Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by Marta (administrator) on MARTA-PC on 22-02-2014 23:46:58
Running from C:\Users\Marta\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(HP) C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
(HP) C:\Windows\system32\HPSIsvc.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(ITE Tech. Inc.) C:\Windows\system32\IRMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_70_ActiveX.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\NDP45-KB2898869-x64.exe
(Microsoft Corporation) D:\11729e18b14e8e9862e4\Setup.exe
(Microsoft Corporation) C:\Windows\system32\msiexec.exe
(Microsoft Corporation) C:\Windows\system32\MsiExec.exe
(Microsoft Corporation) C:\Windows\syswow64\MsiExec.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1815848 2013-02-14] (Synaptics Incorporated)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKU\S-1-5-21-454695380-1410457574-3425244293-1000\...\Run: [GG] - C:\Users\Marta\AppData\Local\GG\Application\gghub.exe [4047424 2013-12-11] (GG Network S.A.)
HKU\S-1-5-21-454695380-1410457574-3425244293-1000\...\MountPoints2: {6ff63fe7-988d-11e2-a736-002643fb7e65} - H:\windows\Install\Install.exe
HKU\S-1-5-21-454695380-1410457574-3425244293-1000\...\MountPoints2: {f63fa16f-9b46-11e3-8d2f-002643fb7e65} - H:\SamsungKiesInstaller.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.actina.pl
SearchScopes: HKCU - DefaultScope {D8E10BFA-D336-4C04-B40C-4686824FD7F5} URL = http://www.google.com/search?hl=pl&q={searchTerms}
SearchScopes: HKCU - {D8E10BFA-D336-4C04-B40C-4686824FD7F5} URL = http://www.google.com/search?hl=pl&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
Tcpip\..\Interfaces\{47942AAC-7179-4C34-9F78-3C52892D16A9}: [NameServer]194.204.159.1,194.204.152.34

FireFox:
========
FF ProfilePath: C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\s72rcj5z.default
FF Homepage: about:blank
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files (x86)\T-Mobile\InternetManager_Z\Bin\addon [2014-02-15]

Chrome: 
=======
CHR HomePage: about:blank
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Extension: (Dokumenty Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-03]
CHR Extension: (Dysk Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-03]
CHR Extension: (YouTube) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-03]
CHR Extension: (Szukaj w Google) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-03]
CHR Extension: (Google Wallet) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-12]
CHR Extension: (Gmail) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-03]

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [362296 2010-05-11] (HP)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.)
R0 BMLoad; C:\Windows\SysWOW64\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [165504 2013-04-27] (ITE                      )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
R1 tcpipBM; C:\Windows\SysWOW64\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.)
S3 zte_cdc_acm; C:\Windows\System32\DRIVERS\zte_cdc_acm.sys [79872 2011-08-10] (ZTE)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-22 23:46 - 2014-02-22 23:47 - 00011257 _____ () C:\Users\Marta\Downloads\FRST.txt
2014-02-22 23:44 - 2014-02-22 23:46 - 00000000 ____D () C:\FRST
2014-02-22 23:44 - 2014-02-22 23:44 - 02154496 _____ (Farbar) C:\Users\Marta\Downloads\FRST64.exe
2014-02-22 23:43 - 2014-02-22 23:43 - 00008491 _____ () C:\Users\Marta\Desktop\SMART.txt
2014-02-22 23:34 - 2014-02-22 23:34 - 00001186 _____ () C:\Users\Marta\Desktop\CrystalDiskInfo.lnk
2014-02-22 23:34 - 2014-02-22 23:34 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2014-02-22 00:25 - 2014-02-22 00:25 - 00098408 _____ () C:\Windows\PFRO.log
2014-02-22 00:16 - 2014-02-22 21:27 - 00000693 _____ () C:\Windows\setupact.log
2014-02-22 00:16 - 2014-02-22 00:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-02-22 00:16 - 2014-02-22 00:16 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 00:15 - 2014-02-22 00:16 - 00000000 ____D () C:\Windows\WindowsMobile
2014-02-21 23:47 - 2014-02-22 00:40 - 00008423 _____ () C:\Windows\IE11_main.log
2014-02-21 23:41 - 2014-02-21 23:41 - 00001102 _____ () C:\Users\Marta\Desktop\IMG_1771 — skrót.lnk
2014-02-21 23:41 - 2014-02-21 23:41 - 00000923 _____ () C:\Users\Marta\Desktop\różne programy — skrót.lnk
2014-02-21 23:41 - 2014-02-21 23:41 - 00000858 _____ () C:\Users\Marta\Desktop\PAWEŁ — skrót.lnk
2014-02-21 23:02 - 2014-02-21 23:03 - 00064508 _____ () C:\Users\Marta\Documents\cc_20140221_230255.reg
2014-02-21 22:56 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-21 22:56 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-21 22:56 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-21 22:55 - 2014-02-21 22:56 - 00005175 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-18 16:30 - 2014-02-21 09:38 - 00000000 ____D () C:\AdwCleaner
2014-02-15 09:38 - 2014-02-15 09:38 - 00000000 ____D () C:\Users\Marta\AppData\Roaming\InternetManager_Z
2014-02-15 09:37 - 2014-02-15 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_zte_cdc_acm_01009.Wdf
2014-02-15 09:35 - 2014-02-15 09:35 - 00002246 _____ () C:\Users\Public\Desktop\Internet Manager.lnk
2014-02-15 09:35 - 2014-02-15 09:35 - 00000519 _____ () C:\Windows\SysWOW64\bocinstall.ini
2014-02-15 09:35 - 2014-02-15 09:35 - 00000519 _____ () C:\Windows\system32\bocinstall.ini
2014-02-15 09:35 - 2011-08-10 11:56 - 00079872 _____ (ZTE) C:\Windows\system32\Drivers\zte_cdc_acm.sys
2014-02-15 09:35 - 2010-02-01 13:29 - 00002960 _____ () C:\Windows\SysWOW64\boc.ini
2014-02-15 09:35 - 2010-02-01 13:29 - 00002960 _____ () C:\Windows\system32\boc.ini
2014-02-15 09:35 - 2009-12-15 03:46 - 00724608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bmutil.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00724608 _____ (Microsoft Corporation) C:\Windows\system32\bmutil.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00480384 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bmnet.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00480384 _____ (Bytemobile, Inc.) C:\Windows\system32\bmnet.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bminstall.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\system32\bminstall.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00271488 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bmapi.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00271488 _____ (Bytemobile, Inc.) C:\Windows\system32\bmapi.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00193664 _____ () C:\Windows\SysWOW64\bmsdk.exe
2014-02-15 09:35 - 2009-12-15 03:46 - 00193664 _____ () C:\Windows\system32\bmsdk.exe
2014-02-15 09:35 - 2009-12-15 03:46 - 00132224 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bmdumpd.bin
2014-02-15 09:35 - 2009-12-15 03:46 - 00132224 _____ (Bytemobile, Inc.) C:\Windows\system32\bmdumpd.bin
2014-02-15 09:35 - 2009-12-15 03:46 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\Drivers\tcpipBM.sys
2014-02-15 09:35 - 2009-12-15 03:46 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys
2014-02-15 09:35 - 2009-12-15 03:46 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\Drivers\BMLoad.sys
2014-02-15 09:35 - 2009-12-15 03:46 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys
2014-02-15 09:35 - 2009-12-15 03:46 - 00013712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sporder.dll
2014-02-15 09:35 - 2009-12-15 03:46 - 00013712 _____ (Microsoft Corporation) C:\Windows\system32\sporder.dll
2014-02-15 09:34 - 2014-02-15 09:34 - 00000118 _____ () C:\Windows\SysWOW64\SupportApp.bat
2014-02-15 09:34 - 2014-02-15 09:34 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-02-14 14:09 - 2014-02-21 23:01 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-14 11:55 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 11:55 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 11:55 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 11:55 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 11:55 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 11:55 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 11:55 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 11:55 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 11:55 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 11:55 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 11:55 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 11:55 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 11:55 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 11:55 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 11:55 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 11:55 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 11:55 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 11:55 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 11:55 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 11:55 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 11:55 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 11:55 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 11:55 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 11:55 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 11:55 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 11:55 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 11:55 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 11:55 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-02-22 23:47 - 2014-02-22 23:46 - 00011257 _____ () C:\Users\Marta\Downloads\FRST.txt
2014-02-22 23:46 - 2014-02-22 23:44 - 00000000 ____D () C:\FRST
2014-02-22 23:46 - 2013-02-03 01:45 - 01606173 _____ () C:\Windows\WindowsUpdate.log
2014-02-22 23:45 - 2013-02-03 16:33 - 01672488 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-22 23:45 - 2009-07-14 18:55 - 00750444 _____ () C:\Windows\system32\perfh015.dat
2014-02-22 23:45 - 2009-07-14 18:55 - 00161890 _____ () C:\Windows\system32\perfc015.dat
2014-02-22 23:44 - 2014-02-22 23:44 - 02154496 _____ (Farbar) C:\Users\Marta\Downloads\FRST64.exe
2014-02-22 23:44 - 2009-07-14 06:13 - 01672488 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-22 23:43 - 2014-02-22 23:43 - 00008491 _____ () C:\Users\Marta\Desktop\SMART.txt
2014-02-22 23:34 - 2014-02-22 23:34 - 00001186 _____ () C:\Users\Marta\Desktop\CrystalDiskInfo.lnk
2014-02-22 23:34 - 2014-02-22 23:34 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2014-02-22 23:30 - 2013-02-03 16:24 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-22 23:05 - 2013-02-03 08:09 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-22 22:04 - 2013-02-04 00:22 - 00000000 ____D () C:\Users\Marta\AppData\Roaming\GG
2014-02-22 21:34 - 2009-07-14 05:45 - 00014816 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-22 21:34 - 2009-07-14 05:45 - 00014816 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-22 21:30 - 2013-02-03 08:06 - 00003966 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{91214462-1B7E-4FCB-9E7D-414ED9359123}
2014-02-22 21:27 - 2014-02-22 00:16 - 00000693 _____ () C:\Windows\setupact.log
2014-02-22 21:27 - 2013-04-27 05:00 - 00000048 _____ () C:\monitor.log
2014-02-22 21:27 - 2013-02-03 16:24 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-22 21:27 - 2013-02-03 07:45 - 00000000 ____D () C:\Users\Marta
2014-02-22 21:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 10:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\schemas
2014-02-22 10:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-02-22 10:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-22 00:40 - 2014-02-21 23:47 - 00008423 _____ () C:\Windows\IE11_main.log
2014-02-22 00:25 - 2014-02-22 00:25 - 00098408 _____ () C:\Windows\PFRO.log
2014-02-22 00:16 - 2014-02-22 00:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-02-22 00:16 - 2014-02-22 00:16 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 00:16 - 2014-02-22 00:15 - 00000000 ____D () C:\Windows\WindowsMobile
2014-02-21 23:49 - 2013-02-03 23:55 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-21 23:49 - 2013-02-03 23:55 - 00000000 ____D () C:\ProgramData\Skype
2014-02-21 23:45 - 2013-02-03 17:38 - 00000000 ____D () C:\Windows\pss
2014-02-21 23:41 - 2014-02-21 23:41 - 00001102 _____ () C:\Users\Marta\Desktop\IMG_1771 — skrót.lnk
2014-02-21 23:41 - 2014-02-21 23:41 - 00000923 _____ () C:\Users\Marta\Desktop\różne programy — skrót.lnk
2014-02-21 23:41 - 2014-02-21 23:41 - 00000858 _____ () C:\Users\Marta\Desktop\PAWEŁ — skrót.lnk
2014-02-21 23:21 - 2013-08-16 11:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-21 23:19 - 2013-02-03 16:47 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-21 23:03 - 2014-02-21 23:02 - 00064508 _____ () C:\Users\Marta\Documents\cc_20140221_230255.reg
2014-02-21 23:02 - 2013-02-03 14:41 - 00000000 ____D () C:\Windows\Minidump
2014-02-21 23:01 - 2014-02-14 14:09 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-21 22:56 - 2014-02-21 22:55 - 00005175 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-21 22:56 - 2013-06-21 13:41 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-21 12:44 - 2013-05-23 14:29 - 00000029 _____ () C:\Users\Marta\Documents\Asystent6-19.dat
2014-02-21 10:25 - 2013-02-03 16:24 - 00004042 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-21 10:25 - 2013-02-03 16:24 - 00003790 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-21 10:05 - 2013-02-03 08:09 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 10:05 - 2013-02-03 08:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-21 10:05 - 2013-02-03 08:09 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 09:38 - 2014-02-18 16:30 - 00000000 ____D () C:\AdwCleaner
2014-02-21 09:37 - 2013-02-03 16:26 - 00000000 ____D () C:\Users\Marta\AppData\Local\Mozilla
2014-02-20 15:11 - 2014-01-16 15:42 - 00000029 _____ () C:\Users\Marta\Documents\Asystent7-30.dat
2014-02-18 16:20 - 2013-08-08 10:56 - 00000000 ____D () C:\Users\Marta\AppData\Roaming\Media Player Classic
2014-02-18 16:19 - 2013-02-03 02:41 - 00000000 ____D () C:\Windows\Panther
2014-02-18 09:36 - 2009-07-14 19:09 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-02-15 09:38 - 2014-02-15 09:38 - 00000000 ____D () C:\Users\Marta\AppData\Roaming\InternetManager_Z
2014-02-15 09:37 - 2014-02-15 09:37 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_zte_cdc_acm_01009.Wdf
2014-02-15 09:35 - 2014-02-15 09:35 - 00002246 _____ () C:\Users\Public\Desktop\Internet Manager.lnk
2014-02-15 09:35 - 2014-02-15 09:35 - 00000519 _____ () C:\Windows\SysWOW64\bocinstall.ini
2014-02-15 09:35 - 2014-02-15 09:35 - 00000519 _____ () C:\Windows\system32\bocinstall.ini
2014-02-15 09:34 - 2014-02-15 09:34 - 00000118 _____ () C:\Windows\SysWOW64\SupportApp.bat
2014-02-15 09:34 - 2014-02-15 09:34 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-02-13 15:31 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-13 09:44 - 2013-02-04 09:35 - 00002002 ____H () C:\Users\Marta\Documents\Default.rdp
2014-02-13 09:41 - 2013-02-14 20:17 - 00000000 ____D () C:\Users\Marta\Documents\dokumenty biurowe
2014-02-05 13:22 - 2013-02-03 14:48 - 00000000 ____D () C:\Users\Marta\AppData\Local\Microsoft Help
2014-02-05 09:02 - 2013-02-03 16:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 13:55 - 2013-02-13 19:24 - 00000000 ____D () C:\Users\Marta\Documents\firmy

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-11 10:17

==================== End Of Log ============================