Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2014
Ran by Kasia (administrator) on KOMPUTER-KASI on 06-02-2014 12:15:33
Running from C:\Users\Kasia\Downloads\FIXitPC
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.EXE
(ComArch S.A.) C:\Program Files\Comarch\ComarchSmartCard\CardServer.exe
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
(HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
(HP) C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
(HP) C:\Windows\System32\HPSIsvc.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\ProgramData\Internet w Cyfrowym Polsacie\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(CryptoTech Sp. z o.o.) C:\Program Files\CryptoTech\CryptoCard\CCMonitor.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(France Telecom SA) C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe
(Hewlett-Packard Company) C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(France Telecom SA) C:\Program Files\CardDetector\ZTEMF636\CardDetector.exe
(Gainward Co.) C:\Program Files\EXPERTool\TBPANEL.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Sony DADC Austria AG.) C:\Windows\System32\UAService7.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [hpqSRMon] - C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM\...\Run: [SSP4AttachItems] - C:\Program Files\PWPW\Sigillum Sign 4\SigillumSign4.exe [15160 2010-04-19] (PWPW S.A.)
HKLM\...\Run: [CryptoCard Suite Cert Monitor] - C:\Program Files\CryptoTech\CryptoCard\CCMonitor.exe [233472 2009-11-06] (CryptoTech Sp. z o.o.)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [CardDetectorHUAWEI1752_1552] - C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe [282624 2009-10-14] (France Telecom SA)
HKLM\...\Run: [BEWINTERNET-PLSessionManager] - C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe [140016 2009-10-14] (France Telecom SA)
HKLM\...\Run: [HPUsageTrackingLEDM] - C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM\...\Run: [TkBellExe] - c:\program files\real\realplayer\Update\realsched.exe [295512 2013-09-12] (RealNetworks, Inc.)
HKLM\...\Run: [CardDetectorZTEMF636] - C:\Program Files\CardDetector\ZTEMF636\CardDetector.exe [274432 2008-10-14] (France Telecom SA)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [GAINWARD] - C:\Program Files\EXPERTool\TBPanel.exe [2174976 2009-10-05] (Gainward Co.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [GoogleChromeAutoLaunch_42B72D3BF0A26A851EE99173FC66C2F5] - C:\Program Files\Google\Chrome\Application\chrome.exe [866632 2014-02-02] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-03-04] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [Google Update] - C:\Users\Kasia\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-02] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1bdb7387-f483-11df-a770-00241d5b6c96} - H:\AutoRunCardDetector.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd74529-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd7452f-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd7453e-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {3051f0b3-4850-11df-999e-00241d5b6c96} - J:\MicroLauncher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {75fbfb42-daa1-11e2-8094-b1643609534e} - H:\AutoRun.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {75fbfb4c-daa1-11e2-8094-b1643609534e} - H:\AutoRun.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {a37bb0f5-a1bc-11e2-9749-00241d5b6c96} - H:\Startme.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {e6757892-fa4d-11df-b2cb-00241d5b6c96} - H:\MicroLauncher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {eed8c792-0ccf-11df-a507-00241d5b6c96} - H:\Launcher.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.sportmasters.pl/admin
http://express.kolporter.com.pl/podstrona.php?page_id=158
http://www.google.pl/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7ADRA_pl
SearchScopes: HKCU - {D40D9C42-055A-455E-8E2F-EE265FAC2D88} URL = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7ADRA_pl
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {4F29DE54-5EB7-4D76-B610-A86B5CD2A234} 
DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A40} https://www.r-bank.pl/cib/static/components/raiffeisen-signplugin-win-x86-ie-1.3.0.36.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1
Tcpip\..\Interfaces\{F8AAEA0D-6ACD-47DC-9300-9C87B08C2B4F}: [NameServer]212.2.96.51 212.2.96.52

FireFox:
========
FF ProfilePath: C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\h52aqlep.default-1391684755835
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Kasia\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Kasia\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-02-23]
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-08-16]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-12]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-02-23]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.377\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Apps Enhancements Plugin(By Google)) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2014.129.433.1_0\plugin/ace.dll ()
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U51) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Google Update) - C:\Users\Kasia\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Google Talk Plugin) - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
CHR Extension: (YouTube) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-01]
CHR Extension: (Szukaj w Google) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-01]
CHR Extension: (RealDownloader) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-01]
CHR Extension: (Google Hangouts) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2013-05-27]
CHR Extension: (Google Wallet) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-14]
CHR Extension: (Gmail) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-01]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

========================== Services (Whitelisted) =================

R2 ComarchCardServer; C:\Program Files\Comarch\ComarchSmartCard\CardServer.exe [143455 2008-01-15] (ComArch S.A.)
S3 ComarchOptimaAutomatWindykacji; C:\Program Files\Comarch ERP Optima\ComarchOptimaAutomatWindykacji.exe [51720 2013-12-06] (Comarch S.A.)
R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [90112 2009-10-14] (France Telecom SA)
R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP)
R2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [247352 2010-05-11] (HP)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
S2 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2013-06-25] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R2 MSSQL$OPTIMA; C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe [43129288 2012-06-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
S4 SQLAgent$OPTIMA; C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\SQLAGENT.EXE [379848 2012-06-29] (Microsoft Corporation)
R2 UserAccess7; C:\Windows\system32\UAService7.exe [139264 2011-04-18] (Sony DADC Austria AG.)

==================== Drivers (Whitelisted) ====================

S3 adusbser; C:\Windows\System32\DRIVERS\adusbser.sys [93440 2006-10-23] (AnyDATA Corporation)
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [238208 2009-12-17] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [16384 2009-12-17] (Aladdin Knowledge Systems Ltd.)
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [89600 2009-08-10] (Gemalto)
R2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\Windows\system32\drivers\Haspnt.sys [47616 2010-09-21] (Aladdin Knowledge Systems)
R3 HP1210FAX; C:\Windows\System32\Drivers\HPM1210FAX.sys [13824 2012-11-07] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R1 MpKsl0b64f6ad; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B3CA1F05-794C-4032-98E8-FAAC13E7BC70}\MpKsl0b64f6ad.sys [40392 2014-02-06] (Microsoft Corporation)
R1 MpKslfd507617; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B3CA1F05-794C-4032-98E8-FAAC13E7BC70}\MpKslfd507617.sys [40392 2014-02-06] (Microsoft Corporation)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [249288 2012-06-29] (Microsoft Corporation)
S3 sony_ssm.sys; C:\Users\Kasia\AppData\Local\Temp\sony_ssm.sys [6432 2014-01-21] (Sony DADC Austria AG.)
R2 TBPanel; C:\Windows\system32\Drivers\TBPanel.sys [12256 2007-03-16] (Windows (R) 2000 DDK provider)
S3 ZTEusbnmeaext; C:\Windows\System32\DRIVERS\ZTEusbnmeaext.sys [103936 2008-10-14] (ZTE Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-06 12:05 - 2014-02-06 12:05 - 00000000 ____D () C:\Users\Kasia\Desktop\Stare dane programu Firefox
2014-02-06 11:56 - 2014-02-06 11:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-06 11:56 - 2014-02-06 11:56 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-06 11:53 - 2014-02-06 11:53 - 00921000 _____ (Oracle Corporation) C:\Users\Kasia\Downloads\chromeinstall-7u51 (1).exe
2014-02-06 11:33 - 2014-02-06 11:33 - 00001995 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-02-06 11:33 - 2014-02-06 11:33 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-06 11:30 - 2014-02-06 11:56 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-06 11:29 - 2014-02-06 11:56 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-02-06 11:27 - 2014-02-06 11:27 - 00921000 _____ (Oracle Corporation) C:\Users\Kasia\Downloads\chromeinstall-7u51.exe
2014-02-06 11:14 - 2014-02-06 11:14 - 00448512 _____ (OldTimer Tools) C:\Users\Kasia\Downloads\TFC.exe
2014-02-06 11:07 - 2014-02-06 11:09 - 00000000 ____D () C:\AdwCleaner
2014-02-06 11:06 - 2014-02-06 11:06 - 00001094 _____ () C:\Users\Kasia\Desktop\Continue VuuPC Installation.lnk
2014-02-06 11:05 - 2014-02-06 11:05 - 00587120 _____ ( ) C:\Users\Kasia\Downloads\Setup.exe
2014-02-06 08:01 - 2014-02-06 08:01 - 00043520 _____ () C:\Users\Kasia\Desktop\Kopia Commercial Invoice 914.xls
2014-02-05 16:30 - 2014-02-05 16:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 345565.crdownload
2014-02-04 14:31 - 2014-02-04 14:31 - 00001771 _____ () C:\Users\Kasia\Downloads\Raport.xls.zip
2014-02-04 10:59 - 2014-02-04 10:59 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 353483.crdownload
2014-02-03 06:38 - 2014-02-03 06:38 - 00000000 ____D () C:\Windows\pss
2014-02-02 18:46 - 2014-02-06 12:15 - 00000000 ____D () C:\Users\Kasia\Downloads\FIXitPC
2014-02-02 18:32 - 2014-02-06 12:15 - 00000000 ____D () C:\FRST
2014-02-02 15:46 - 2014-02-02 15:47 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410 (1).exe
2014-02-02 15:46 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410.exe
2014-02-02 14:59 - 2014-02-02 14:59 - 00003528 ____N () C:\bootsqm.dat
2014-02-01 09:20 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-01 09:20 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-01 09:20 - 2012-08-23 15:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-01 09:20 - 2012-08-23 15:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-01 09:20 - 2012-08-23 15:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-01 09:20 - 2012-08-23 14:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-01 09:20 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-01 09:20 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-01 09:20 - 2012-08-23 14:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-01 09:20 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-01 09:20 - 2012-08-23 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-01 09:20 - 2012-08-23 12:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-01 09:20 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-02-01 09:20 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-01 09:20 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-01 09:20 - 2012-08-23 11:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-01 09:20 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-01 09:18 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-01-31 12:51 - 2014-01-31 12:51 - 00131072 _____ () C:\Windows\Minidump\013114-28376-01.dmp
2014-01-29 20:23 - 2014-01-29 20:23 - 00000000 ____D () C:\Users\Kasia\Documents\Pliki programu Outlook
2014-01-28 18:14 - 2014-01-29 09:10 - 00000000 ____D () C:\Users\Kasia\Desktop\WAKO
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February.zip
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February (1).zip
2014-01-26 17:47 - 2014-01-26 18:53 - 00017659 _____ () C:\Users\Kasia\Desktop\Schemat magazynu SPORT MASTERS.xlsx
2014-01-24 11:30 - 2014-01-24 11:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 23489.crdownload
2014-01-23 19:30 - 2014-01-23 19:31 - 06075512 _____ (TeamViewer GmbH) C:\Users\Kasia\Downloads\TeamViewer_Setup_pl.exe
2014-01-23 17:21 - 2014-01-23 17:21 - 00156160 _____ () C:\Users\Kasia\Downloads\wagi.xls
2014-01-20 19:35 - 2014-01-20 19:35 - 00056320 _____ () C:\Users\Kasia\Desktop\Kopia RKZ (1) w poziomie - za okres.xls
2014-01-16 19:55 - 2014-01-16 19:55 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 281860.crdownload
2014-01-15 19:37 - 2014-01-15 19:38 - 00000000 ____D () C:\Program Files\Comarch ERP Optima
2014-01-15 19:19 - 2014-01-15 19:38 - 00000000 __HDC () C:\ProgramData\{6D86B28B-FB6B-4CED-9F24-D53E5436F2AC}
2014-01-15 19:12 - 2014-01-15 19:12 - 00000000 ____D () C:\Users\Kasia\Desktop\Comarch ERP Optima
2014-01-15 03:58 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 03:58 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 03:58 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-13 21:49 - 2014-01-13 22:06 - 00018671 ____H () C:\Users\Kasia\Desktop\~WRL2023.tmp
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013.zip
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013 (1).zip
2014-01-09 11:38 - 2014-01-09 11:40 - 00387482 _____ () C:\Users\Kasia\Downloads\raiffeisen-signplugin-win-x86-gc-1.3.0.36 (2).crx
2014-01-09 11:38 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 684012.crdownload

==================== One Month Modified Files and Folders =======

2014-02-06 12:15 - 2014-02-02 18:46 - 00000000 ____D () C:\Users\Kasia\Downloads\FIXitPC
2014-02-06 12:15 - 2014-02-02 18:32 - 00000000 ____D () C:\FRST
2014-02-06 12:12 - 2009-12-31 23:00 - 01404843 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 12:09 - 2011-01-29 11:27 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-06 12:09 - 2010-04-28 12:10 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-06 12:08 - 2013-09-17 07:27 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 12:08 - 2010-01-15 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 12:08 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 12:08 - 2009-07-14 05:39 - 00107450 _____ () C:\Windows\setupact.log
2014-02-06 12:05 - 2014-02-06 12:05 - 00000000 ____D () C:\Users\Kasia\Desktop\Stare dane programu Firefox
2014-02-06 12:02 - 2012-04-05 19:58 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-06 12:02 - 2011-06-06 17:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-06 12:01 - 2013-05-27 10:35 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1662912730-1646418203-3115140772-1000UA.job
2014-02-06 12:01 - 2010-01-05 05:19 - 00000000 ____D () C:\Users\Kasia\AppData\Local\Adobe
2014-02-06 11:56 - 2014-02-06 11:56 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-06 11:56 - 2014-02-06 11:56 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-06 11:56 - 2014-02-06 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-06 11:56 - 2014-02-06 11:29 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-02-06 11:56 - 2009-07-14 05:34 - 00015008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 11:56 - 2009-07-14 05:34 - 00015008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 11:53 - 2014-02-06 11:53 - 00921000 _____ (Oracle Corporation) C:\Users\Kasia\Downloads\chromeinstall-7u51 (1).exe
2014-02-06 11:52 - 2011-01-29 11:27 - 00001034 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-06 11:48 - 2010-01-02 04:21 - 00216504 _____ () C:\Windows\PFRO.log
2014-02-06 11:33 - 2014-02-06 11:33 - 00001995 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-02-06 11:33 - 2014-02-06 11:33 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-02-06 11:33 - 2011-03-04 10:10 - 00000000 ____D () C:\Program Files\Adobe
2014-02-06 11:33 - 2010-01-05 05:16 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-06 11:29 - 2010-11-18 18:38 - 00000000 ____D () C:\Program Files\Java
2014-02-06 11:27 - 2014-02-06 11:27 - 00921000 _____ (Oracle Corporation) C:\Users\Kasia\Downloads\chromeinstall-7u51.exe
2014-02-06 11:14 - 2014-02-06 11:14 - 00448512 _____ (OldTimer Tools) C:\Users\Kasia\Downloads\TFC.exe
2014-02-06 11:09 - 2014-02-06 11:07 - 00000000 ____D () C:\AdwCleaner
2014-02-06 11:06 - 2014-02-06 11:06 - 00001094 _____ () C:\Users\Kasia\Desktop\Continue VuuPC Installation.lnk
2014-02-06 11:05 - 2014-02-06 11:05 - 00587120 _____ ( ) C:\Users\Kasia\Downloads\Setup.exe
2014-02-06 10:54 - 2009-12-31 16:02 - 00000000 ____D () C:\Users\Kasia
2014-02-06 10:44 - 2013-12-27 15:35 - 00000000 ____D () C:\Users\Kasia\AppData\Local\Mobogenie
2014-02-06 08:01 - 2014-02-06 08:01 - 00043520 _____ () C:\Users\Kasia\Desktop\Kopia Commercial Invoice 914.xls
2014-02-06 07:01 - 2013-05-27 10:35 - 00001006 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1662912730-1646418203-3115140772-1000Core.job
2014-02-05 18:36 - 2012-01-30 11:04 - 00000000 ____D () C:\Users\Kasia\Desktop\SM
2014-02-05 16:30 - 2014-02-05 16:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 345565.crdownload
2014-02-05 14:49 - 2009-12-31 16:02 - 01916672 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-05 14:49 - 2009-07-14 09:07 - 00827656 _____ () C:\Windows\system32\perfh015.dat
2014-02-05 14:49 - 2009-07-14 09:07 - 00189554 _____ () C:\Windows\system32\perfc015.dat
2014-02-04 14:31 - 2014-02-04 14:31 - 00001771 _____ () C:\Users\Kasia\Downloads\Raport.xls.zip
2014-02-04 10:59 - 2014-02-04 10:59 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 353483.crdownload
2014-02-04 02:54 - 2013-05-01 06:36 - 00002141 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-03 13:11 - 2012-11-09 12:50 - 00000000 ____D () C:\Users\Kasia\Desktop\ME Kadetów i Juniorów 2013
2014-02-03 06:38 - 2014-02-03 06:38 - 00000000 ____D () C:\Windows\pss
2014-02-03 05:48 - 2013-12-27 15:35 - 00019870 _____ () C:\Users\Kasia\daemonprocess.txt
2014-02-02 17:26 - 2012-11-19 03:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-02 17:26 - 2012-11-19 03:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-02 15:50 - 2012-05-28 10:37 - 00000000 ____D () C:\ProgramData\Norton
2014-02-02 15:47 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410 (1).exe
2014-02-02 15:47 - 2010-11-10 09:41 - 00000975 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-02 15:47 - 2010-11-10 09:41 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-02 15:46 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410.exe
2014-02-02 14:59 - 2014-02-02 14:59 - 00003528 ____N () C:\bootsqm.dat
2014-02-02 08:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-02 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-02 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-02 08:30 - 2010-12-04 12:57 - 00000000 ____D () C:\ProgramData\Real
2014-02-01 09:21 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-02-01 09:07 - 2013-12-27 15:41 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\1H1Q
2014-02-01 08:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-01-31 12:51 - 2014-01-31 12:51 - 00131072 _____ () C:\Windows\Minidump\013114-28376-01.dmp
2014-01-31 12:51 - 2011-04-22 12:40 - 205499216 _____ () C:\Windows\MEMORY.DMP
2014-01-31 12:51 - 2011-04-22 12:40 - 00000000 ____D () C:\Windows\Minidump
2014-01-29 20:23 - 2014-01-29 20:23 - 00000000 ____D () C:\Users\Kasia\Documents\Pliki programu Outlook
2014-01-29 09:10 - 2014-01-28 18:14 - 00000000 ____D () C:\Users\Kasia\Desktop\WAKO
2014-01-29 09:09 - 2011-02-28 19:02 - 00000000 ____D () C:\Users\Kasia\Desktop\Zdjęcia
2014-01-29 09:09 - 2010-09-28 15:19 - 00002067 _____ () C:\Users\Kasia\Desktop\EKN-serwer.lnk
2014-01-29 09:04 - 2011-07-23 20:48 - 00000000 ____D () C:\Users\Kasia\Desktop\statek
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February.zip
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February (1).zip
2014-01-28 00:34 - 2013-07-27 17:54 - 00000222 _____ () C:\Users\Kasia\AppData\Roaming\WB.CFG
2014-01-26 18:53 - 2014-01-26 17:47 - 00017659 _____ () C:\Users\Kasia\Desktop\Schemat magazynu SPORT MASTERS.xlsx
2014-01-25 15:15 - 2012-12-13 09:25 - 00000000 ____D () C:\Users\Kasia\Desktop\GARY
2014-01-24 23:02 - 2010-01-04 19:46 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\Mozilla
2014-01-24 11:30 - 2014-01-24 11:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 23489.crdownload
2014-01-23 19:31 - 2014-01-23 19:30 - 06075512 _____ (TeamViewer GmbH) C:\Users\Kasia\Downloads\TeamViewer_Setup_pl.exe
2014-01-23 17:21 - 2014-01-23 17:21 - 00156160 _____ () C:\Users\Kasia\Downloads\wagi.xls
2014-01-23 10:49 - 2013-08-21 11:54 - 00000000 ____D () C:\Users\Kasia\AppData\Local\CUSTPDF Writer
2014-01-23 10:27 - 2013-03-26 20:36 - 00000000 ____D () C:\Users\Kasia\Desktop\III kadencja
2014-01-20 19:35 - 2014-01-20 19:35 - 00056320 _____ () C:\Users\Kasia\Desktop\Kopia RKZ (1) w poziomie - za okres.xls
2014-01-19 08:32 - 2009-12-31 16:20 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-16 19:55 - 2014-01-16 19:55 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 281860.crdownload
2014-01-16 03:26 - 2009-07-14 05:33 - 00416712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:05 - 2013-08-11 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:01 - 2010-01-02 03:47 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 19:38 - 2014-01-15 19:37 - 00000000 ____D () C:\Program Files\Comarch ERP Optima
2014-01-15 19:38 - 2014-01-15 19:19 - 00000000 __HDC () C:\ProgramData\{6D86B28B-FB6B-4CED-9F24-D53E5436F2AC}
2014-01-15 19:38 - 2012-12-28 08:28 - 00001055 _____ () C:\Users\Public\Desktop\Comarch ERP Optima.lnk
2014-01-15 19:37 - 2011-03-05 12:07 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\Comarch OPT!MA
2014-01-15 19:12 - 2014-01-15 19:12 - 00000000 ____D () C:\Users\Kasia\Desktop\Comarch ERP Optima
2014-01-14 03:11 - 2013-02-20 12:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-14 03:04 - 2009-07-14 03:04 - 00000631 _____ () C:\Windows\win.ini
2014-01-13 22:06 - 2014-01-13 21:49 - 00018671 ____H () C:\Users\Kasia\Desktop\~WRL2023.tmp
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013.zip
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013 (1).zip
2014-01-13 17:08 - 2012-12-16 12:35 - 00000000 ____D () C:\Users\Kasia\Desktop\FMS
2014-01-13 17:07 - 2013-06-05 07:31 - 00000000 ____D () C:\Users\Kasia\Desktop\SM Sp. z o.o. S.K
2014-01-09 11:40 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\raiffeisen-signplugin-win-x86-gc-1.3.0.36 (2).crx
2014-01-09 11:38 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 684012.crdownload

Some content of TEMP:
====================
C:\Users\Kasia\AppData\Local\Temp\86138uninstall.exe
C:\Users\Kasia\AppData\Local\Temp\contentDATs.exe
C:\Users\Kasia\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Kasia\AppData\Local\Temp\ezmrnn5i.dll
C:\Users\Kasia\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Kasia\AppData\Local\Temp\ICReinstall_Setup.exe
C:\Users\Kasia\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Kasia\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Kasia\AppData\Local\Temp\lowproc.exe
C:\Users\Kasia\AppData\Local\Temp\ose00000.exe
C:\Users\Kasia\AppData\Local\Temp\Quarantine.exe
C:\Users\Kasia\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Kasia\AppData\Local\Temp\siinst.exe
C:\Users\Kasia\AppData\Local\Temp\Sqlite3.dll
C:\Users\Kasia\AppData\Local\Temp\strings.dll
C:\Users\Kasia\AppData\Local\Temp\stubhelper.dll
C:\Users\Kasia\AppData\Local\Temp\uninst1.exe
C:\Users\Kasia\AppData\Local\Temp\_is11EA.exe
C:\Users\Kasia\AppData\Local\Temp\_is12D4.exe
C:\Users\Kasia\AppData\Local\Temp\_is13CE.exe
C:\Users\Kasia\AppData\Local\Temp\_is298F.exe
C:\Users\Kasia\AppData\Local\Temp\_is2B55.exe
C:\Users\Kasia\AppData\Local\Temp\_is621C.exe
C:\Users\Kasia\AppData\Local\Temp\_is7D5A.exe
C:\Users\Kasia\AppData\Local\Temp\_is889F.exe
C:\Users\Kasia\AppData\Local\Temp\_isA5D0.exe
C:\Users\Kasia\AppData\Local\Temp\_isB53B.exe
C:\Users\Kasia\AppData\Local\Temp\_isEA.exe
C:\Users\Kasia\AppData\Local\Temp\_isF69D.exe
C:\Users\Kasia\AppData\Local\Temp\_isFC38.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-02 01:57

==================== End Of Log ============================