Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-05-2014
Ran by Natalia (administrator) on LAPTOP on 22-05-2014 21:01:55
Running from C:\Users\Natalia\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\stacsv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\System32\atibtmon.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\AEstSrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Hewlett-Packard Company) C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Aztec Media Inc) C:\Program Files\Settings Manager\systemk\SystemkService.exe
(Aztec Media Inc) C:\Program Files\Settings Manager\systemk\SystemkService.exe
(Aztec Media Inc) C:\Program Files\Settings Manager\systemk\systemku.exe
() C:\Users\Natalia\AppData\Local\winlogon.exe
() C:\Users\Natalia\AppData\Local\services.exe
() C:\Users\Natalia\AppData\Local\lsass.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Spotify Ltd) C:\Users\Natalia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\PING.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [6510592 2014-04-08] (Broadcom Corporation)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495708 2010-03-17] (IDT, Inc.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [Bron-Spizaetus] => C:\Windows\ShellNew\sempalong.exe [42734 2008-01-02] ()
HKLM\...\Winlogon: [Shell] Explorer.exe "C:\Windows\eksplorasi.exe" [x ] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2014-04-19] (Microsoft Corporation)
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Run: [Spotify] => C:\Users\Natalia\AppData\Roaming\Spotify\Spotify.exe [6170168 2014-05-18] (Spotify Ltd)
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Run: [Spotify Web Helper] => C:\Users\Natalia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-05-18] (Spotify Ltd)
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Run: [Tok-Cirrhatus] => C:\Users\Natalia\AppData\Local\smss.exe [42734 2008-01-02] ()
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Policies\system: [DisableRegistryTools] 1
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-3717591281-2072224576-1635484359-1000\...\Policies\Explorer: [NoFolderOptions] 1
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Empty.pif ()
HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll
HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Settings Manager\systemk\sysapcrt.dll [490000 2014-05-12] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.sweet-page.com/?type=sc&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=175&itype=a&ver=12627&tm=350&src=ds&p={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=175&itype=a&ver=12627&tm=350&src=ds&p={searchTerms}
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: Linkey - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} - C:\Program Files\Linkey\IEExtension\iedll.dll (Aztec Media Inc)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 194.204.159.1 194.204.152.34

FireFox:
========
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

Chrome: 
=======
CHR HomePage: hxxp://www.default-search.net?sid=476&aid=175&itype=n&ver=12349&tm=350&src=hmp
CHR StartupUrls: "hxxp://www.default-search.net?sid=476&aid=175&itype=n&ver=12349&tm=350&src=hmp", "hxxp://www.sweet-page.com/?type=hp&ts=1400414405&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400528099&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400528802&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400534861&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400607082&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400619817&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400678158&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400698423&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400750991&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400764854&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496", "hxxp://www.sweet-page.com/?type=hppp&ts=1400784960&from=sof&uid=SAMSUNGXHM321HI_S25WJ9DB112496"
CHR Extension: (Dokumenty Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-08]
CHR Extension: (Dysk Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-08]
CHR Extension: (YouTube) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-08]
CHR Extension: (Szukaj w Google) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-08]
CHR Extension: (Google Wallet) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-08]
CHR Extension: (Gmail) - C:\Users\Natalia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-08]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [49464 2014-04-01] (Hewlett-Packard Company)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_7b6e808b01435efc\STacSV.exe [229458 2010-03-17] (IDT, Inc.)
R2 SystemkService; C:\Program Files\Settings Manager\systemk\SystemkService.exe [3543056 2014-05-12] (Aztec Media Inc)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [5217280 2014-04-08] (Broadcom Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [549008 2014-05-12] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
R3 BCM42RLY; C:\Windows\System32\drivers\BCM42RLY.sys [18536 2014-04-08] (Broadcom Corporation)
R1 F06DEFF2-5B9C-490D-910F-35D3A91196222; C:\Program Files\Settings Manager\systemk\systemkmgrc1.cfg [31120 2014-05-12] (Aztec Media Inc)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-22 21:01 - 2014-05-22 21:02 - 00013671 _____ () C:\Users\Natalia\Downloads\FRST.txt
2014-05-22 21:01 - 2014-05-22 21:01 - 00000000 ____D () C:\FRST
2014-05-22 20:59 - 2014-05-22 20:59 - 01056768 _____ (Farbar) C:\Users\Natalia\Downloads\FRST.exe
2014-05-22 15:32 - 2014-05-22 15:32 - 00012393 _____ () C:\Users\Natalia\AppData\Local\Bron.tok.A11.em.bin
2014-05-22 12:53 - 2014-05-22 12:52 - 00093986 _____ () C:\Users\Natalia\Desktop\OTL.Txt
2014-05-22 12:53 - 2014-05-22 12:51 - 00050602 _____ () C:\Users\Natalia\Desktop\Extras.Txt
2014-05-22 12:51 - 2014-05-22 12:52 - 00093986 _____ () C:\Users\Natalia\Downloads\OTL.Txt
2014-05-22 12:51 - 2014-05-22 12:51 - 00050602 _____ () C:\Users\Natalia\Downloads\Extras.Txt
2014-05-22 12:43 - 2014-05-22 12:44 - 00602112 _____ (OldTimer Tools) C:\Users\Natalia\Downloads\OTL.exe
2014-05-22 11:29 - 2014-05-22 11:29 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-22
2014-05-21 15:16 - 2014-05-21 15:16 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-21
2014-05-20 10:36 - 2014-05-20 10:36 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-20
2014-05-19 22:12 - 2014-05-19 22:12 - 00947767 _____ (DriverIdentifier ) C:\Users\Natalia\Downloads\driveridentifier_setup.exe
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\driveridentifier
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Identifier
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\Program Files\Driver Identifier
2014-05-19 21:44 - 2014-05-19 21:44 - 00363629 __RSH () C:\DYLHP
2014-05-19 21:43 - 2014-05-17 11:31 - 00000000 ___RD () C:\Users\Natalia\Desktop\Aktywator
2014-05-19 21:42 - 2014-05-19 21:42 - 01744037 _____ () C:\Users\Natalia\Downloads\Aktywator.zip
2014-05-19 21:34 - 2014-05-19 21:34 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-19
2014-05-18 16:57 - 2014-05-18 16:57 - 00000000 ____D () C:\Users\Natalia\Documents\SPSSInc
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\AppData\Local\javasharedresources
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\AppData\Local\IBM
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\.spss
2014-05-18 16:48 - 2014-05-18 16:48 - 00000000 ____D () C:\Users\Natalia\Downloads\Nowy folder
2014-05-18 16:41 - 2014-05-18 16:41 - 00000000 ____D () C:\ProgramData\SafeNet Sentinel
2014-05-18 16:40 - 2014-05-18 16:40 - 00000000 ____D () C:\ProgramData\SPSS
2014-05-18 16:39 - 2014-05-18 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics
2014-05-18 16:38 - 2014-05-18 16:38 - 00000000 ____D () C:\Program Files\Common Files\IBM
2014-05-18 16:37 - 2014-05-18 16:37 - 00000000 ____D () C:\Program Files\IBM
2014-05-18 16:36 - 2014-05-18 16:36 - 00001025 _____ () C:\Windows\system32\sysprs7.tgz
2014-05-18 16:36 - 2014-05-18 16:36 - 00001025 _____ () C:\Windows\system32\sysprs7.dll
2014-05-18 16:36 - 2014-05-18 16:36 - 00000219 _____ () C:\Windows\system32\lsprst7.tgz
2014-05-18 16:36 - 2014-05-18 16:36 - 00000205 _____ () C:\Windows\system32\lsprst7.dll
2014-05-18 16:36 - 2014-05-18 16:36 - 00000016 ____H () C:\Windows\system32\servdat.slm
2014-05-18 16:27 - 2014-05-18 16:27 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-18 16:25 - 2014-05-18 16:26 - 01929720 _____ () C:\Users\Natalia\Downloads\wrar501pl.exe
2014-05-18 14:12 - 2014-05-18 14:41 - 1079250330 _____ () C:\Users\Natalia\Downloads\IBM SPSS Statistics 21 PL -Zestaw narzędzi do Analizy Danych i Analizy Produkcyjnej -FULL Serial+Crack.rar
2014-05-18 14:05 - 2014-05-18 14:05 - 00386872 _____ (Softonic ) C:\Users\Natalia\Downloads\SoftonicDownloader_dla_spss-16.exe
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\sweet-page
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\SupTab
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\ProgramData\WPM
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Program Files\SupTab
2014-05-18 13:41 - 2014-05-18 14:05 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Loc.Mail.Bron.Tok
2014-05-18 13:41 - 2014-05-18 13:41 - 00000051 _____ () C:\Users\Natalia\AppData\Local\Kosong.Bron.Tok.txt
2014-05-18 13:40 - 2014-05-18 13:40 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Ok-SendMail-Bron-tok
2014-05-18 13:35 - 2014-05-18 13:58 - 940731271 _____ () C:\Users\Natalia\Desktop\CI3HVML[1].zip
2014-05-18 13:35 - 2014-05-18 13:35 - 00012393 _____ () C:\Users\Natalia\AppData\Local\ListHost11.txt
2014-05-18 13:35 - 2014-05-18 13:35 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-18
2014-05-17 14:25 - 2014-05-17 14:25 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-17 14:23 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-17 14:23 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-17 14:23 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-17 14:17 - 2014-05-22 21:02 - 00000000 ____D () C:\ProgramData\systemk
2014-05-17 14:16 - 2014-05-17 14:16 - 00000000 ____D () C:\Program Files\Settings Manager
2014-05-17 14:16 - 2014-05-17 14:16 - 00000000 ____D () C:\Program Files\Linkey
2014-05-17 13:55 - 2014-05-17 14:16 - 940731271 _____ () C:\Users\Natalia\Desktop\CI3HVML.zip
2014-05-17 13:51 - 2014-05-17 13:51 - 00386880 _____ (Softonic ) C:\Users\Natalia\Downloads\SoftonicDownloader_dla_spss.exe
2014-05-17 11:29 - 2014-05-17 11:29 - 00069632 ____N () C:\Users\Natalia\Downloads\gcfhogares_enlazada95_12_en.xls
2014-05-17 11:25 - 2014-05-09 09:06 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-17 11:25 - 2014-05-09 09:04 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-17 11:24 - 2014-04-12 04:15 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-17 11:24 - 2014-04-12 04:15 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-17 11:24 - 2014-04-12 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-17 11:24 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-17 11:24 - 2014-04-12 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-17 11:24 - 2014-04-12 04:11 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-17 11:24 - 2014-04-12 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-17 11:24 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-17 11:24 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-05-17 11:24 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-17 11:24 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-17 11:24 - 2014-03-04 11:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-17 11:24 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-11 18:42 - 2014-05-11 18:42 - 00034816 ____N () C:\Users\Natalia\Downloads\afi3.xls
2014-05-11 18:41 - 2014-05-11 18:42 - 00050176 ____N () C:\Users\Natalia\Downloads\afi10.xls
2014-05-06 20:00 - 2014-05-18 13:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 00:04 - 2014-05-06 00:04 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku (2).pptx
2014-05-06 00:04 - 2014-05-06 00:04 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku (1).pptx
2014-05-06 00:03 - 2014-05-06 00:03 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku.pptx
2014-05-05 18:41 - 2014-05-05 19:52 - 00066590 _____ () C:\Users\Natalia\Desktop\Działalność biznesowa w Meksyku.pptx
2014-05-04 21:53 - 2014-05-04 21:53 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Blizzard
2014-05-01 12:18 - 2014-05-22 11:33 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-01 12:17 - 2014-05-22 12:12 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Battle.net
2014-05-01 12:17 - 2014-05-04 21:52 - 00000000 ____D () C:\Program Files\Battle.net
2014-05-01 12:17 - 2014-05-01 12:18 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\Battle.net
2014-05-01 12:17 - 2014-05-01 12:17 - 00001108 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Blizzard Entertainment
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment
2014-05-01 12:14 - 2014-05-01 12:14 - 00000000 ____D () C:\ProgramData\Battle.net
2014-05-01 12:13 - 2014-05-01 12:14 - 06902224 _____ (Blizzard Entertainment) C:\Users\Natalia\Downloads\Battle.net-Setup-enGB.exe
2014-05-01 00:57 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-01 00:57 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-01 00:57 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-01 00:57 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-01 00:57 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-01 00:57 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-01 00:57 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-01 00:57 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-01 00:57 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-01 00:57 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-01 00:57 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-01 00:57 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-01 00:57 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-01 00:57 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-01 00:57 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-01 00:57 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-01 00:57 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-01 00:57 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-01 00:57 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-01 00:57 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-01 00:57 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-01 00:57 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-01 00:57 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-01 00:57 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-27 20:34 - 2014-04-27 20:34 - 01609026 ____H () C:\Users\Natalia\Desktop\~WRL0003.tmp
2014-04-22 21:58 - 2014-04-22 22:26 - 00000000 ____D () C:\Users\Natalia\Desktop\kopia asus
2014-04-22 21:29 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-04-22 21:29 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-04-22 21:29 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-04-22 21:29 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-04-22 21:29 - 2012-02-11 07:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-04-22 21:29 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-04-22 21:26 - 2014-04-22 21:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-04-22 21:26 - 2014-04-22 21:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-04-22 21:26 - 2014-04-22 21:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-04-22 21:25 - 2014-04-22 21:25 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-04-22 21:25 - 2014-04-22 21:25 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-04-22 21:25 - 2014-04-22 21:25 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

==================== One Month Modified Files and Folders =======

2014-05-22 21:02 - 2014-05-22 21:01 - 00013671 _____ () C:\Users\Natalia\Downloads\FRST.txt
2014-05-22 21:02 - 2014-05-17 14:17 - 00000000 ____D () C:\ProgramData\systemk
2014-05-22 21:01 - 2014-05-22 21:01 - 00000000 ____D () C:\FRST
2014-05-22 21:00 - 2014-04-08 10:49 - 01199281 _____ () C:\Windows\WindowsUpdate.log
2014-05-22 20:59 - 2014-05-22 20:59 - 01056768 _____ (Farbar) C:\Users\Natalia\Downloads\FRST.exe
2014-05-22 20:58 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-05-22 20:57 - 2014-04-08 18:53 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\Spotify
2014-05-22 20:56 - 2009-07-14 04:04 - 00000007 ___SH () C:\autoexec.bat
2014-05-22 20:55 - 2014-04-08 12:02 - 00001034 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-22 20:55 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-22 20:55 - 2009-07-14 06:39 - 00026918 _____ () C:\Windows\setupact.log
2014-05-22 15:38 - 2009-07-14 06:34 - 00022784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-22 15:38 - 2009-07-14 06:34 - 00022784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-22 15:32 - 2014-05-22 15:32 - 00012393 _____ () C:\Users\Natalia\AppData\Local\Bron.tok.A11.em.bin
2014-05-22 15:22 - 2014-04-08 18:54 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Spotify
2014-05-22 14:20 - 2014-04-08 12:02 - 00001038 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-22 12:52 - 2014-05-22 12:53 - 00093986 _____ () C:\Users\Natalia\Desktop\OTL.Txt
2014-05-22 12:52 - 2014-05-22 12:51 - 00093986 _____ () C:\Users\Natalia\Downloads\OTL.Txt
2014-05-22 12:51 - 2014-05-22 12:53 - 00050602 _____ () C:\Users\Natalia\Desktop\Extras.Txt
2014-05-22 12:51 - 2014-05-22 12:51 - 00050602 _____ () C:\Users\Natalia\Downloads\Extras.Txt
2014-05-22 12:44 - 2014-05-22 12:43 - 00602112 _____ (OldTimer Tools) C:\Users\Natalia\Downloads\OTL.exe
2014-05-22 12:12 - 2014-05-01 12:17 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Battle.net
2014-05-22 11:33 - 2014-05-01 12:18 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-22 11:29 - 2014-05-22 11:29 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-22
2014-05-22 11:29 - 2014-04-08 11:03 - 00000000 ____D () C:\Users\Natalia
2014-05-21 18:17 - 2014-04-10 18:07 - 00000000 ____D () C:\Users\Natalia\Desktop\praca mgr
2014-05-21 15:16 - 2014-05-21 15:16 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-21
2014-05-20 11:45 - 2013-01-24 17:07 - 00000000 ____D () C:\filmy latoch
2014-05-20 10:36 - 2014-05-20 10:36 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-20
2014-05-19 22:12 - 2014-05-19 22:12 - 00947767 _____ (DriverIdentifier ) C:\Users\Natalia\Downloads\driveridentifier_setup.exe
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\driveridentifier
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Identifier
2014-05-19 22:12 - 2014-05-19 22:12 - 00000000 ____D () C:\Program Files\Driver Identifier
2014-05-19 21:44 - 2014-05-19 21:44 - 00363629 __RSH () C:\DYLHP
2014-05-19 21:42 - 2014-05-19 21:42 - 01744037 _____ () C:\Users\Natalia\Downloads\Aktywator.zip
2014-05-19 21:39 - 2014-04-08 11:57 - 00109888 _____ () C:\Users\Natalia\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-19 21:34 - 2014-05-19 21:34 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-19
2014-05-19 21:34 - 2009-07-14 06:33 - 00419944 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-18 16:57 - 2014-05-18 16:57 - 00000000 ____D () C:\Users\Natalia\Documents\SPSSInc
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\AppData\Local\javasharedresources
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\AppData\Local\IBM
2014-05-18 16:49 - 2014-05-18 16:49 - 00000000 ____D () C:\Users\Natalia\.spss
2014-05-18 16:48 - 2014-05-18 16:48 - 00000000 ____D () C:\Users\Natalia\Downloads\Nowy folder
2014-05-18 16:41 - 2014-05-18 16:41 - 00000000 ____D () C:\ProgramData\SafeNet Sentinel
2014-05-18 16:40 - 2014-05-18 16:40 - 00000000 ____D () C:\ProgramData\SPSS
2014-05-18 16:39 - 2014-05-18 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics
2014-05-18 16:38 - 2014-05-18 16:38 - 00000000 ____D () C:\Program Files\Common Files\IBM
2014-05-18 16:37 - 2014-05-18 16:37 - 00000000 ____D () C:\Program Files\IBM
2014-05-18 16:36 - 2014-05-18 16:36 - 00001025 _____ () C:\Windows\system32\sysprs7.tgz
2014-05-18 16:36 - 2014-05-18 16:36 - 00001025 _____ () C:\Windows\system32\sysprs7.dll
2014-05-18 16:36 - 2014-05-18 16:36 - 00000219 _____ () C:\Windows\system32\lsprst7.tgz
2014-05-18 16:36 - 2014-05-18 16:36 - 00000205 _____ () C:\Windows\system32\lsprst7.dll
2014-05-18 16:36 - 2014-05-18 16:36 - 00000016 ____H () C:\Windows\system32\servdat.slm
2014-05-18 16:27 - 2014-05-18 16:27 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-05-18 16:26 - 2014-05-18 16:26 - 00000000 ____D () C:\Program Files\WinRAR
2014-05-18 16:26 - 2014-05-18 16:25 - 01929720 _____ () C:\Users\Natalia\Downloads\wrar501pl.exe
2014-05-18 14:41 - 2014-05-18 14:12 - 1079250330 _____ () C:\Users\Natalia\Downloads\IBM SPSS Statistics 21 PL -Zestaw narzędzi do Analizy Danych i Analizy Produkcyjnej -FULL Serial+Crack.rar
2014-05-18 14:05 - 2014-05-18 14:05 - 00386872 _____ (Softonic ) C:\Users\Natalia\Downloads\SoftonicDownloader_dla_spss-16.exe
2014-05-18 14:05 - 2014-05-18 13:41 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Loc.Mail.Bron.Tok
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\sweet-page
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\SupTab
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\ProgramData\WPM
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\ProgramData\IePluginService
2014-05-18 14:00 - 2014-05-18 14:00 - 00000000 ____D () C:\Program Files\SupTab
2014-05-18 14:00 - 2014-04-08 12:03 - 00002321 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-05-18 14:00 - 2014-04-08 11:04 - 00001611 _____ () C:\Users\Natalia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-18 13:58 - 2014-05-18 13:35 - 940731271 _____ () C:\Users\Natalia\Desktop\CI3HVML[1].zip
2014-05-18 13:41 - 2014-05-18 13:41 - 00000051 _____ () C:\Users\Natalia\AppData\Local\Kosong.Bron.Tok.txt
2014-05-18 13:40 - 2014-05-18 13:40 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Ok-SendMail-Bron-tok
2014-05-18 13:35 - 2014-05-18 13:35 - 00012393 _____ () C:\Users\Natalia\AppData\Local\ListHost11.txt
2014-05-18 13:35 - 2014-05-18 13:35 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Bron.tok-11-18
2014-05-18 13:35 - 2009-07-14 10:28 - 00000000 ____D () C:\Windows\ShellNew
2014-05-18 13:24 - 2014-05-06 20:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-18 13:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-05-17 14:28 - 2014-04-14 17:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-17 14:25 - 2014-05-17 14:25 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-17 14:16 - 2014-05-17 14:16 - 00000000 ____D () C:\Program Files\Settings Manager
2014-05-17 14:16 - 2014-05-17 14:16 - 00000000 ____D () C:\Program Files\Linkey
2014-05-17 14:16 - 2014-05-17 13:55 - 940731271 _____ () C:\Users\Natalia\Desktop\CI3HVML.zip
2014-05-17 13:51 - 2014-05-17 13:51 - 00386880 _____ (Softonic ) C:\Users\Natalia\Downloads\SoftonicDownloader_dla_spss.exe
2014-05-17 11:31 - 2014-05-19 21:43 - 00000000 ___RD () C:\Users\Natalia\Desktop\Aktywator
2014-05-17 11:29 - 2014-05-17 11:29 - 00069632 ____N () C:\Users\Natalia\Downloads\gcfhogares_enlazada95_12_en.xls
2014-05-11 18:42 - 2014-05-11 18:42 - 00034816 ____N () C:\Users\Natalia\Downloads\afi3.xls
2014-05-11 18:42 - 2014-05-11 18:41 - 00050176 ____N () C:\Users\Natalia\Downloads\afi10.xls
2014-05-09 09:06 - 2014-05-17 11:25 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 09:04 - 2014-05-17 11:25 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-06 05:25 - 2014-05-17 14:23 - 17382912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 05:07 - 2014-05-17 14:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 04:10 - 2014-05-17 14:23 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 00:04 - 2014-05-06 00:04 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku (2).pptx
2014-05-06 00:04 - 2014-05-06 00:04 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku (1).pptx
2014-05-06 00:03 - 2014-05-06 00:03 - 00183960 _____ () C:\Users\Natalia\Downloads\Działalność biznesowa w Meksyku.pptx
2014-05-05 19:52 - 2014-05-05 18:41 - 00066590 _____ () C:\Users\Natalia\Desktop\Działalność biznesowa w Meksyku.pptx
2014-05-04 21:53 - 2014-05-04 21:53 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Blizzard
2014-05-04 21:52 - 2014-05-01 12:17 - 00000000 ____D () C:\Program Files\Battle.net
2014-05-01 13:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-05-01 12:18 - 2014-05-01 12:17 - 00000000 ____D () C:\Users\Natalia\AppData\Roaming\Battle.net
2014-05-01 12:17 - 2014-05-01 12:17 - 00001108 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\Users\Natalia\AppData\Local\Blizzard Entertainment
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-05-01 12:17 - 2014-05-01 12:17 - 00000000 ____D () C:\Program Files\Common Files\Blizzard Entertainment
2014-05-01 12:14 - 2014-05-01 12:14 - 00000000 ____D () C:\ProgramData\Battle.net
2014-05-01 12:14 - 2014-05-01 12:13 - 06902224 _____ (Blizzard Entertainment) C:\Users\Natalia\Downloads\Battle.net-Setup-enGB.exe
2014-04-27 20:34 - 2014-04-27 20:34 - 01609026 ____H () C:\Users\Natalia\Desktop\~WRL0003.tmp
2014-04-26 20:24 - 2014-04-08 11:07 - 01694026 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-26 20:24 - 2009-07-14 10:07 - 00752400 _____ () C:\Windows\system32\perfh015.dat
2014-04-26 20:24 - 2009-07-14 10:07 - 00159714 _____ () C:\Windows\system32\perfc015.dat
2014-04-26 12:40 - 2009-07-14 06:46 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-23 10:40 - 2014-04-08 12:40 - 00059436 _____ () C:\Windows\PFRO.log
2014-04-22 22:26 - 2014-04-22 21:58 - 00000000 ____D () C:\Users\Natalia\Desktop\kopia asus
2014-04-22 21:54 - 2012-04-02 11:59 - 00000000 ____D () C:\filmy
2014-04-22 21:30 - 2014-04-21 20:22 - 00017197 _____ () C:\Windows\IE11_main.log
2014-04-22 21:26 - 2014-04-22 21:26 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-04-22 21:26 - 2014-04-22 21:26 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-04-22 21:26 - 2014-04-22 21:26 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-04-22 21:26 - 2014-04-22 21:26 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-04-22 21:26 - 2014-04-22 21:26 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-04-22 21:26 - 2014-04-22 21:26 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-04-22 21:25 - 2014-04-22 21:25 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-04-22 21:25 - 2014-04-22 21:25 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-04-22 21:25 - 2014-04-22 21:25 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

Some content of TEMP:
====================
C:\Users\Natalia\AppData\Local\Temp\306_sof_www-sweet-page-com-05-05-14.exe
C:\Users\Natalia\AppData\Local\Temp\SettingsManagerSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe
[2014-05-17 11:24] - [2014-03-04 11:17] - 0304128 ____A (Microsoft Corporation) 998507B046BA314CE8245364C686FA67

C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-12 19:33

==================== End Of Log ============================