Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-03-2014
Ran by Malgorzata (administrator) on KOMPUTER on 01-03-2014 15:24:02
Running from C:\Users\Malgorzata\Downloads
Windows 8 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Conexant Systems Inc.) C:\WINDOWS\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
() C:\Program Files (x86)\Atrise\Lutcurve\Lutloader.exe
(PC Utilities Pro) C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2013-06-05] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2013-06-05] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [332BigDog] - C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [619008 2010-05-25] (Nikon Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2010-03-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-10-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2629632 2012-09-25] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-03-01] (AVAST Software)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-24] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1493833752-2591686170-2324841812-1002\...\Run: [Facebook Update] - C:\Users\Malgorzata\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-11] (Facebook Inc.)
HKU\S-1-5-21-1493833752-2591686170-2324841812-1002\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-1493833752-2591686170-2324841812-1002\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135672 2013-09-03] (PC Utilities Pro)
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
AppInit_DLLs:  c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [247144 2012-11-06] (NVIDIA Corporation)
Startup: C:\Users\Malgorzata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lutloader.lnk
ShortcutTarget: Lutloader.lnk -> C:\Program Files (x86)\Atrise\Lutcurve\Lutloader.exe ()
Startup: C:\Users\Malgorzata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.searchgol.com/?babsrc=HP_ss_Btisdt7&mntrId=989324FD52578CC4&affID=119357&tsp=5002
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://start.qone8.com/?type=sc&ts=1382737908&from=cor&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKLM - {797043B5-9F50-41AD-B0F0-D670647908BD} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKLM-x32 - {797043B5-9F50-41AD-B0F0-D670647908BD} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=989324FD52578CC4&affID=119357&tsp=5002
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?type=ds&ts=1388679292&from=wpm0102&uid=ST1000LM024XHN-M101MBB_S2U5J9ED435312&q={searchTerms}
SearchScopes: HKCU - {797043B5-9F50-41AD-B0F0-D670647908BD} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62

FireFox:
========
FF ProfilePath: C:\Users\Malgorzata\AppData\Roaming\Mozilla\Firefox\Profiles\jdvg0drs.default
FF user.js: detected! => C:\Users\Malgorzata\AppData\Roaming\Mozilla\Firefox\Profiles\jdvg0drs.default\user.js
FF Homepage: hxxp://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Malgorzata\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Extension: Apps Hat - C:\Users\Malgorzata\AppData\Roaming\Mozilla\Firefox\Profiles\jdvg0drs.default\Extensions\{97A78363-B868-4B48-AC91-A783A31215AF} [2013-10-25]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-10-09]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-24] (Qualcomm Atheros Commnucations)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-03-01] (AVAST Software)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-02] (Cherished Technololgy LIMITED)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [78648 2014-03-01] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-30] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1038072 2014-03-01] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [421704 2014-03-01] (AVAST Software)
R3 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [80184 2014-03-01] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-03-01] ()
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-10-25] (Disc Soft Ltd)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-01 15:24 - 2014-03-01 15:24 - 00019686 _____ () C:\Users\Malgorzata\Downloads\FRST.txt
2014-03-01 15:23 - 2014-03-01 15:24 - 00000000 ____D () C:\FRST
2014-03-01 15:19 - 2014-03-01 15:19 - 00126810 _____ () C:\Users\Malgorzata\Downloads\OTL.Txt
2014-03-01 15:19 - 2014-03-01 15:19 - 00065916 _____ () C:\Users\Malgorzata\Downloads\Extras.Txt
2014-03-01 15:14 - 2014-03-01 15:14 - 02155520 _____ (Farbar) C:\Users\Malgorzata\Downloads\FRST64.exe
2014-03-01 15:11 - 2014-03-01 15:11 - 00602112 _____ (OldTimer Tools) C:\Users\Malgorzata\Downloads\OTL.exe
2014-03-01 13:58 - 2014-03-01 13:58 - 00080184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-03-01 13:53 - 2014-03-01 14:50 - 00003248 _____ () C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-02-24 00:08 - 2014-02-24 00:08 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-02-23 19:27 - 2014-02-23 19:29 - 739145728 _____ () C:\Users\Malgorzata\Downloads\Infiltracja.avi
2014-02-19 17:43 - 2014-02-19 17:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-02-17 22:06 - 2014-02-17 22:06 - 00754501 _____ () C:\Users\Malgorzata\Desktop\ffff.oxps
2014-02-16 17:14 - 2014-02-16 17:14 - 03905867 _____ () C:\Users\Malgorzata\Downloads\Zdaj LEKko Zima 2014 ZMIANY.rar
2014-02-16 17:14 - 2014-02-16 17:14 - 00000000 ____D () C:\Users\Malgorzata\Downloads\Zdaj LEKko Zima 2014 ZMIANY
2014-02-15 11:08 - 2014-02-15 11:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 10:37 - 2014-02-15 10:37 - 00633459 _____ () C:\Users\Malgorzata\Downloads\hhh.oxps
2014-02-15 10:37 - 2014-02-15 10:37 - 00475493 _____ () C:\Users\Malgorzata\Downloads\ggg.oxps
2014-02-14 23:56 - 2014-02-15 00:04 - 576707972 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E04.HDTV.XviD-0TV.avi
2014-02-14 23:56 - 2014-02-15 00:03 - 577295822 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E03.HDTV.XviD-NoTV.avi
2014-02-14 23:56 - 2014-02-15 00:03 - 576711398 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E02.HDTV.XviD-0TV.avi
2014-02-14 23:56 - 2014-02-15 00:00 - 367214592 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E05.BDRip.XviD-SAiNTS.avi
2014-02-14 22:03 - 2014-02-14 22:03 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\Apple Computer
2014-02-14 22:03 - 2014-02-14 22:03 - 00000000 ____D () C:\Users\Malgorzata\AppData\Local\Apple Computer
2014-02-14 20:06 - 2014-02-14 20:25 - 180318208 _____ () C:\Users\Malgorzata\Downloads\The Big Bang Theory S07E14 (wgrane napisy PL).avi
2014-02-14 20:03 - 2014-02-14 20:24 - 180361216 _____ () C:\Users\Malgorzata\Downloads\The.Big.Bang.Theory.S07E13.HDTV.XviD wgrane napisy PL.avi
2014-02-13 20:53 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-02-13 20:53 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-02-13 19:15 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-13 19:15 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-13 19:15 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-02-13 19:15 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-13 19:15 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-13 19:15 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-13 19:15 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-13 19:15 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-02-13 19:15 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-02-13 19:15 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-02-13 19:15 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-02-13 19:15 - 2013-11-27 01:19 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-02-13 19:15 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-02-13 19:15 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-02-13 19:14 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-13 19:14 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-13 19:14 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-13 19:14 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-02-13 19:14 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-13 19:14 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-02-13 19:14 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-13 19:14 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-13 19:14 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-13 19:14 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-02-13 19:13 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-02-13 19:13 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-02-13 19:13 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-02-13 19:13 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-02-12 18:38 - 2014-02-12 18:38 - 00005175 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-12 18:38 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-02-12 18:38 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-02-12 18:38 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-02-12 18:38 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-02-02 14:28 - 2014-03-01 13:48 - 00003350 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-02-02 14:28 - 2014-03-01 13:48 - 00003226 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1493833752-2591686170-2324841812-1002

==================== One Month Modified Files and Folders =======

2014-03-01 15:24 - 2014-03-01 15:24 - 00019686 _____ () C:\Users\Malgorzata\Downloads\FRST.txt
2014-03-01 15:24 - 2014-03-01 15:23 - 00000000 ____D () C:\FRST
2014-03-01 15:23 - 2013-09-07 17:48 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-01 15:19 - 2014-03-01 15:19 - 00126810 _____ () C:\Users\Malgorzata\Downloads\OTL.Txt
2014-03-01 15:19 - 2014-03-01 15:19 - 00065916 _____ () C:\Users\Malgorzata\Downloads\Extras.Txt
2014-03-01 15:14 - 2014-03-01 15:14 - 02155520 _____ (Farbar) C:\Users\Malgorzata\Downloads\FRST64.exe
2014-03-01 15:11 - 2014-03-01 15:11 - 00602112 _____ (OldTimer Tools) C:\Users\Malgorzata\Downloads\OTL.exe
2014-03-01 15:09 - 2013-06-05 21:43 - 01255891 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-01 15:00 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-03-01 14:53 - 2013-10-10 16:58 - 00000000 ___HD () C:\Users\Malgorzata\Desktop\.picasaoriginals
2014-03-01 14:50 - 2014-03-01 13:53 - 00003248 _____ () C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-03-01 14:50 - 2014-01-26 01:26 - 00003372 _____ () C:\WINDOWS\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-03-01 14:48 - 2012-07-26 08:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-01 14:36 - 2014-01-11 18:08 - 00000000 ____D () C:\Users\Malgorzata\AppData\Local\genienext
2014-03-01 14:29 - 2014-01-11 18:07 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-03-01 13:59 - 2013-03-25 22:02 - 00138188 _____ () C:\WINDOWS\PFRO.log
2014-03-01 13:59 - 2012-07-26 06:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-03-01 13:58 - 2014-03-01 13:58 - 00080184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-03-01 13:58 - 2013-10-09 14:20 - 00421704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-03-01 13:58 - 2013-10-09 14:20 - 00001977 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-01 13:58 - 2013-10-09 14:19 - 01038072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-03-01 13:58 - 2013-10-09 14:19 - 00334136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-03-01 13:58 - 2013-10-09 14:19 - 00207904 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-03-01 13:58 - 2013-10-09 14:19 - 00078648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-03-01 13:58 - 2013-10-09 14:19 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-03-01 13:58 - 2013-10-09 14:18 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-03-01 13:48 - 2014-02-02 14:28 - 00003350 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-03-01 13:48 - 2014-02-02 14:28 - 00003226 _____ () C:\WINDOWS\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1493833752-2591686170-2324841812-1002
2014-03-01 12:40 - 2013-06-06 07:25 - 00794946 _____ () C:\WINDOWS\system32\perfh015.dat
2014-03-01 12:40 - 2013-06-06 07:25 - 00159530 _____ () C:\WINDOWS\system32\perfc015.dat
2014-03-01 12:40 - 2012-07-26 08:28 - 01793398 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-27 20:11 - 2013-09-11 22:06 - 00000966 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1493833752-2591686170-2324841812-1002UA.job
2014-02-26 16:04 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-02-25 23:36 - 2012-07-26 08:21 - 00041968 _____ () C:\WINDOWS\setupact.log
2014-02-25 23:11 - 2013-09-11 22:06 - 00000944 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1493833752-2591686170-2324841812-1002Core.job
2014-02-24 22:40 - 2013-09-27 17:49 - 00000020 ____H () C:\ProgramData\PKP_DLet.DAT
2014-02-24 21:17 - 2013-09-07 17:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-24 00:08 - 2014-02-24 00:08 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-02-23 19:29 - 2014-02-23 19:27 - 739145728 _____ () C:\Users\Malgorzata\Downloads\Infiltracja.avi
2014-02-23 15:49 - 2013-10-20 11:20 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\Real
2014-02-23 15:49 - 2013-10-20 11:19 - 00000000 ____D () C:\ProgramData\Real
2014-02-23 13:06 - 2014-01-11 18:08 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\newnext.me
2014-02-20 21:23 - 2013-09-07 17:48 - 00003818 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-02-19 17:43 - 2014-02-19 17:43 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-02-18 23:09 - 2013-10-16 18:29 - 00000000 ____D () C:\Users\Malgorzata\Desktop\dokuemnty
2014-02-18 19:09 - 2013-10-25 22:49 - 00012800 ___SH () C:\Users\Malgorzata\Downloads\Thumbs.db
2014-02-17 23:03 - 2013-11-17 18:10 - 00694240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-02-17 23:03 - 2013-11-17 18:10 - 00078304 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-17 22:06 - 2014-02-17 22:06 - 00754501 _____ () C:\Users\Malgorzata\Desktop\ffff.oxps
2014-02-17 22:06 - 2013-09-13 17:11 - 00254464 ___SH () C:\Users\Malgorzata\Desktop\Thumbs.db
2014-02-16 17:14 - 2014-02-16 17:14 - 03905867 _____ () C:\Users\Malgorzata\Downloads\Zdaj LEKko Zima 2014 ZMIANY.rar
2014-02-16 17:14 - 2014-02-16 17:14 - 00000000 ____D () C:\Users\Malgorzata\Downloads\Zdaj LEKko Zima 2014 ZMIANY
2014-02-16 17:02 - 2013-09-08 20:38 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-02-16 17:01 - 2013-09-08 20:38 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-15 11:09 - 2014-02-15 11:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 10:37 - 2014-02-15 10:37 - 00633459 _____ () C:\Users\Malgorzata\Downloads\hhh.oxps
2014-02-15 10:37 - 2014-02-15 10:37 - 00475493 _____ () C:\Users\Malgorzata\Downloads\ggg.oxps
2014-02-15 00:04 - 2014-02-14 23:56 - 576707972 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E04.HDTV.XviD-0TV.avi
2014-02-15 00:03 - 2014-02-14 23:56 - 577295822 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E03.HDTV.XviD-NoTV.avi
2014-02-15 00:03 - 2014-02-14 23:56 - 576711398 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E02.HDTV.XviD-0TV.avi
2014-02-15 00:00 - 2014-02-14 23:56 - 367214592 _____ () C:\Users\Malgorzata\Downloads\Dexter.S03E05.BDRip.XviD-SAiNTS.avi
2014-02-14 22:03 - 2014-02-14 22:03 - 00000000 ____D () C:\Users\Malgorzata\AppData\Roaming\Apple Computer
2014-02-14 22:03 - 2014-02-14 22:03 - 00000000 ____D () C:\Users\Malgorzata\AppData\Local\Apple Computer
2014-02-14 20:25 - 2014-02-14 20:06 - 180318208 _____ () C:\Users\Malgorzata\Downloads\The Big Bang Theory S07E14 (wgrane napisy PL).avi
2014-02-14 20:24 - 2014-02-14 20:03 - 180361216 _____ () C:\Users\Malgorzata\Downloads\The.Big.Bang.Theory.S07E13.HDTV.XviD wgrane napisy PL.avi
2014-02-14 20:01 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-02-13 20:19 - 2013-09-07 17:35 - 00000000 ____D () C:\Users\Malgorzata\Documents\Bluetooth Folder
2014-02-12 18:38 - 2014-02-12 18:38 - 00005175 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_51-b13.log
2014-02-12 18:38 - 2013-10-21 13:26 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-12 18:38 - 2013-10-21 13:26 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-09 00:42 - 2013-09-09 22:21 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1493833752-2591686170-2324841812-1002
2014-02-06 20:24 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2014-02-01 10:20 - 2014-02-13 19:14 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-13 19:14 - 02241536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-01 10:19 - 2014-02-13 19:14 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-01 10:19 - 2014-02-13 19:14 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-02-01 10:19 - 2014-02-13 19:14 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 19274240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 15403520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 03960320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-01 10:18 - 2014-02-13 19:14 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-01 08:58 - 2014-02-13 19:15 - 01767936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-13 19:15 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-01 08:58 - 2014-02-13 19:15 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-02-01 08:57 - 2014-02-13 19:15 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-13 19:15 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-13 19:15 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-01 08:57 - 2014-02-13 19:15 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 14359040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-13 19:14 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-01 08:40 - 2014-02-13 19:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-13 19:14 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-01 06:08 - 2014-02-13 19:14 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Malgorzata\AppData\Local\Temp\appshat-distribution.exe
C:\Users\Malgorzata\AppData\Local\Temp\bitool.dll
C:\Users\Malgorzata\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Malgorzata\AppData\Local\Temp\ICReinstall_atrise.lutcurve.v1.3.winall.incl.keygen-fallen_BitLord.exe
C:\Users\Malgorzata\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Malgorzata\AppData\Local\Temp\lowproc.exe
C:\Users\Malgorzata\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Malgorzata\AppData\Local\Temp\stubhelper.dll
C:\Users\Malgorzata\AppData\Local\Temp\uninst1.exe
C:\Users\Malgorzata\AppData\Local\Temp\_is476A.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-27 17:32

==================== End Of Log ============================