Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-05-2014
Ran by Magdalena (administrator) on MAGDA on 31-05-2014 01:51:00
Running from C:\Users\Magdalena\Downloads
Platform: Windows 8.1 Pro (Update 1) (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(HP) C:\Windows\System32\HPSIsvc.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(National Instruments Corporation) C:\Windows\SysWOW64\lkads.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(National Instruments Corporation) D:\Programy\LABVIEW\MAX\nimxs.exe
(National Instruments Corporation) D:\Programy\LABVIEW\Shared\Security\nidmsrv.exe
(National Instruments Corporation) D:\Programy\LABVIEW\Shared\nisvcloc\nisvcloc.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
() C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(National Instruments, Inc.) C:\Windows\SysWOW64\lkcitdl.exe
(National Instruments Corporation) C:\Windows\SysWOW64\lktsrv.exe
(National Instruments Corporation) D:\Programy\LABVIEW\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) D:\Programy\LABVIEW\Shared\Tagger\tagsrv.exe
(National Instruments Corporation) D:\Programy\LABVIEW\Shared\NI Network Discovery\niDiscSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13513288 2013-03-29] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11582848 2012-09-30] (Motorola Solutions, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-10] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\Run: [ALLUpdate] => C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [3000680 2013-11-01] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\Run: [NIRegistrationWizard] => D:\Programy\LABVIEW\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [847000 2013-04-19] ()
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\MountPoints2: {7ef35c49-79f7-11e3-825a-806e6f6e6963} - "G:\SETUP.EXE" 
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\MountPoints2: {843dad64-b58b-11e3-82de-d850e61c6e51} - "H:\AutoRun.exe" 
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\MountPoints2: {843dadd9-b58b-11e3-82de-d850e61c6e51} - "H:\AutoRun.exe" 
HKU\S-1-5-21-4183788994-3692433490-2826166230-1001\...\MountPoints2: {e2cdbee6-cece-11e3-82e9-d850e61c6e51} - "H:\SISetup.exe" 
HKU\S-1-5-21-4183788994-3692433490-2826166230-1002\...\MountPoints2: {180575ba-7a1c-11e3-824b-806e6f6e6963} - "F:\AsInsWiz.exe" 
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-10] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NI Error Reporting.lnk
ShortcutTarget: NI Error Reporting.lnk -> D:\Programy\LABVIEW\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation)
Startup: C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Magdalena\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.4.lnk
ShortcutTarget: OpenOffice.org 2.4.lnk -> C:\Program Files (x86)\OpenOffice.org 2.4\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x7648B89AC813CF01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = http://www.google.com/search?q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 D:\Programy\LABVIEW\Shared\mDNS Responder\nimdnsNSP.dll [26512] (National Instruments Corporation)
Winsock: Catalog5-x64 08 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [28560] (National Instruments Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Magdalena\AppData\Roaming\Mozilla\Firefox\Profiles\n2owuyru.default-1401492652396
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @caminova.com/DjVuPlugin - C:\Program Files (x86)\Caminova\Document Express DjVu Plug-in\npdjvu.dll (Caminova, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @parallelgraphics.com/Cortona - C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\npcortona.dll (ParallelGraphics)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Magdalena\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2011win32.dll (National Instruments)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2012win32.dll (National Instruments)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2013win32.dll (National Instruments)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-10]

Chrome: 
=======
CHR HomePage: about:blank
CHR RestoreOnStartup: "about:blank"
CHR StartupUrls: "about:blank"
CHR DefaultSearchKeyword: Google
CHR DefaultSearchURL: http://www.google.com/search?q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Dokumenty Google) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-10]
CHR Extension: (Dysk Google) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-10]
CHR Extension: (YouTube) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-10]
CHR Extension: (Szukaj w Google) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-10]
CHR Extension: (avast! Online Security) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-10]
CHR Extension: (Google Wallet) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-10]
CHR Extension: (Gmail) - C:\Users\Magdalena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-10]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-01-10]

==================== Services (Whitelisted) =================

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-10] (AVAST Software)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2013-06-12] (National Instruments Corporation)
R2 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2013-06-12] (National Instruments Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 mxssvr; D:\Programy\LABVIEW\MAX\nimxs.exe [83768 2013-06-11] (National Instruments Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] ()
S2 NIApplicationWebServer; D:\Programy\LABVIEW\Shared\NI WebServer\ApplicationWebServer.exe [57696 2013-06-08] (National Instruments Corporation)
S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [81248 2013-06-08] (National Instruments Corporation)
R2 NIDomainService; D:\Programy\LABVIEW\Shared\Security\nidmsrv.exe [380720 2013-06-12] (National Instruments Corporation)
S3 NILM License Manager; D:\Programy\LABVIEW\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
R2 nimDNSResponder; D:\Programy\LABVIEW\Shared\mDNS Responder\nimdnsResponder.exe [260976 2013-05-11] (National Instruments Corporation)
R2 NINetworkDiscovery; D:\Programy\LABVIEW\Shared\NI Network Discovery\niDiscSvc.exe [176512 2013-06-19] (National Instruments Corporation)
R2 NiSvcLoc; D:\Programy\LABVIEW\Shared\niSvcLoc\nisvcloc.exe [90440 2013-06-07] (National Instruments Corporation)
S2 NISystemWebServer; D:\Programy\LABVIEW\Shared\NI WebServer\SystemWebServer.exe [57680 2013-06-08] (National Instruments Corporation)
R2 NITaggerService; D:\Programy\LABVIEW\Shared\Tagger\tagsrv.exe [687944 2013-06-15] (National Instruments Corporation)
S2 PLAY ONLINE. RunOuc; D:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2014-03-27] ()
R2 ProtexisLicensing; C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe [174656 2006-11-02] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-10] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-10] ()
S3 athrusb; C:\Windows\system32\DRIVERS\athrxusb.sys [1075712 2008-07-29] (Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132480 2012-10-01] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1337216 2012-10-01] (Motorola Solutions, Inc.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation)
S3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [97680 2013-01-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation)
U5 ew_hwusbdev; C:\Windows\System32\Drivers\ew_hwusbdev.sys [117248 2014-03-27] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [229376 2014-03-27] (Huawei Technologies Co., Ltd.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-08-23] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-05-31] (Duplex Secure Ltd.)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-31 01:43 - 2014-05-31 01:43 - 00001434 _____ () C:\Users\Magdalena\Desktop\AdwCleaner[S0].txt
2014-05-31 01:38 - 2014-05-31 01:38 - 00448512 _____ (OldTimer Tools) C:\Users\Magdalena\Downloads\TFC.exe
2014-05-31 01:38 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-31 01:37 - 2014-05-31 01:40 - 00000000 ____D () C:\AdwCleaner
2014-05-31 01:37 - 2014-05-31 01:37 - 01327971 _____ () C:\Users\Magdalena\Downloads\adwcleaner_3.211.exe
2014-05-31 01:32 - 2014-05-31 01:32 - 00000000 _____ () C:\Users\Magdalena\Desktop\Nowy dokument tekstowy.txt
2014-05-31 01:30 - 2014-05-31 01:30 - 00000000 ____D () C:\Users\Magdalena\Desktop\Stare dane programu Firefox
2014-05-31 01:22 - 2014-05-31 01:22 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Magdalena\Downloads\SPTDinst-v186-x64.exe
2014-05-31 01:16 - 2014-05-31 01:16 - 00293128 _____ () C:\Windows\Minidump\053114-20765-01.dmp
2014-05-31 01:01 - 2014-05-31 01:01 - 00024967 _____ () C:\Windows\Minidump\053114_526f3f16-da27-4419-89c0-3763eea9383a.zip
2014-05-31 00:51 - 2014-05-31 00:51 - 00292824 _____ () C:\Windows\Minidump\053114-27296-01.dmp
2014-05-31 00:49 - 2014-05-31 00:49 - 00380416 _____ () C:\Users\Magdalena\Downloads\oef5sm3s.exe
2014-05-31 00:41 - 2014-05-31 01:16 - 701567537 _____ () C:\Windows\MEMORY.DMP
2014-05-31 00:41 - 2014-05-31 01:16 - 00000000 ____D () C:\Windows\Minidump
2014-05-31 00:40 - 2014-05-31 00:40 - 00370943 _____ () C:\Users\Magdalena\Downloads\gmer(2).zip
2014-05-31 00:40 - 2014-05-31 00:40 - 00370943 _____ () C:\Users\Magdalena\Downloads\gmer(1).zip
2014-05-31 00:37 - 2014-05-31 00:38 - 00369483 _____ () C:\Users\Magdalena\Downloads\gmer.zip
2014-05-30 23:49 - 2014-05-30 23:49 - 00056322 _____ () C:\Users\Magdalena\Downloads\Shortcut.txt
2014-05-30 23:49 - 2014-05-30 23:49 - 00049065 _____ () C:\Users\Magdalena\Downloads\Addition.txt
2014-05-30 23:48 - 2014-05-31 01:51 - 00022859 _____ () C:\Users\Magdalena\Downloads\FRST.txt
2014-05-30 23:45 - 2014-05-31 01:50 - 00000000 ____D () C:\FRST
2014-05-30 23:44 - 2014-05-30 23:45 - 02066944 _____ (Farbar) C:\Users\Magdalena\Downloads\FRST64.exe
2014-05-30 23:41 - 2014-05-30 23:42 - 00410112 _____ (Farbar) C:\Users\Magdalena\Downloads\FSS.exe
2014-05-30 23:34 - 2014-05-30 23:34 - 00015990 _____ () C:\Users\Magdalena\Desktop\hijackthis.log
2014-05-30 23:30 - 2014-05-30 23:30 - 00015673 _____ () C:\Users\Magdalena\Downloads\hijackthis.log
2014-05-30 23:21 - 2014-05-30 23:21 - 00000000 ____D () C:\Users\Magdalena\Desktop\Osiecka.Agnieszka-Przybora.Jeremi-Listy.na.Wyczerpanym.Papierze
2014-05-30 21:36 - 2014-05-30 21:36 - 00388608 _____ (Trend Micro Inc.) C:\Users\Magdalena\Downloads\HijackThis_2.0.4.exe
2014-05-29 23:12 - 2014-05-29 23:12 - 00000000 ____D () C:\Users\Magdalena\Desktop\sygnaly obciete
2014-05-29 09:55 - 2014-05-29 09:58 - 00001431 _____ () C:\Users\Magdalena\Desktop\laweczka.m
2014-05-28 22:58 - 2014-05-28 22:58 - 00000000 __SHD () C:\Users\Magdalena\AppData\Local\EmieUserList
2014-05-28 22:58 - 2014-05-28 22:58 - 00000000 __SHD () C:\Users\Magdalena\AppData\Local\EmieSiteList
2014-05-28 22:57 - 2014-05-28 22:57 - 00000000 ____D () C:\Windows\system32\log
2014-05-28 22:57 - 2014-05-20 11:05 - 00043520 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2014-05-27 21:18 - 2014-05-28 08:27 - 00000000 ____D () C:\Users\Magdalena\Desktop\6.Automaty
2014-05-27 21:14 - 2014-05-27 21:14 - 00111869 _____ () C:\Users\Magdalena\Downloads\automaty6.3-2014-05-27.zip
2014-05-27 21:12 - 2014-05-27 21:12 - 00112350 _____ () C:\Users\Magdalena\Downloads\automaty6.2-2014-05-27.zip
2014-05-27 21:01 - 2014-05-27 21:02 - 00111511 _____ () C:\Users\Magdalena\Downloads\automaty6.4-2014-05-27.zip
2014-05-27 20:57 - 2014-05-27 20:57 - 00111845 _____ () C:\Users\Magdalena\Downloads\automaty6.1-2014-05-27.zip
2014-05-27 19:17 - 2014-05-27 19:17 - 00000000 ____D () C:\Users\Magdalena\Desktop\pomiar5
2014-05-27 19:16 - 2014-05-27 19:16 - 02661919 _____ () C:\Users\Magdalena\Downloads\pomiar5.rar
2014-05-27 19:14 - 2014-05-27 19:14 - 00673475 _____ () C:\Users\Magdalena\Desktop\dane.data
2014-05-27 19:11 - 2014-05-27 19:39 - 00000648 _____ () C:\Users\Magdalena\Desktop\mojecos2.m
2014-05-27 18:57 - 2014-05-27 19:00 - 00000544 _____ () C:\Users\Magdalena\Desktop\mojecos.m
2014-05-27 13:02 - 2014-05-28 00:10 - 00275377 _____ () C:\Users\Magdalena\Desktop\testyfull.exe
2014-05-26 23:12 - 2014-05-26 23:13 - 00015358 _____ () C:\Users\Magdalena\Desktop\testy2.c
2014-05-25 22:18 - 2014-05-25 22:18 - 00002284 _____ () C:\Users\Magdalena\Downloads\tracking.zip
2014-05-25 12:57 - 2014-05-25 13:28 - 06559202 _____ () C:\Users\Magdalena\Downloads\Łańcuchy znakowe _ konwersje.exe
2014-05-25 12:47 - 2014-05-28 00:10 - 00015513 _____ () C:\Users\Magdalena\Desktop\testyfull.c
2014-05-25 12:47 - 2014-05-25 12:47 - 00013886 _____ () C:\Users\Magdalena\Desktop\testyfull.cpp
2014-05-21 22:46 - 2014-05-21 22:46 - 10446280 _____ () C:\Users\Magdalena\Desktop\nowa wersja Zastawki Serca – przegląd dostępnych na rynku rozwiązań.pptx
2014-05-20 03:09 - 2014-05-20 03:09 - 00053248 _____ () C:\Users\Magdalena\Downloads\kolejnosc_polfinal.xls
2014-05-17 22:27 - 2014-05-28 07:57 - 00000000 ____D () C:\Users\Magdalena\Desktop\5.Moduly koncowa wersja
2014-05-17 22:27 - 2014-05-17 22:27 - 00106091 _____ () C:\Users\Magdalena\Downloads\5.Moduly_koncowa_wersja-2014-05-17.zip
2014-05-17 21:51 - 2014-05-17 21:51 - 00000000 _____ () C:\Users\Magdalena\Desktop\3ABF4F00
2014-05-15 23:47 - 2014-03-24 04:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-05-15 23:47 - 2014-03-24 04:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-05-15 23:47 - 2014-03-24 04:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-05-15 23:47 - 2014-03-13 09:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-05-15 23:47 - 2014-03-13 08:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-05-15 23:46 - 2014-04-09 00:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\system32\mrt_map.dll
2014-05-15 23:46 - 2014-04-09 00:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\system32\mrt100.dll
2014-05-15 23:46 - 2014-04-08 20:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll
2014-05-15 23:46 - 2014-04-08 20:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll
2014-05-15 17:48 - 2014-05-15 17:48 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-15 17:33 - 2014-04-11 04:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-05-15 17:33 - 2014-04-11 04:52 - 03464192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-05-15 17:32 - 2014-04-11 12:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-05-15 17:32 - 2014-04-11 12:03 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-05-15 17:32 - 2014-04-11 10:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-05-15 17:32 - 2014-04-11 08:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-05-15 17:32 - 2014-04-11 07:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-05-15 17:32 - 2014-04-11 07:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-05-15 17:32 - 2014-04-11 05:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-05-15 17:32 - 2014-04-11 05:36 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-05-15 17:32 - 2014-04-11 05:24 - 13288960 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-05-15 17:32 - 2014-04-11 05:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-05-15 17:32 - 2014-04-11 05:05 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-15 17:32 - 2014-04-11 05:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-05-15 17:32 - 2014-04-11 05:02 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-15 17:32 - 2014-04-11 05:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-05-15 17:32 - 2014-04-11 05:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-05-15 17:32 - 2014-04-11 05:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-05-15 17:32 - 2014-04-11 04:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-05-15 17:32 - 2014-04-11 04:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-05-15 17:32 - 2014-04-11 04:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-05-15 17:32 - 2014-04-11 04:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-05-15 17:32 - 2014-04-11 04:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-05-15 17:32 - 2014-04-11 04:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-05-15 17:32 - 2014-04-11 04:34 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-05-15 17:32 - 2014-04-11 04:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-05-15 17:32 - 2014-04-11 04:25 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-05-15 17:31 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 17:31 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 17:31 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 17:31 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 17:30 - 2014-03-27 11:12 - 21225584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 17:30 - 2014-03-27 09:48 - 18679728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 10:26 - 2014-05-17 23:00 - 00000000 ____D () C:\Users\Magdalena\Desktop\automaty
2014-05-13 10:24 - 2014-05-13 10:24 - 00002266 _____ () C:\Users\Magdalena\Downloads\main.c(2).txt
2014-05-12 19:40 - 2014-05-12 19:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-12 19:40 - 2014-05-12 19:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-11 17:19 - 2014-05-11 17:20 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlagueInc 1.0
2014-05-06 23:07 - 2014-05-06 23:08 - 08113204 _____ () C:\Users\Magdalena\Downloads\Egzamin(1).rar
2014-05-06 23:06 - 2014-05-06 23:07 - 23520515 _____ () C:\Users\Magdalena\Downloads\Notatki_TOM_wyk³ad2012(1).rar
2014-05-06 18:06 - 2014-05-06 18:06 - 00000143 _____ () C:\Users\Magdalena\Downloads\zad7.m
2014-05-06 11:20 - 2014-05-06 11:20 - 00006261 _____ () C:\Users\Magdalena\Downloads\raw.c
2014-05-06 10:33 - 2014-05-25 12:58 - 00000000 ____D () C:\Users\Magdalena\Desktop\conversions
2014-05-06 10:30 - 2014-05-06 10:31 - 00000000 ____D () C:\Users\Magdalena\Desktop\tokeny
2014-05-06 10:27 - 2014-05-06 10:27 - 00921860 _____ () C:\Users\Magdalena\Desktop\conversions.exe
2014-05-05 21:31 - 2014-05-05 21:31 - 00002266 _____ () C:\Users\Magdalena\Downloads\main.c(1).txt
2014-05-05 21:30 - 2014-05-05 21:30 - 00001968 _____ () C:\Users\Magdalena\Downloads\main.c.txt
2014-05-05 21:29 - 2014-05-05 21:29 - 00002139 _____ () C:\Users\Magdalena\Downloads\main.c
2014-05-02 22:33 - 2014-05-02 22:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 22:32 - 2014-05-02 22:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

==================== One Month Modified Files and Folders =======

2014-05-31 01:52 - 2014-05-30 23:48 - 00022859 _____ () C:\Users\Magdalena\Downloads\FRST.txt
2014-05-31 01:52 - 2014-01-10 19:31 - 00000000 ____D () C:\Users\Magdalena\AppData\Local\Temp
2014-05-31 01:52 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-05-31 01:51 - 2014-05-30 23:45 - 00000000 ____D () C:\FRST
2014-05-31 01:49 - 2014-01-12 15:29 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\ClassicShell
2014-05-31 01:47 - 2014-01-10 19:36 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4183788994-3692433490-2826166230-1001
2014-05-31 01:44 - 2014-03-16 14:19 - 00000000 ____D () C:\Users\Magdalena\Desktop\śmieci
2014-05-31 01:44 - 2014-03-02 18:05 - 00000000 ____D () C:\Users\Magdalena\Desktop\cos
2014-05-31 01:44 - 2014-01-12 10:12 - 00000000 __RDO () C:\Users\Magdalena\SkyDrive
2014-05-31 01:44 - 2014-01-10 21:36 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-31 01:43 - 2014-05-31 01:43 - 00001434 _____ () C:\Users\Magdalena\Desktop\AdwCleaner[S0].txt
2014-05-31 01:43 - 2014-01-18 14:07 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\OpenOffice.org2
2014-05-31 01:43 - 2014-01-10 14:56 - 00000000 ___RD () C:\Users\Magdalena\Dropbox
2014-05-31 01:43 - 2014-01-10 14:52 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\DropboxMaster
2014-05-31 01:43 - 2014-01-10 14:51 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\Dropbox
2014-05-31 01:42 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-31 01:41 - 2014-01-10 19:24 - 00009274 _____ () C:\Windows\PFRO.log
2014-05-31 01:40 - 2014-05-31 01:37 - 00000000 ____D () C:\AdwCleaner
2014-05-31 01:39 - 2014-01-10 21:42 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-31 01:38 - 2014-05-31 01:38 - 00448512 _____ (OldTimer Tools) C:\Users\Magdalena\Downloads\TFC.exe
2014-05-31 01:37 - 2014-05-31 01:37 - 01327971 _____ () C:\Users\Magdalena\Downloads\adwcleaner_3.211.exe
2014-05-31 01:32 - 2014-05-31 01:32 - 00000000 _____ () C:\Users\Magdalena\Desktop\Nowy dokument tekstowy.txt
2014-05-31 01:30 - 2014-05-31 01:30 - 00000000 ____D () C:\Users\Magdalena\Desktop\Stare dane programu Firefox
2014-05-31 01:23 - 2014-01-10 19:30 - 00000000 ____D () C:\Users\Magdalena
2014-05-31 01:22 - 2014-05-31 01:22 - 00623224 _____ (Duplex Secure Ltd.) C:\Users\Magdalena\Downloads\SPTDinst-v186-x64.exe
2014-05-31 01:22 - 2014-01-10 14:59 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2014-05-31 01:16 - 2014-05-31 01:16 - 00293128 _____ () C:\Windows\Minidump\053114-20765-01.dmp
2014-05-31 01:16 - 2014-05-31 00:41 - 701567537 _____ () C:\Windows\MEMORY.DMP
2014-05-31 01:16 - 2014-05-31 00:41 - 00000000 ____D () C:\Windows\Minidump
2014-05-31 01:05 - 2014-01-10 21:36 - 00001066 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-31 01:01 - 2014-05-31 01:01 - 00024967 _____ () C:\Windows\Minidump\053114_526f3f16-da27-4419-89c0-3763eea9383a.zip
2014-05-31 00:51 - 2014-05-31 00:51 - 00292824 _____ () C:\Windows\Minidump\053114-27296-01.dmp
2014-05-31 00:49 - 2014-05-31 00:49 - 00380416 _____ () C:\Users\Magdalena\Downloads\oef5sm3s.exe
2014-05-31 00:40 - 2014-05-31 00:40 - 00370943 _____ () C:\Users\Magdalena\Downloads\gmer(2).zip
2014-05-31 00:40 - 2014-05-31 00:40 - 00370943 _____ () C:\Users\Magdalena\Downloads\gmer(1).zip
2014-05-31 00:38 - 2014-05-31 00:37 - 00369483 _____ () C:\Users\Magdalena\Downloads\gmer.zip
2014-05-30 23:49 - 2014-05-30 23:49 - 00056322 _____ () C:\Users\Magdalena\Downloads\Shortcut.txt
2014-05-30 23:49 - 2014-05-30 23:49 - 00049065 _____ () C:\Users\Magdalena\Downloads\Addition.txt
2014-05-30 23:45 - 2014-05-30 23:44 - 02066944 _____ (Farbar) C:\Users\Magdalena\Downloads\FRST64.exe
2014-05-30 23:42 - 2014-05-30 23:41 - 00410112 _____ (Farbar) C:\Users\Magdalena\Downloads\FSS.exe
2014-05-30 23:34 - 2014-05-30 23:34 - 00015990 _____ () C:\Users\Magdalena\Desktop\hijackthis.log
2014-05-30 23:30 - 2014-05-30 23:30 - 00015673 _____ () C:\Users\Magdalena\Downloads\hijackthis.log
2014-05-30 23:29 - 2014-01-10 19:31 - 00000000 ____D () C:\Users\Magdalena\AppData\Local\VirtualStore
2014-05-30 23:21 - 2014-05-30 23:21 - 00000000 ____D () C:\Users\Magdalena\Desktop\Osiecka.Agnieszka-Przybora.Jeremi-Listy.na.Wyczerpanym.Papierze
2014-05-30 22:57 - 2014-01-10 21:31 - 00003988 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{02C4205E-4F09-4B89-A9A2-B193FC657A5E}
2014-05-30 22:49 - 2014-01-12 15:39 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\Skype
2014-05-30 22:46 - 2014-03-13 12:19 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-30 22:46 - 2014-01-12 15:39 - 00000000 ____D () C:\ProgramData\Skype
2014-05-30 22:36 - 2014-03-02 12:42 - 00000000 ____D () C:\Users\Magdalena\Desktop\vifacotry
2014-05-30 21:36 - 2014-05-30 21:36 - 00388608 _____ (Trend Micro Inc.) C:\Users\Magdalena\Downloads\HijackThis_2.0.4.exe
2014-05-30 20:31 - 2014-01-23 00:24 - 00000000 ____D () C:\Users\Magdalena\Documents\yyy
2014-05-30 17:54 - 2014-01-10 19:30 - 01728320 _____ () C:\Windows\WindowsUpdate.log
2014-05-30 17:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-05-30 17:42 - 2014-01-10 19:50 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Temp
2014-05-29 23:12 - 2014-05-29 23:12 - 00000000 ____D () C:\Users\Magdalena\Desktop\sygnaly obciete
2014-05-29 22:45 - 2014-01-10 19:15 - 00000000 ____D () C:\Users\Magdalena\Documents\MATLAB
2014-05-29 09:58 - 2014-05-29 09:55 - 00001431 _____ () C:\Users\Magdalena\Desktop\laweczka.m
2014-05-29 09:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-28 22:58 - 2014-05-28 22:58 - 00000000 __SHD () C:\Users\Magdalena\AppData\Local\EmieUserList
2014-05-28 22:58 - 2014-05-28 22:58 - 00000000 __SHD () C:\Users\Magdalena\AppData\Local\EmieSiteList
2014-05-28 22:57 - 2014-05-28 22:57 - 00000000 ____D () C:\Windows\system32\log
2014-05-28 15:44 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-05-28 08:27 - 2014-05-27 21:18 - 00000000 ____D () C:\Users\Magdalena\Desktop\6.Automaty
2014-05-28 07:57 - 2014-05-17 22:27 - 00000000 ____D () C:\Users\Magdalena\Desktop\5.Moduly koncowa wersja
2014-05-28 00:10 - 2014-05-27 13:02 - 00275377 _____ () C:\Users\Magdalena\Desktop\testyfull.exe
2014-05-28 00:10 - 2014-05-25 12:47 - 00015513 _____ () C:\Users\Magdalena\Desktop\testyfull.c
2014-05-27 21:14 - 2014-05-27 21:14 - 00111869 _____ () C:\Users\Magdalena\Downloads\automaty6.3-2014-05-27.zip
2014-05-27 21:12 - 2014-05-27 21:12 - 00112350 _____ () C:\Users\Magdalena\Downloads\automaty6.2-2014-05-27.zip
2014-05-27 21:06 - 2014-03-16 14:31 - 00000000 ____D () C:\Users\Magdalena\Desktop\MG
2014-05-27 21:02 - 2014-05-27 21:01 - 00111511 _____ () C:\Users\Magdalena\Downloads\automaty6.4-2014-05-27.zip
2014-05-27 20:57 - 2014-05-27 20:57 - 00111845 _____ () C:\Users\Magdalena\Downloads\automaty6.1-2014-05-27.zip
2014-05-27 19:39 - 2014-05-27 19:11 - 00000648 _____ () C:\Users\Magdalena\Desktop\mojecos2.m
2014-05-27 19:17 - 2014-05-27 19:17 - 00000000 ____D () C:\Users\Magdalena\Desktop\pomiar5
2014-05-27 19:16 - 2014-05-27 19:16 - 02661919 _____ () C:\Users\Magdalena\Downloads\pomiar5.rar
2014-05-27 19:14 - 2014-05-27 19:14 - 00673475 _____ () C:\Users\Magdalena\Desktop\dane.data
2014-05-27 19:00 - 2014-05-27 18:57 - 00000544 _____ () C:\Users\Magdalena\Desktop\mojecos.m
2014-05-27 12:27 - 2014-02-22 20:13 - 00000000 ____D () C:\Users\Magdalena\Desktop\matma lekcje
2014-05-26 23:13 - 2014-05-26 23:12 - 00015358 _____ () C:\Users\Magdalena\Desktop\testy2.c
2014-05-25 22:18 - 2014-05-25 22:18 - 00002284 _____ () C:\Users\Magdalena\Downloads\tracking.zip
2014-05-25 13:28 - 2014-05-25 12:57 - 06559202 _____ () C:\Users\Magdalena\Downloads\Łańcuchy znakowe _ konwersje.exe
2014-05-25 12:58 - 2014-05-06 10:33 - 00000000 ____D () C:\Users\Magdalena\Desktop\conversions
2014-05-25 12:47 - 2014-05-25 12:47 - 00013886 _____ () C:\Users\Magdalena\Desktop\testyfull.cpp
2014-05-25 09:07 - 2014-01-10 19:31 - 00000000 ___RD () C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-25 09:07 - 2014-01-10 14:52 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-21 22:46 - 2014-05-21 22:46 - 10446280 _____ () C:\Users\Magdalena\Desktop\nowa wersja Zastawki Serca – przegląd dostępnych na rynku rozwiązań.pptx
2014-05-20 11:05 - 2014-05-28 22:57 - 00043520 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys
2014-05-20 03:09 - 2014-05-20 03:09 - 00053248 _____ () C:\Users\Magdalena\Downloads\kolejnosc_polfinal.xls
2014-05-18 10:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-05-17 23:00 - 2014-05-13 10:26 - 00000000 ____D () C:\Users\Magdalena\Desktop\automaty
2014-05-17 22:27 - 2014-05-17 22:27 - 00106091 _____ () C:\Users\Magdalena\Downloads\5.Moduly_koncowa_wersja-2014-05-17.zip
2014-05-17 22:12 - 2014-01-10 15:15 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-17 22:08 - 2014-01-10 19:31 - 00000000 ___RD () C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-17 21:55 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-17 21:51 - 2014-05-17 21:51 - 00000000 _____ () C:\Users\Magdalena\Desktop\3ABF4F00
2014-05-16 12:19 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-05-16 12:15 - 2014-01-16 13:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-16 12:12 - 2014-01-16 13:08 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-16 12:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-05-15 17:49 - 2014-01-18 17:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 17:48 - 2014-05-15 17:48 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-05-14 22:32 - 2014-01-10 21:36 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-14 14:40 - 2014-01-10 21:42 - 00003818 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-13 10:24 - 2014-05-13 10:24 - 00002266 _____ () C:\Users\Magdalena\Downloads\main.c(2).txt
2014-05-13 00:01 - 2013-08-22 15:25 - 00000167 _____ () C:\Windows\win.ini
2014-05-12 19:40 - 2014-05-12 19:40 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-05-12 19:40 - 2014-05-12 19:40 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-05-12 19:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-12 08:58 - 2014-01-10 15:27 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-05-12 08:58 - 2014-01-10 15:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-05-12 00:09 - 2014-01-10 15:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-05-11 17:20 - 2014-05-11 17:19 - 00000000 ____D () C:\Users\Magdalena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlagueInc 1.0
2014-05-11 12:03 - 2014-01-10 21:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 14:00 - 2014-01-10 21:36 - 00004038 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-10 14:00 - 2014-01-10 21:36 - 00003802 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-10 09:40 - 2014-01-10 21:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 22:49 - 2014-01-10 19:34 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-07 22:49 - 2013-08-23 01:12 - 00813218 _____ () C:\Windows\system32\perfh015.dat
2014-05-07 22:49 - 2013-08-23 01:12 - 00166028 _____ () C:\Windows\system32\perfc015.dat
2014-05-06 23:08 - 2014-05-06 23:07 - 08113204 _____ () C:\Users\Magdalena\Downloads\Egzamin(1).rar
2014-05-06 23:07 - 2014-05-06 23:06 - 23520515 _____ () C:\Users\Magdalena\Downloads\Notatki_TOM_wyk³ad2012(1).rar
2014-05-06 18:06 - 2014-05-06 18:06 - 00000143 _____ () C:\Users\Magdalena\Downloads\zad7.m
2014-05-06 11:20 - 2014-05-06 11:20 - 00006261 _____ () C:\Users\Magdalena\Downloads\raw.c
2014-05-06 10:31 - 2014-05-06 10:30 - 00000000 ____D () C:\Users\Magdalena\Desktop\tokeny
2014-05-06 10:27 - 2014-05-06 10:27 - 00921860 _____ () C:\Users\Magdalena\Desktop\conversions.exe
2014-05-06 06:40 - 2014-05-15 17:31 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 05:25 - 2014-05-15 17:31 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:00 - 2014-05-15 17:31 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 17:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 21:31 - 2014-05-05 21:31 - 00002266 _____ () C:\Users\Magdalena\Downloads\main.c(1).txt
2014-05-05 21:30 - 2014-05-05 21:30 - 00001968 _____ () C:\Users\Magdalena\Downloads\main.c.txt
2014-05-05 21:29 - 2014-05-05 21:29 - 00002139 _____ () C:\Users\Magdalena\Downloads\main.c
2014-05-02 22:33 - 2014-05-02 22:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-02 22:32 - 2014-05-02 22:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-01 22:30 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-01 22:30 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-25 09:21

==================== End Of Log ============================