Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02 Ran by Seweryn (administrator) on SEWERYN on 29-05-2014 22:38:36 Running from C:\Users\Seweryn\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Windows\PLFSetI.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\SysWOW64\PnkBstrB.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (BitTorrent Inc.) C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe (Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [824352 2009-08-29] (Acer Incorporated) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] () HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-05-16] (Realtek Semiconductor) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1157640 2009-08-18] (Dritek System Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SystemExplorerAutoStart] => C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2851784 2013-05-16] (Mister Group) HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [uTorrent] => C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe [1272400 2014-05-10] (BitTorrent Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_pl BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\wk3acalw.default-1401371051926 FF Homepage: https://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Seweryn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF user.js: detected! => C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\wk3acalw.default-1401371051926\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer Cloud) FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-07] FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION ==================== Services (Whitelisted) ================= R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.) S4 ICM_UpdaterService; C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [204883 2011-03-18] () R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) S4 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.) S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-06-01] (Nero AG) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2010-02-27] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2010-02-27] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] () S4 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-07] (RealNetworks, Inc.) R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099512 2013-08-30] (AVG) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-02-04] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-07] (DT Soft Ltd) R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [42816 2006-12-13] (Eutron) S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-12-30] () R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-02-03] () R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] () S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-02] (Realtek Semiconductor Corp.) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-23] (Duplex Secure Ltd.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) U3 alwqiy9n; C:\Windows\System32\Drivers\alwqiy9n.sys [0 ] (Advanced Micro Devices) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-29 22:38 - 2014-05-29 22:38 - 00017322 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-29 22:38 - 2014-05-29 22:38 - 00000000 ____D () C:\Users\Seweryn\Desktop\FRST-OlderVersion 2014-05-29 22:26 - 2014-05-29 22:28 - 00002155 _____ () C:\Windows\epplauncher.mif 2014-05-29 22:25 - 2014-05-29 22:28 - 00002081 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-05-29 22:25 - 2014-05-29 22:28 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-05-29 22:25 - 2014-05-29 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-05-29 21:41 - 2014-05-29 21:41 - 00000000 ____D () C:\translations 2014-05-29 21:41 - 2014-05-29 21:41 - 00000000 ____D () C:\cis 2014-05-29 21:41 - 2014-04-16 23:12 - 04997848 _____ (COMODO) C:\cmdinstall.exe 2014-05-29 21:41 - 2014-03-25 21:22 - 03359448 _____ (Terra Informatica Software, Inc.) C:\cmdhtml.dll 2014-05-29 21:41 - 2014-03-25 21:22 - 02656984 _____ (COMODO) C:\cmdstat.dll 2014-05-29 21:41 - 2014-03-25 21:22 - 00281816 _____ (Igor Pavlov) C:\7za.dll 2014-05-29 21:38 - 2014-05-29 21:41 - 00001366 __RSH () C:\Windows\SysWOW64\{1606DC18-9578-4cbd-8312-8E9868F06A1D}.conf 2014-05-29 21:29 - 2014-05-29 21:29 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO 2014-05-29 21:28 - 2014-05-29 22:16 - 00002240 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-29 21:27 - 2014-05-29 21:27 - 00000000 ____D () C:\ProgramData\Comodo Downloader 2014-05-29 21:25 - 2014-05-29 22:17 - 00000000 ____D () C:\ProgramData\Comodo 2014-05-29 16:36 - 2014-05-29 16:39 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-05-29 16:26 - 2009-01-15 11:03 - 00055808 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\L1C60x64.sys 2014-05-29 15:49 - 2014-05-29 15:46 - 00004646 _____ () C:\Users\Seweryn\Desktop\AdwCleaner[R0].txt 2014-05-29 15:49 - 2014-05-29 15:46 - 00004125 _____ () C:\Users\Seweryn\Desktop\AdwCleaner[S0].txt 2014-05-29 15:45 - 2014-05-29 15:46 - 00000000 ____D () C:\AdwCleaner 2014-05-29 15:44 - 2014-05-29 15:44 - 00000000 ____D () C:\Users\Seweryn\Desktop\Stare dane programu Firefox 2014-05-29 15:43 - 2014-05-29 15:43 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\AVG 2014-05-29 14:37 - 2014-05-29 14:37 - 01327971 _____ () C:\Users\Seweryn\Desktop\adwcleaner_3.211.exe 2014-05-29 14:35 - 2014-05-29 14:35 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\Seweryn\Desktop\kavremover.exe 2014-05-20 22:49 - 2014-05-20 23:48 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\CrashDumps 2014-05-19 22:07 - 2014-05-29 22:38 - 00000000 ____D () C:\FRST 2014-05-19 21:38 - 2014-05-29 22:38 - 02066944 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-19 21:38 - 2014-05-19 21:37 - 00602112 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\OTL.exe 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-15 15:52 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 15:52 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 15:46 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 15:46 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 15:46 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 15:46 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 15:46 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 15:45 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 15:45 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 15:45 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 15:45 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 15:45 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 15:45 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 15:45 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 18:40 - 2014-05-14 18:40 - 00039091 _____ () C:\ComboFix.txt 2014-05-14 18:12 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-14 18:12 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-14 18:12 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-14 18:12 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-14 18:10 - 2014-05-14 18:40 - 00000000 ____D () C:\Qoobox 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 17:22 - 2013-12-30 03:54 - 00233472 _____ (Teruten) C:\Windows\SysWOW64\FsUsbExService.Exe 2014-05-12 17:22 - 2013-12-30 03:54 - 00037344 _____ () C:\Windows\SysWOW64\FsUsbExDisk.Sys 2014-05-12 17:22 - 2012-06-26 16:03 - 00110592 _____ () C:\Windows\SysWOW64\FsUsbExDevice.Dll 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:30 - 2014-05-12 16:31 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-12 16:30 - 2009-07-27 15:04 - 00058880 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:30 - 2014-05-09 21:31 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-07 23:19 - 2014-05-07 23:21 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:10 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-07 23:09 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-07 23:09 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-07 23:08 - 2014-05-07 23:09 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:41 - 2014-05-07 20:02 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:40 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:40 - 2014-05-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync 2014-05-07 18:39 - 2014-05-14 19:14 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-07 18:39 - 2014-05-07 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2014-05-07 18:38 - 2014-05-07 20:33 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-06 22:44 - 2014-05-07 20:22 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-04 14:30 - 2014-05-12 18:02 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn ==================== One Month Modified Files and Folders ======= 2014-05-29 22:39 - 2014-05-29 22:38 - 00017322 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-29 22:38 - 2014-05-29 22:38 - 00000000 ____D () C:\Users\Seweryn\Desktop\FRST-OlderVersion 2014-05-29 22:38 - 2014-05-19 22:07 - 00000000 ____D () C:\FRST 2014-05-29 22:38 - 2014-05-19 21:38 - 02066944 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-29 22:37 - 2009-11-13 22:46 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\uTorrent 2014-05-29 22:36 - 2013-12-22 17:47 - 01157237 ____N () C:\Windows\WindowsUpdate.log 2014-05-29 22:36 - 2013-04-23 12:02 - 00000000 ____D () C:\Windows\Minidump 2014-05-29 22:31 - 2013-04-13 20:12 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-05-29 22:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-29 22:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-05-29 22:28 - 2014-05-29 22:26 - 00002155 _____ () C:\Windows\epplauncher.mif 2014-05-29 22:28 - 2014-05-29 22:25 - 00002081 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-05-29 22:28 - 2014-05-29 22:25 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-05-29 22:28 - 2014-05-29 22:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-05-29 22:25 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-29 22:25 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-29 22:17 - 2014-05-29 21:25 - 00000000 ____D () C:\ProgramData\Comodo 2014-05-29 22:16 - 2014-05-29 21:28 - 00002240 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-29 22:14 - 2012-04-07 20:08 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-29 21:41 - 2014-05-29 21:41 - 00000000 ____D () C:\translations 2014-05-29 21:41 - 2014-05-29 21:41 - 00000000 ____D () C:\cis 2014-05-29 21:41 - 2014-05-29 21:38 - 00001366 __RSH () C:\Windows\SysWOW64\{1606DC18-9578-4cbd-8312-8E9868F06A1D}.conf 2014-05-29 21:41 - 2012-10-20 17:44 - 00000670 _____ () C:\Windows\SysWOW64\{7995330B-E01F-4645-B702-53481E7CB778}.cmdfile 2014-05-29 21:29 - 2014-05-29 21:29 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO 2014-05-29 21:27 - 2014-05-29 21:27 - 00000000 ____D () C:\ProgramData\Comodo Downloader 2014-05-29 17:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-29 16:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-29 16:39 - 2014-05-29 16:36 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-05-29 16:39 - 2009-10-03 04:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-29 16:29 - 2011-08-01 20:42 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-05-29 15:46 - 2014-05-29 15:49 - 00004646 _____ () C:\Users\Seweryn\Desktop\AdwCleaner[R0].txt 2014-05-29 15:46 - 2014-05-29 15:49 - 00004125 _____ () C:\Users\Seweryn\Desktop\AdwCleaner[S0].txt 2014-05-29 15:46 - 2014-05-29 15:45 - 00000000 ____D () C:\AdwCleaner 2014-05-29 15:44 - 2014-05-29 15:44 - 00000000 ____D () C:\Users\Seweryn\Desktop\Stare dane programu Firefox 2014-05-29 15:43 - 2014-05-29 15:43 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\AVG 2014-05-29 15:16 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-29 14:37 - 2014-05-29 14:37 - 01327971 _____ () C:\Users\Seweryn\Desktop\adwcleaner_3.211.exe 2014-05-29 14:35 - 2014-05-29 14:35 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\Seweryn\Desktop\kavremover.exe 2014-05-28 23:08 - 2014-02-16 17:20 - 00000000 ____D () C:\The KMPlayer 2014-05-26 13:34 - 2013-09-09 19:07 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-05-26 13:16 - 2014-04-13 13:24 - 00000000 ____D () C:\Users\Seweryn\Desktop\administracja 2014-05-22 16:26 - 2009-10-28 14:32 - 00740688 _____ () C:\Windows\system32\perfh015.dat 2014-05-22 16:26 - 2009-10-28 14:32 - 00156230 _____ () C:\Windows\system32\perfc015.dat 2014-05-22 16:26 - 2009-07-14 07:13 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-20 23:48 - 2014-05-20 22:49 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\CrashDumps 2014-05-19 21:37 - 2014-05-19 21:38 - 00602112 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\OTL.exe 2014-05-16 00:49 - 2014-03-09 22:52 - 00000000 ____D () C:\DrvInstall 2014-05-16 00:48 - 2014-03-09 22:54 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 16:32 - 2013-03-15 15:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-05-15 16:31 - 2009-10-03 04:35 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 16:07 - 2013-07-14 23:59 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 16:03 - 2009-11-14 15:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-15 15:59 - 2009-07-14 04:34 - 00000583 _____ () C:\Windows\win.ini 2014-05-14 19:14 - 2014-05-07 18:39 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-14 19:14 - 2012-09-11 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Szkola podstawowa klasa 4 2014-05-14 18:40 - 2014-05-14 18:40 - 00039091 _____ () C:\ComboFix.txt 2014-05-14 18:40 - 2014-05-14 18:10 - 00000000 ____D () C:\Qoobox 2014-05-14 18:33 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-14 17:14 - 2012-04-07 20:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 17:14 - 2012-04-07 20:08 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-14 17:14 - 2011-06-10 23:21 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-12 18:02 - 2014-05-04 14:30 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:31 - 2014-05-12 16:30 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-12 16:04 - 2013-04-08 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-10 22:48 - 2010-02-07 12:04 - 00016384 _____ () C:\Users\Seweryn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:31 - 2014-05-09 21:30 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-09 17:19 - 2014-04-26 21:47 - 00000000 ____D () C:\Users\Seweryn\Desktop\BMR 2014-05-07 23:38 - 2012-05-21 15:31 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Adobe 2014-05-07 23:30 - 2013-08-11 19:15 - 00000000 ____D () C:\Program Files (x86)\Windows Phone 2014-05-07 23:30 - 2012-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Real 2014-05-07 23:29 - 2013-11-28 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-07 23:29 - 2013-09-02 21:06 - 00000000 ____D () C:\ProgramData\SystemExplorer 2014-05-07 23:29 - 2013-08-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone 2014-05-07 23:29 - 2012-12-22 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks 2014-05-07 23:29 - 2012-09-04 15:39 - 00000000 ____D () C:\ProgramData\Real 2014-05-07 23:29 - 2012-03-01 19:10 - 00000000 ____D () C:\Windows\system32\Macromed 2014-05-07 23:29 - 2010-12-24 14:55 - 00000000 ____D () C:\Windows\WindowsMobile 2014-05-07 23:29 - 2010-04-06 15:56 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-05-07 23:29 - 2010-01-06 14:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\XnView 2014-05-07 23:29 - 2009-11-12 20:29 - 00000000 ____D () C:\Users\Seweryn 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 23:21 - 2014-05-07 23:19 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:18 - 2012-09-04 15:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\Real 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:11 - 2014-04-07 17:55 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-05-07 23:08 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:09 - 2009-11-15 19:59 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 20:46 - 2009-10-03 04:34 - 00000000 __RHD () C:\MSOCache 2014-05-07 20:33 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 20:22 - 2014-05-07 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC 2014-05-07 20:22 - 2014-05-06 22:44 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 20:02 - 2014-05-07 18:41 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:42 - 2014-05-07 18:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:40 - 2014-05-07 18:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HTC Sync 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn Some content of TEMP: ==================== C:\Users\Seweryn\AppData\Local\Temp\mpam-6adec960.exe C:\Users\Seweryn\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2009-11-14 17:49 ==================== End Of Log ============================