Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02 Ran by Seweryn (administrator) on SEWERYN on 31-05-2014 19:51:12 Running from C:\Users\Seweryn\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe () C:\Windows\PLFSetI.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (BitTorrent Inc.) C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\SysWOW64\PnkBstrB.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe (AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe (Microsoft Corporation) C:\Windows\System32\Dxpserver.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [824352 2009-08-29] (Acer Incorporated) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1808168 2009-06-18] (Synaptics Incorporated) HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2008-07-29] () HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2014-05-16] (Realtek Semiconductor) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1157640 2009-08-18] (Dritek System Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-09-08] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [SystemExplorerAutoStart] => C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2851784 2013-05-16] (Mister Group) HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [uTorrent] => C:\Users\Seweryn\AppData\Roaming\uTorrent\uTorrent.exe [1272400 2014-05-10] (BitTorrent Inc.) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564992 2014-04-23] (Samsung) HKU\S-1-5-21-817181791-564608639-3437121551-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-04-23] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_pl BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader) BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.137.1 FireFox: ======== FF ProfilePath: C:\Users\Seweryn\AppData\Roaming\Mozilla\Firefox\Profiles\wk3acalw.default-1401371051926 FF DefaultSearchEngine: Wirtualna Polska FF SelectedSearchEngine: Wirtualna Polska FF Homepage: https://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Seweryn\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer Cloud) FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-07] FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [] ==================== Services (Whitelisted) ================= R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO) R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) R2 hasplms; C:\Windows\system32\hasplms.exe [4180576 2010-09-27] (SafeNet Inc.) S4 ICM_UpdaterService; C:\Program Files (x86)\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe [204883 2011-03-18] () S4 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.) S4 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-06-01] (Nero AG) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2010-02-27] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [103736 2010-02-27] () R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] () S4 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-07] (RealNetworks, Inc.) R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2099512 2013-08-30] (AVG) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [311968 2013-02-04] () R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-07] (DT Soft Ltd) R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [42816 2006-12-13] (Eutron) S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-12-30] () R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-02-03] () R1 NetworkX; C:\Windows\system32\ckldrv.sys [28664 2008-03-17] () S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-02] (Realtek Semiconductor Corp.) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-12-23] (Duplex Secure Ltd.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software) U3 anhrdkgy; C:\Windows\System32\Drivers\anhrdkgy.sys [0 ] (Advanced Micro Devices) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-31 19:48 - 2014-05-31 19:48 - 00000124 _____ () C:\Windows\error.log 2014-05-31 19:47 - 2014-05-31 19:47 - 00001028 _____ () C:\Windows\PFRO.log 2014-05-31 19:47 - 2014-05-31 19:47 - 00000028 _____ () C:\Windows\errord.log 2014-05-31 19:31 - 2014-05-31 19:46 - 00074241 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-31 19:31 - 2014-05-31 19:31 - 00001888 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk 2014-05-31 19:31 - 2014-05-31 19:31 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO 2014-05-31 19:31 - 2014-05-31 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO 2014-05-31 19:30 - 2014-05-31 19:30 - 00000000 ____D () C:\ProgramData\Comodo Downloader 2014-05-31 19:30 - 2014-05-31 19:30 - 00000000 ____D () C:\Program Files\COMODO 2014-05-31 19:29 - 2014-05-31 19:31 - 00000000 ____D () C:\ProgramData\Comodo 2014-05-31 19:24 - 2014-05-31 19:25 - 00026944 _____ () C:\Users\Seweryn\Desktop\CBS.7z 2014-05-31 19:23 - 2014-05-31 19:25 - 00000000 ____D () C:\Users\Seweryn\Desktop\CBS 2014-05-31 08:37 - 2014-05-31 08:37 - 00448512 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\TFC.exe 2014-05-31 08:29 - 2014-05-31 19:48 - 00000056 _____ () C:\Windows\setupact.log 2014-05-31 08:29 - 2014-05-31 08:29 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-29 22:38 - 2014-05-31 19:52 - 00017522 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-29 22:26 - 2014-05-31 19:28 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-05-29 16:36 - 2014-05-29 16:39 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-05-29 16:26 - 2009-01-15 11:03 - 00055808 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\L1C60x64.sys 2014-05-29 15:43 - 2014-05-29 15:43 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\AVG 2014-05-29 14:35 - 2014-05-29 14:35 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\Seweryn\Desktop\kavremover.exe 2014-05-20 22:49 - 2014-05-20 23:48 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\CrashDumps 2014-05-19 22:07 - 2014-05-31 19:51 - 00000000 ____D () C:\FRST 2014-05-19 21:38 - 2014-05-29 22:38 - 02066944 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-15 15:52 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 15:52 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 15:46 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 15:46 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 15:46 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 15:46 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 15:46 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 15:45 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 15:45 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 15:45 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 15:45 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 15:45 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 15:45 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 15:45 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 15:45 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 15:45 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 15:45 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 15:45 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 17:22 - 2013-12-30 03:54 - 00233472 _____ (Teruten) C:\Windows\SysWOW64\FsUsbExService.Exe 2014-05-12 17:22 - 2013-12-30 03:54 - 00037344 _____ () C:\Windows\SysWOW64\FsUsbExDisk.Sys 2014-05-12 17:22 - 2012-06-26 16:03 - 00110592 _____ () C:\Windows\SysWOW64\FsUsbExDevice.Dll 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:30 - 2014-05-12 16:31 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-12 16:30 - 2009-07-27 15:04 - 00058880 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\L1C62x64.sys 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:30 - 2014-05-09 21:31 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-07 23:19 - 2014-05-07 23:21 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:10 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-07 23:09 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-07 23:09 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-07 23:08 - 2014-05-07 23:09 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:41 - 2014-05-07 20:02 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:40 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:39 - 2014-05-14 19:14 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-07 18:38 - 2014-05-07 20:33 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-06 22:44 - 2014-05-07 20:22 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-04 14:30 - 2014-05-12 18:02 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn ==================== One Month Modified Files and Folders ======= 2014-05-31 19:52 - 2014-05-29 22:38 - 00017522 _____ () C:\Users\Seweryn\Desktop\FRST.txt 2014-05-31 19:51 - 2014-05-19 22:07 - 00000000 ____D () C:\FRST 2014-05-31 19:48 - 2014-05-31 19:48 - 00000124 _____ () C:\Windows\error.log 2014-05-31 19:48 - 2014-05-31 08:29 - 00000056 _____ () C:\Windows\setupact.log 2014-05-31 19:48 - 2013-04-13 20:12 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-05-31 19:48 - 2009-11-13 22:46 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\uTorrent 2014-05-31 19:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-31 19:47 - 2014-05-31 19:47 - 00001028 _____ () C:\Windows\PFRO.log 2014-05-31 19:47 - 2014-05-31 19:47 - 00000028 _____ () C:\Windows\errord.log 2014-05-31 19:46 - 2014-05-31 19:31 - 00074241 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-31 19:46 - 2013-12-22 17:47 - 01317070 _____ () C:\Windows\WindowsUpdate.log 2014-05-31 19:36 - 2013-09-09 19:07 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 2014-05-31 19:31 - 2014-05-31 19:31 - 00001888 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk 2014-05-31 19:31 - 2014-05-31 19:31 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO 2014-05-31 19:31 - 2014-05-31 19:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO 2014-05-31 19:31 - 2014-05-31 19:29 - 00000000 ____D () C:\ProgramData\Comodo 2014-05-31 19:30 - 2014-05-31 19:30 - 00000000 ____D () C:\ProgramData\Comodo Downloader 2014-05-31 19:30 - 2014-05-31 19:30 - 00000000 ____D () C:\Program Files\COMODO 2014-05-31 19:28 - 2014-05-29 22:26 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-05-31 19:25 - 2014-05-31 19:24 - 00026944 _____ () C:\Users\Seweryn\Desktop\CBS.7z 2014-05-31 19:25 - 2014-05-31 19:23 - 00000000 ____D () C:\Users\Seweryn\Desktop\CBS 2014-05-31 19:21 - 2012-04-07 20:08 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-31 10:08 - 2014-02-16 17:20 - 00000000 ____D () C:\The KMPlayer 2014-05-31 09:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2014-05-31 08:42 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-31 08:42 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-31 08:37 - 2014-05-31 08:37 - 00448512 _____ (OldTimer Tools) C:\Users\Seweryn\Desktop\TFC.exe 2014-05-31 08:29 - 2014-05-31 08:29 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-30 16:29 - 2013-08-11 19:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone 2014-05-30 16:29 - 2013-08-11 19:15 - 00000000 ____D () C:\Program Files (x86)\Windows Phone 2014-05-29 22:38 - 2014-05-19 21:38 - 02066944 _____ (Farbar) C:\Users\Seweryn\Desktop\FRST64.exe 2014-05-29 22:36 - 2013-04-23 12:02 - 00000000 ____D () C:\Windows\Minidump 2014-05-29 17:52 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-29 16:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-29 16:39 - 2014-05-29 16:36 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e 2014-05-29 16:39 - 2009-10-03 04:12 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-29 16:29 - 2011-08-01 20:42 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-05-29 15:43 - 2014-05-29 15:43 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\AVG 2014-05-29 15:16 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-29 14:35 - 2014-05-29 14:35 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\Seweryn\Desktop\kavremover.exe 2014-05-26 13:16 - 2014-04-13 13:24 - 00000000 ____D () C:\Users\Seweryn\Desktop\administracja 2014-05-22 16:26 - 2009-10-28 14:32 - 00740688 _____ () C:\Windows\system32\perfh015.dat 2014-05-22 16:26 - 2009-10-28 14:32 - 00156230 _____ () C:\Windows\system32\perfc015.dat 2014-05-22 16:26 - 2009-07-14 07:13 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-20 23:48 - 2014-05-20 22:49 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\CrashDumps 2014-05-16 00:49 - 2014-03-09 22:52 - 00000000 ____D () C:\DrvInstall 2014-05-16 00:48 - 2014-03-09 22:54 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-16 00:46 - 2014-05-16 00:46 - 56270848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 28310104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 14737496 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 12793944 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-16 00:46 - 2014-05-16 00:46 - 05752072 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03923032 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 03872984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-16 00:46 - 2014-05-16 00:46 - 02825432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02792152 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02319960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02157704 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 02037336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01932888 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01419376 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01045752 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01033304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 01024216 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00946392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00938608 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00899320 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00757301 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-16 00:46 - 2014-05-16 00:46 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00624344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00245496 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-16 00:46 - 2014-05-16 00:46 - 00033008 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 21:31 - 2009-11-12 20:32 - 00000000 ___RD () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 16:32 - 2013-03-15 15:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-05-15 16:31 - 2009-10-03 04:35 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-15 16:07 - 2013-07-14 23:59 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 16:03 - 2009-11-14 15:48 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-15 15:59 - 2009-07-14 04:34 - 00000583 _____ () C:\Windows\win.ini 2014-05-14 19:14 - 2014-05-07 18:39 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Downloaded Installations 2014-05-14 19:14 - 2012-09-11 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Szkola podstawowa klasa 4 2014-05-14 18:33 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-14 17:14 - 2012-04-07 20:08 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 17:14 - 2012-04-07 20:08 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-14 17:14 - 2011-06-10 23:21 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-12 18:02 - 2014-05-04 14:30 - 00000000 ____D () C:\Users\Seweryn\Desktop\zdjęcia wózka 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Users\Public\Documents\CrashDump 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec 2014-05-12 17:23 - 2014-05-12 17:23 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-05-12 17:22 - 2014-05-12 17:22 - 00001966 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00001809 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-12 16:59 - 2014-05-12 16:59 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-05-12 16:57 - 2014-05-12 16:57 - 00000000 ____D () C:\ProgramData\Apple 2014-05-12 16:31 - 2014-05-12 16:30 - 00000000 ____D () C:\ProgramData\Atheros 2014-05-12 16:04 - 2013-04-08 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-10 22:48 - 2010-02-07 12:04 - 00016384 _____ () C:\Users\Seweryn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-05-10 21:07 - 2014-05-10 21:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-10 20:53 - 2014-05-10 20:53 - 00000836 _____ () C:\Users\Seweryn\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk 2014-05-09 21:31 - 2014-05-09 21:30 - 02415104 _____ () C:\Users\Seweryn\Desktop\INSTYTUCJE POZAMILITARNE.ppt 2014-05-09 17:19 - 2014-04-26 21:47 - 00000000 ____D () C:\Users\Seweryn\Desktop\BMR 2014-05-07 23:38 - 2012-05-21 15:31 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Adobe 2014-05-07 23:30 - 2012-09-04 15:40 - 00000000 ____D () C:\Program Files (x86)\Real 2014-05-07 23:29 - 2013-11-28 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-07 23:29 - 2013-09-02 21:06 - 00000000 ____D () C:\ProgramData\SystemExplorer 2014-05-07 23:29 - 2012-12-22 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks 2014-05-07 23:29 - 2012-09-04 15:39 - 00000000 ____D () C:\ProgramData\Real 2014-05-07 23:29 - 2012-03-01 19:10 - 00000000 ____D () C:\Windows\system32\Macromed 2014-05-07 23:29 - 2010-12-24 14:55 - 00000000 ____D () C:\Windows\WindowsMobile 2014-05-07 23:29 - 2010-04-06 15:56 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-05-07 23:29 - 2010-01-06 14:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\XnView 2014-05-07 23:29 - 2009-11-12 20:29 - 00000000 ____D () C:\Users\Seweryn 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-07 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 23:21 - 2014-05-07 23:19 - 00003364 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-817181791-564608639-3437121551-1000 2014-05-07 23:19 - 2014-05-07 23:19 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\RealNetworks 2014-05-07 23:18 - 2014-05-07 23:18 - 00001042 _____ () C:\Users\Public\Desktop\RealPlayer Cloud.lnk 2014-05-07 23:18 - 2012-09-04 15:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\Real 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\ProgramData\RealNetworks 2014-05-07 23:17 - 2014-05-07 23:17 - 00000000 ____D () C:\Program Files (x86)\RealNetworks 2014-05-07 23:11 - 2014-04-07 17:55 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-07 23:10 - 2014-05-07 23:10 - 00201800 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2014-05-07 23:09 - 2014-05-07 23:09 - 00278600 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2014-05-07 23:09 - 2014-05-07 23:08 - 00004129 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-07 23:09 - 2009-11-15 19:59 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-07 23:08 - 2014-05-07 23:08 - 00505416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2014-05-07 23:08 - 2014-05-07 23:08 - 00353864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2014-05-07 20:46 - 2009-10-03 04:34 - 00000000 __RHD () C:\MSOCache 2014-05-07 20:33 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\HTC 2014-05-07 20:22 - 2014-05-06 22:44 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 20:02 - 2014-05-07 18:41 - 00000000 ____D () C:\Users\Seweryn\AppData\Local\Htc 2014-05-07 18:42 - 2014-05-07 18:42 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1 2014-05-07 18:42 - 2014-05-07 18:40 - 00000000 ____D () C:\Users\Seweryn\AppData\Roaming\HTC 2014-05-07 18:38 - 2014-05-07 18:38 - 00000000 ____D () C:\Program Files (x86)\Spirent Communications 2014-05-07 18:13 - 2014-05-07 18:13 - 02401195 _____ () C:\Users\Seweryn\Desktop\Geneza, charakter i konsekwencje I wojny światowej.pptx 2014-05-01 12:37 - 2014-05-01 12:37 - 00003618 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Seweryn ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2009-11-14 17:49 ==================== End Of Log ============================