Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by user (administrator) on USER-KOMPUTER on 11-02-2014 22:30:38
Running from D:\!Pobrane
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-587868438-707471100-2394458664-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-587868438-707471100-2394458664-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=B89C00241D733FBD&affID=119357&tsp=4954
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=B89C00241D733FBD&affID=119357&tsp=4954
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=12&q={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=12&q={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B89C00241D733FBD&affID=119357&tsp=4954
SearchScopes: HKCU - {10CAAE77-BEC9-4EF6-90EC-1AA40616A3B9} URL = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={CCE81265-8344-4D0E-8E7A-14DA15E8FF32}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.22find.com/web/?utm_source=b&utm_medium=vltnew&from=vltnew&uid=WDCXWD5000AAKS-00V1A0_WD-WCAWF192376823768&ts=1360622910
SearchScopes: HKCU - {91DCF890-0479-418B-90E3-96BD7AAE4FBA} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=B1050AFF-F63C-404F-9E87-26AA4148FA0A&apn_sauid=09C90035-0920-4653-8E59-8DB95DFADAFD
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll No File
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default
FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\user.js
FF SearchEngineOrder.3: Bing 
FF Homepage: hxxp://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\BitGuard.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\BrowserDefender.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\startsear.xml
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\searchplugins\sweetim.xml
FF Extension: Babylon - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\ffxtlbr@babylon.com [2012-01-16]
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\staged [2013-11-20]
FF Extension: Test Pilot - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\testpilot@labs.mozilla.com [2013-11-20]
FF Extension: ReminderFox - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-02-11]
FF Extension: Test Pilot - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\testpilot@labs.mozilla.com.xpi [2013-11-20]
FF Extension: 22find - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c35dj1do.default\Extensions\{14323AEE-F6B8-4DC8-BCE3-E62645830585}.xpi [2013-02-11]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-05-17]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-05-17]

Chrome: 
=======
CHR HomePage: hxxp://www.google.pl/
CHR DefaultSearchKeyword: delta-search.com
CHR DefaultSearchProvider: Delta Search
CHR DefaultSearchURL: http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B89C00241D733FBD&affID=119357&tsp=4954
CHR DefaultNewTabURL: 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\McChPlg.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Unity Player) - C:\Users\user\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-17]
CHR Extension: (Szukaj w Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-17]
CHR Extension: (Delta Toolbar) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [2013-07-31]
CHR Extension: (AT_Porsche) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkclphmapdcppbmekmbkcjfanpmoidpg [2011-04-08]
CHR Extension: (22find) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda [2013-02-14]
CHR Extension: (SweetIM for Facebook) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2012-11-13]
CHR Extension: (Skype Click to Call) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-12-18]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-19]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-17]
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\user\AppData\Roaming\BabSolution\CR\Delta.crx [2013-07-25]
CHR HKLM-x32\...\Chrome\Extension: [gbdabnfmdemcjjadpkpjibhhacggangd] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\novo_price_comparison.crx [2013-07-25]
CHR HKLM-x32\...\Chrome\Extension: [ijblflkdjdopkpdgllkmlbgcffjbnfda] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-02-11]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-11-13]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-11-13]

==================== Services (Whitelisted) =================

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 Cardex; \??\C:\Windows\SysWOW64\drivers\TBPANELX64.SYS [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-11 22:30 - 2014-02-11 22:30 - 00000000 ____D () C:\FRST
2014-02-11 14:35 - 2014-02-11 14:35 - 00000000 ____D () C:\Windows\Minidump
2014-02-11 14:20 - 2014-02-11 14:20 - 00383874 ____N () C:\Windows\Minidump\021114-32853-01.dmp
2014-02-11 13:37 - 2014-01-06 16:20 - 83425928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2014-02-11 13:36 - 2014-02-11 13:36 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-02-11 13:32 - 2014-02-11 13:36 - 00000582 _____ () C:\Users\Public\Desktop\3DMark06.lnk
2014-02-11 13:30 - 2014-02-11 13:30 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-02-11 13:07 - 2014-02-11 13:07 - 00001513 _____ () C:\Users\user\Desktop\!Pobrane — skrót.lnk
2014-02-11 12:48 - 2014-02-11 12:48 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-02-11 12:46 - 2014-02-11 12:48 - 00000000 ____D () C:\Users\user\Documents\3DMark 11
2014-02-11 12:46 - 2014-02-11 12:46 - 00000000 ____D () C:\Users\user\AppData\Local\IsolatedStorage
2014-02-11 12:46 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-02-11 12:46 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-02-11 12:38 - 2014-02-11 12:38 - 00000000 ____D () C:\Users\user\AppData\Local\Futuremark
2014-02-11 12:31 - 2014-02-11 12:53 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-10 19:58 - 2014-02-10 19:59 - 00000000 ____D () C:\Users\user\AppData\Roaming\FreshDiagnose
2014-02-10 19:58 - 2014-02-10 19:58 - 00001206 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\FreshDiagnose.lnk
2014-02-10 19:58 - 2014-02-10 19:58 - 00001182 _____ () C:\Users\user\Desktop\FreshDiagnose.lnk
2014-02-10 19:57 - 2014-02-10 19:57 - 00000000 ____D () C:\Program Files (x86)\FreshDevices
2014-02-09 21:45 - 2014-02-09 21:45 - 00000000 ____D () C:\Users\user\Documents\Moje skanowanie
2014-02-06 21:47 - 2014-02-06 21:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-15 16:15 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 16:15 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 16:15 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 16:15 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 00:01 - 2014-01-14 00:01 - 00012405 _____ () C:\Users\user\Documents\św wojciech.odt

==================== One Month Modified Files and Folders =======

2014-02-11 22:31 - 2012-11-12 20:38 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 22:30 - 2014-02-11 22:30 - 00000000 ____D () C:\FRST
2014-02-11 22:05 - 2010-02-16 20:43 - 01148890 _____ () C:\Windows\WindowsUpdate.log
2014-02-11 22:00 - 2012-11-12 22:40 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-11 21:20 - 2009-07-14 05:45 - 00015328 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-11 21:20 - 2009-07-14 05:45 - 00015328 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-11 19:09 - 2010-02-19 20:04 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79F1F05-CA99-45CE-AA49-FDA0A73F2B37}
2014-02-11 18:08 - 2012-11-12 20:38 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 18:07 - 2010-02-16 13:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-11 18:07 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-11 18:07 - 2009-07-14 05:51 - 00150999 _____ () C:\Windows\setupact.log
2014-02-11 14:35 - 2014-02-11 14:35 - 00000000 ____D () C:\Windows\Minidump
2014-02-11 14:20 - 2014-02-11 14:20 - 00383874 ____N () C:\Windows\Minidump\021114-32853-01.dmp
2014-02-11 13:36 - 2014-02-11 13:36 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-02-11 13:36 - 2014-02-11 13:36 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-02-11 13:36 - 2014-02-11 13:32 - 00000582 _____ () C:\Users\Public\Desktop\3DMark06.lnk
2014-02-11 13:30 - 2014-02-11 13:30 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-02-11 13:28 - 2010-03-10 11:36 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-11 13:07 - 2014-02-11 13:07 - 00001513 _____ () C:\Users\user\Desktop\!Pobrane — skrót.lnk
2014-02-11 12:53 - 2014-02-11 12:31 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-11 12:48 - 2014-02-11 12:48 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-02-11 12:48 - 2014-02-11 12:46 - 00000000 ____D () C:\Users\user\Documents\3DMark 11
2014-02-11 12:46 - 2014-02-11 12:46 - 00000000 ____D () C:\Users\user\AppData\Local\IsolatedStorage
2014-02-11 12:46 - 2012-06-01 15:38 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-11 12:46 - 2010-03-05 17:03 - 01215139 _____ () C:\Windows\DirectX.log
2014-02-11 12:38 - 2014-02-11 12:38 - 00000000 ____D () C:\Users\user\AppData\Local\Futuremark
2014-02-11 12:26 - 2012-11-12 20:38 - 00004040 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 12:26 - 2012-11-12 20:38 - 00003788 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-10 19:59 - 2014-02-10 19:58 - 00000000 ____D () C:\Users\user\AppData\Roaming\FreshDiagnose
2014-02-10 19:58 - 2014-02-10 19:58 - 00001206 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\FreshDiagnose.lnk
2014-02-10 19:58 - 2014-02-10 19:58 - 00001182 _____ () C:\Users\user\Desktop\FreshDiagnose.lnk
2014-02-10 19:57 - 2014-02-10 19:57 - 00000000 ____D () C:\Program Files (x86)\FreshDevices
2014-02-09 21:45 - 2014-02-09 21:45 - 00000000 ____D () C:\Users\user\Documents\Moje skanowanie
2014-02-09 18:01 - 2012-11-13 18:34 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-02-09 14:31 - 2014-01-10 21:27 - 00000000 ____D () C:\Users\user\Documents\FIFA 13
2014-02-09 13:12 - 2012-09-15 18:00 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-02-07 21:01 - 2012-11-12 22:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-06 21:47 - 2014-02-06 21:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-04 22:00 - 2012-11-12 22:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 22:00 - 2012-11-12 22:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 22:00 - 2012-11-12 22:40 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 20:29 - 2012-11-12 20:41 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-04 20:19 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 12:59 - 2012-08-16 20:00 - 00000000 ____D () C:\ProgramData\Origin
2014-01-29 22:46 - 2010-08-27 19:51 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-01-26 20:40 - 2009-07-14 18:55 - 04344810 _____ () C:\Windows\system32\perfh015.dat
2014-01-26 20:40 - 2009-07-14 18:55 - 01381190 _____ () C:\Windows\system32\perfc015.dat
2014-01-26 20:40 - 2009-07-14 06:13 - 00006272 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-01-19 09:48 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-01-19 08:33 - 2010-02-16 13:51 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-18 18:45 - 2012-02-16 17:22 - 00000000 ____D () C:\Users\user\AppData\Roaming\.minecraft
2014-01-15 20:42 - 2009-07-14 05:45 - 00291776 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 18:08 - 2013-07-13 11:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 18:03 - 2010-02-16 13:52 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-14 00:01 - 2014-01-14 00:01 - 00012405 _____ () C:\Users\user\Documents\św wojciech.odt
2014-01-12 13:48 - 2012-12-19 12:51 - 00000000 ____D () C:\Users\user\AppData\Local\PMB Files
2014-01-12 13:48 - 2012-12-19 12:51 - 00000000 ____D () C:\ProgramData\PMB Files

Files to move or delete:
====================
C:\Users\user\ORTHOS.exe


Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\i4jdel0.exe
C:\Users\user\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\user\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\user\AppData\Local\Temp\nvStInst.exe
C:\Users\user\AppData\Local\Temp\uninst1.exe
C:\Users\user\AppData\Local\Temp\UNINSTALL.EXE


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-10 21:14

==================== End Of Log ============================