01 - 00000898 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3135873756-1747778033-1847798441-1000Core.job 2014-02-01 12:10 - 2014-02-01 12:10 - 06984571 _____ () C:\Users\Dom\Downloads\MOV00609.3gp 2014-02-01 11:47 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-01 11:47 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-01 11:40 - 2011-10-02 14:46 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-01 11:39 - 2012-06-27 11:36 - 00000439 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-02-01 11:39 - 2011-07-30 18:09 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-02-01 11:39 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-01 11:39 - 2009-07-14 05:51 - 00241689 _____ () C:\Windows\setupact.log 2014-02-01 00:00 - 2012-01-08 15:37 - 00000000 ____D () C:\Users\Dom\Documents\Youcam 2014-01-31 23:41 - 2011-08-25 00:20 - 00000000 ____D () C:\Users\Dom\AppData\Local\Windows Live 2014-01-31 17:26 - 2014-01-31 17:24 - 00000000 ____D () C:\Users\Dom\Desktop\filmiki góry,Szczytno 2014-01-31 17:24 - 2014-01-31 17:22 - 00000000 ____D () C:\Users\Dom\Desktop\Szczytno-Olsztyn-Szczytno 2014-01-31 17:24 - 2010-11-08 21:02 - 00698146 _____ () C:\Windows\system32\perfh015.dat 2014-01-31 17:24 - 2010-11-08 21:02 - 00135224 _____ () C:\Windows\system32\perfc015.dat 2014-01-31 17:24 - 2009-07-14 06:13 - 01549932 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-31 16:44 - 2011-06-12 18:45 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A653A3F1-6DCF-4811-80C8-63C8AF1DBD11} 2014-01-30 19:29 - 2014-01-30 19:29 - 00103901 _____ () C:\Users\Dom\Downloads\267F5F4B80CE477F2DA5DFA9EA30E3B059C1FD30.torrent 2014-01-30 19:29 - 2014-01-30 19:27 - 00004540 _____ () C:\Windows\System32\Tasks\Torntv V6.0-updater 2014-01-30 19:29 - 2014-01-30 19:26 - 00004480 _____ () C:\Windows\System32\Tasks\Torntv V6.0-codedownloader 2014-01-30 19:29 - 2014-01-30 19:26 - 00001015 _____ () C:\Users\Public\Desktop\TornTV.lnk 2014-01-30 19:29 - 2014-01-30 19:26 - 00000000 ____D () C:\Program Files (x86)\TornTV.com 2014-01-30 19:27 - 2014-01-30 19:27 - 00000000 ____D () C:\Program Files (x86)\Gophoto.it 2014-01-30 19:27 - 2014-01-30 19:26 - 00000000 ____D () C:\Program Files (x86)\Torntv V6.0 2014-01-30 19:25 - 2014-01-30 19:25 - 00448848 _____ () C:\Users\Dom\Downloads\Zeus_Pan_Olimpu_Zlota_Edycja_PL.exe 2014-01-30 19:08 - 2014-01-30 19:08 - 00003048 _____ () C:\Windows\System32\Tasks\{306AA7B3-D0F0-4197-98CE-4D8DCDB5C84C} 2014-01-30 19:02 - 2014-01-30 19:02 - 00002768 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-01-30 19:02 - 2014-01-30 19:02 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-01-30 19:02 - 2014-01-30 19:02 - 00000000 ____D () C:\Program Files\CCleaner 2014-01-30 19:01 - 2014-01-30 19:01 - 04721920 _____ (Piriform Ltd) C:\Users\Dom\Downloads\ccsetup410.exe 2014-01-30 18:53 - 2014-01-30 17:27 - 00000000 ____D () C:\Program Files (x86)\EA GAMES 2014-01-30 18:29 - 2013-09-29 11:40 - 00000000 ____D () C:\Users\Dom\Desktop\PULPIT 2014-01-30 18:29 - 2013-04-04 15:49 - 00000000 ____D () C:\Users\Dom\Desktop\STUDIA 2014-01-30 18:21 - 2013-08-09 19:28 - 00000000 ____D () C:\Nowy folder 2014-01-30 17:56 - 2012-12-22 20:41 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts 2014-01-30 17:54 - 2010-11-08 03:30 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-01-30 17:54 - 2010-11-08 03:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-01-30 17:49 - 2014-01-30 17:49 - 00003214 _____ () C:\Windows\System32\Tasks\{62007726-8C29-4F88-862D-1BAA7088E2D9} 2014-01-30 17:46 - 2011-06-13 16:47 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-01-30 17:43 - 2014-01-30 17:43 - 00002125 _____ () C:\Users\Public\Desktop\The Sims 2.lnk 2014-01-30 17:42 - 2014-01-30 17:42 - 00234694 _____ () C:\Users\Dom\Downloads\Roseclothes_091.rar 2014-01-30 17:38 - 2014-01-30 17:38 - 01113027 _____ () C:\Users\Dom\Downloads\rosehair_0006.zip 2014-01-30 17:37 - 2014-01-30 17:37 - 00000000 ____D () C:\Users\Dom\Desktop\do simsów 2014-01-30 14:20 - 2011-08-11 16:18 - 00000998 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3135873756-1747778033-1847798441-1000Core.job 2014-01-28 22:24 - 2012-08-15 20:51 - 00002368 _____ () C:\Users\Dom\Desktop\Google Chrome.lnk 2014-01-28 21:37 - 2010-11-08 04:24 - 01158984 _____ () C:\Windows\PFRO.log 2014-01-28 21:36 - 2014-01-28 21:33 - 00000000 ____D () C:\AdwCleaner 2014-01-28 21:35 - 2014-01-23 18:56 - 00000000 ____D () C:\Users\Dom\Desktop\wszyyystko 2014-01-28 21:35 - 2011-08-11 16:20 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-01-28 21:35 - 2011-06-12 19:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-01-28 21:35 - 2011-06-12 18:15 - 00001180 _____ () C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-28 21:34 - 2011-06-12 18:02 - 00000000 ____D () C:\Users\Dom 2014-01-28 21:31 - 2014-01-28 21:30 - 01060070 _____ () C:\Users\Dom\Downloads\AdwCleaner.exe 2014-01-28 12:57 - 2013-09-29 11:40 - 00001111 _____ () C:\Users\Dom\Desktop\plan zajęć..pdf — skrót.lnk 2014-01-28 02:11 - 2011-06-12 18:14 - 00000000 ___RD () C:\Users\Dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-27 00:00 - 2011-06-13 17:50 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\Skype 2014-01-26 11:27 - 2011-06-12 19:09 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\Mozilla 2014-01-25 23:04 - 2014-01-25 23:04 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-01-25 23:04 - 2014-01-25 23:04 - 00001922 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-25 23:04 - 2011-07-02 17:19 - 00000000 _____ () C:\Windows\SysWOW64\config.nt 2014-01-25 22:59 - 2012-04-04 17:00 - 00000000 ____D () C:\Users\Gość 2014-01-25 22:59 - 2012-03-18 23:20 - 00000000 ____D () C:\Users\Dom\AppData\Roaming\PhotoScape 2014-01-25 22:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-01-25 22:58 - 2010-11-08 03:34 - 00000000 ____D () C:\ProgramData\WinClon 2014-01-25 22:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-01-25 12:09 - 2014-01-25 12:09 - 00018849 _____ () C:\Users\Dom\Downloads\karne-pohltatki.zip 2014-01-21 11:38 - 2014-01-21 11:38 - 00248832 _____ () C:\Users\Dom\Downloads\katalog_prac.xls 2014-01-19 15:57 - 2013-12-24 18:01 - 00000093 _____ () C:\Users\Dom\AppData\Roaming\WB.CFG 2014-01-16 12:07 - 2014-01-16 12:07 - 00330520 _____ (House Of Soft) C:\Users\Dom\Downloads\komentarze_zus_ustawy_emerytalnej.pdf.exe 2014-01-15 18:53 - 2013-07-15 02:02 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-15 18:53 - 2011-06-12 18:53 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-06 10:35 - 2012-05-15 19:48 - 00000099 _____ () C:\Users\Public\LMDebug.log Some content of TEMP: ==================== C:\Users\Dom\AppData\Local\temp\APNSetup.exe C:\Users\Dom\AppData\Local\temp\AskPIP_FF_.exe C:\Users\Dom\AppData\Local\temp\AutoRun.exe C:\Users\Dom\AppData\Local\temp\AutoRunGUI.dll C:\Users\Dom\AppData\Local\temp\drm_dialogs.dll C:\Users\Dom\AppData\Local\temp\DTLite4481-0347.exe C:\Users\Dom\AppData\Local\temp\EAInstall.dll C:\Users\Dom\AppData\Local\temp\eauninstall.exe C:\Users\Dom\AppData\Local\temp\First15.exe C:\Users\Dom\AppData\Local\temp\gg10.upgr.exe C:\Users\Dom\AppData\Local\temp\ggdrive-menu.exe C:\Users\Dom\AppData\Local\temp\ggdrive-overlay.exe C:\Users\Dom\AppData\Local\temp\htmlayout.dll C:\Users\Dom\AppData\Local\temp\installstats.exe C:\Users\Dom\AppData\Local\temp\pidtoqyr.dll C:\Users\Dom\AppData\Local\temp\Quarantine.exe C:\Users\Dom\AppData\Local\temp\ScriptHelper.exe C:\Users\Dom\AppData\Local\temp\setup.exe C:\Users\Dom\AppData\Local\temp\setup_fsu_cid.exe C:\Users\Dom\AppData\Local\temp\swt-win32-3349.dll C:\Users\Dom\AppData\Local\temp\tbMyA0.dll C:\Users\Dom\AppData\Local\temp\The Sims 2 Seasons_uninst.exe C:\Users\Dom\AppData\Local\temp\toolbar17166225.exe C:\Users\Dom\AppData\Local\temp\toolbar17178159.exe C:\Users\Dom\AppData\Local\temp\uninst1.exe C:\Users\Dom\AppData\Local\temp\update193456.exe C:\Users\Dom\AppData\Local\temp\vlc-2.1.2-win32.exe C:\Users\Dom\AppData\Local\temp\VP6Install.exe C:\Users\Dom\AppData\Local\temp\VP6VFW.dll C:\Users\Gość\AppData\Local\temp\fp_pl_pfs_installer.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-30 13:33 ==================== End Of Log ============================