Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-03-2014 03 ([color=red]ATTENTION: ====> FRST version is 95 days old and could be outdated[/color])
Ran by Właściciele (administrator) on GFFD on 06-06-2014 21:52:38
Running from C:\Users\Właściciele\Downloads
Microsoft Windows 7 Ultimate  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Ascora GmbH) C:\Program Files\PC Fresh\PC Fresh.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Update\GoogleUpdate.exe
(Huawei Technologies Co., Ltd.) C:\Users\Właściciele\AppData\Roaming\blueconnect\ouc.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Alexander Roshal) C:\Program Files\WinRAR\WinRAR.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Program Files\Greener Web\updateGreenerWeb.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [IObit Malware Fighter] - C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [4474832 2012-12-25] (IObit)
HKLM\...\Run: [DataCardMonitor] - C:\Program Files\blueconnect\DataCardMonitor.exe [259424 2012-06-17] (Huawei Technologies Co., Ltd.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2516296 2010-03-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Runonce: [Del6442248] - cmd.exe /Q /D /c del "C:\Users\WACICI~1\AppData\Local\Temp\0.del"
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [HW_OPENEYE_OUC_blueconnect] - C:\Program Files\blueconnect\UpdateDog\ouc.exe [116064 2011-03-26] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [Google Update] - C:\Users\Właściciele\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-29] (Google Inc.)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [NextLive] - C:\Windows\system32\rundll32.exe "C:\Users\Właściciele\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [dgvnbsi] - regsvr32.exe "C:\ProgramData\dgvnbsi.dat"
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [RAMKontroler] - C:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe [618496 2010-06-03] (PHU XimSoft Tomasz Wyderka)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\RunOnce: [Del6439705] - cmd.exe /Q /D /c del "C:\Users\WACICI~1\AppData\Local\Temp\0.del"
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {2b1caaa9-f9a0-11e1-a846-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {4ceb9f56-7642-11e3-947e-99700614c1aa} - G:\Launcher.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {863e2bf6-d0de-11e1-80f0-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a67f-b851-11e1-a6ec-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a6b4-b851-11e1-a6ec-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a6ea-b851-11e1-a6ec-f46d044d0096} - F:\AutoRun.exe
AppInit_DLLs: c:\progra~2\windows net-clean\windowsnet-clean.dll => C:\ProgramData\Windows net-clean\Windowsnet-clean.dll [4267008 2013-12-26] ()
Startup: C:\Users\Właściciele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.oversearch.info/?pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.oversearch.info/?pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.oversearch.info/?l=1&q={searchTerms}&pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?src=sp&aff=51&cf=127628fc-3c83-11e2-a55b-e18eca7b13b2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?src=sp&aff=51&cf=127628fc-3c83-11e2-a55b-e18eca7b13b2&q={searchTerms}
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.oversearch.info/?l=1&q={searchTerms}&pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKCU - {D1DD79B4-EBB9-4D5B-B4F9-0EB87A2D5F09} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=446F05E2-5A36-4986-9BFB-4D18D5EB21CF&apn_sauid=74589724-0539-4075-B529-CEB65887B572
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Greener Web - {1973d53b-7311-45d7-8270-f44571c041a0} - C:\Program Files\Greener Web\GreenerWebbho.dll (Greener Web)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: SavEELOTs - {E086B9F5-AA85-EBDE-F59B-70FC175E59AF} - C:\ProgramData\SavEELOTs\Y5Fvi.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog9 000000000100 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000101 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000102 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000103 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000104 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000105 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000106 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000107 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000108 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000109 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000110 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000111 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000112 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000113 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000114 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000115 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000116 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000117 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000118 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000119 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000120 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000121 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000122 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000123 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000124 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000125 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000126 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000127 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000128 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000129 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000130 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000131 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000132 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000133 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000134 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000135 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000136 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000137 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000138 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000139 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000140 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000141 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000142 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000143 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000144 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000145 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000146 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000147 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000148 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000149 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000150 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000151 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000152 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000153 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000154 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000155 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000156 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000157 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000158 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000159 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000160 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000161 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000162 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000163 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000164 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000165 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000166 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000167 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000168 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000169 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000170 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000171 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000172 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000173 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000174 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000175 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000176 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000177 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000178 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000179 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000180 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000181 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000182 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000183 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000184 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000185 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000186 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000187 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000188 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000189 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000190 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000191 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000192 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000193 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000194 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000195 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000196 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000197 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000198 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000199 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000200 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000201 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Winsock: Catalog9 000000000202 %SystemRoot%\system32\mswsock.dll [232448] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://wp.pl/
CHR RestoreOnStartup: "hxxp://www.wp.pl/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Extension: (UtubeAdRemoVaal) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnocfaonmelkfjnpocebnjagodddlfhh [2014-01-31]
CHR Extension: (WebConnect) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon [2013-09-04]
CHR Extension: (Google Wallet) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-09-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 6490942d; C:\ProgramData\Windows net-clean\windowsnet-cleanSvc.dll [184144 2013-12-26] ()
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [821592 2012-01-09] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 Update Greener Web; C:\Program Files\Greener Web\updateGreenerWeb.exe [317728 2014-06-06] ()

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-05] (Disc Soft Ltd)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [20336 2012-01-05] (IObit)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [90368 2011-02-25] (Huawei Technologies Co., Ltd.)
S3 PcaSp60; C:\Windows\System32\DRIVERS\PcaSp60.sys [28672 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [30640 2012-07-05] (IObit.com)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2013-09-25] ()
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [19832 2012-07-05] (IObit.com)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U3 pxldqpob; \??\C:\Users\WACICI~1\AppData\Local\Temp\pxldqpob.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-06 21:52 - 2014-06-06 21:52 - 00023421 _____ () C:\Users\Właściciele\Downloads\FRST.txt
2014-06-06 21:51 - 2014-06-06 21:52 - 00000000 ____D () C:\FRST
2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe
2014-06-06 21:51 - 2014-06-06 21:51 - 00001158 _____ () C:\Users\Właściciele\Desktop\Continue Image Editor Installation.lnk
2014-06-06 21:51 - 2014-06-06 21:51 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-06-06 21:50 - 2014-06-06 21:51 - 00000000 ____D () C:\Program Files\Greener Web
2014-06-06 21:50 - 2014-06-06 21:50 - 00001242 _____ () C:\Users\Public\Desktop\Image Converter.lnk
2014-06-06 21:50 - 2014-06-06 21:50 - 00000326 _____ () C:\Windows\Tasks\Digital Sites.job
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DigitalSites
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter
2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe
2014-06-06 21:49 - 2014-06-06 21:49 - 00000393 _____ () C:\Users\Właściciele\Desktop\GMER.txt
2014-06-06 21:46 - 2014-06-06 21:46 - 00000393 _____ () C:\Users\Właściciele\Desktop\gmer.log
2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip
2014-06-06 21:19 - 2014-06-06 21:19 - 00000165 ____H () C:\Users\Właściciele\Desktop\~$MŁODE 2014.xlsx
2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx
2014-06-05 16:01 - 2014-06-05 16:01 - 00048124 _____ () C:\Users\Właściciele\Desktop\Extras.Txt
2014-06-05 15:59 - 2014-06-05 15:59 - 00059390 _____ () C:\Users\Właściciele\Desktop\OTL.Txt
2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt
2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt
2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe
2014-06-05 09:50 - 2014-06-06 20:03 - 00000336 _____ () C:\Windows\setupact.log
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 22:29 - 2014-06-04 22:29 - 00001114 _____ () C:\Users\Public\Desktop\RAMKontroler.lnk
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\Program Files\XimSoft
2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi
2014-06-04 22:16 - 2014-06-04 22:15 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe
2014-06-04 22:15 - 2014-06-04 22:15 - 00702504 _____ () C:\Users\Właściciele\Downloads\CCleaner(13061).exe
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX
2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt
2014-05-29 22:25 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt
2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx
2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx
2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx
2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt
2014-05-29 22:16 - 2014-05-29 22:17 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx
2014-05-29 20:11 - 2014-05-29 21:39 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB
2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe
2014-05-28 18:30 - 2014-05-28 18:30 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (3).pl]-
2014-05-27 13:56 - 2014-05-27 13:56 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (2).pl]-
2014-05-27 13:55 - 2014-05-27 13:55 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (1).pl]-
2014-05-27 13:26 - 2014-05-27 13:26 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta.pl]-
2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt
2014-05-25 22:10 - 2014-06-04 19:28 - 00011482 _____ () C:\Users\Właściciele\Desktop\lot06_m073.xlsx
2014-05-25 22:04 - 2014-05-25 22:05 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx
2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip
2014-05-23 23:19 - 2014-05-23 23:20 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4
2014-05-23 23:11 - 2014-05-29 23:50 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat
2014-05-21 21:16 - 2014-05-21 21:17 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw
2014-05-21 14:50 - 2014-05-21 14:50 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\bsndwi.dat
2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls
2014-05-08 21:46 - 2014-05-08 21:46 - 00003689 _____ () C:\Users\Właściciele\Desktop\wsp_sopot.txt
2014-05-08 21:38 - 2014-05-08 21:38 - 00003689 _____ () C:\Users\Właściciele\Downloads\wsp_sopot (1).txt
2014-05-08 21:37 - 2014-05-08 21:37 - 00003689 _____ () C:\Users\Właściciele\Downloads\wsp_sopot.txt
2014-05-08 20:07 - 2014-06-06 21:25 - 00013731 _____ () C:\Users\Właściciele\Desktop\MŁODE 2014.xlsx

==================== One Month Modified Files and Folders =======

2014-06-06 21:52 - 2014-06-06 21:52 - 00023421 _____ () C:\Users\Właściciele\Downloads\FRST.txt
2014-06-06 21:52 - 2014-06-06 21:51 - 00000000 ____D () C:\FRST
2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe
2014-06-06 21:51 - 2014-06-06 21:51 - 00001158 _____ () C:\Users\Właściciele\Desktop\Continue Image Editor Installation.lnk
2014-06-06 21:51 - 2014-06-06 21:51 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
2014-06-06 21:51 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Greener Web
2014-06-06 21:50 - 2014-06-06 21:50 - 00001242 _____ () C:\Users\Public\Desktop\Image Converter.lnk
2014-06-06 21:50 - 2014-06-06 21:50 - 00000326 _____ () C:\Windows\Tasks\Digital Sites.job
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DigitalSites
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter
2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe
2014-06-06 21:49 - 2014-06-06 21:49 - 00000393 _____ () C:\Users\Właściciele\Desktop\GMER.txt
2014-06-06 21:46 - 2014-06-06 21:46 - 00000393 _____ () C:\Users\Właściciele\Desktop\gmer.log
2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip
2014-06-06 21:35 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-06 21:35 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-06 21:25 - 2014-05-08 20:07 - 00013731 _____ () C:\Users\Właściciele\Desktop\MŁODE 2014.xlsx
2014-06-06 21:19 - 2014-06-06 21:19 - 00000165 ____H () C:\Users\Właściciele\Desktop\~$MŁODE 2014.xlsx
2014-06-06 21:06 - 2012-06-15 12:21 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-06 21:01 - 2014-02-17 00:56 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-06 20:55 - 2012-11-29 10:24 - 00001082 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000UA.job
2014-06-06 20:08 - 2012-06-14 21:10 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-06 20:08 - 2009-07-14 10:07 - 00687828 _____ () C:\Windows\system32\perfh015.dat
2014-06-06 20:08 - 2009-07-14 10:07 - 00131382 _____ () C:\Windows\system32\perfc015.dat
2014-06-06 20:06 - 2012-06-14 21:58 - 01329586 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 20:04 - 2014-01-05 22:02 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\newnext.me
2014-06-06 20:03 - 2014-06-05 09:50 - 00000336 _____ () C:\Windows\setupact.log
2014-06-06 20:03 - 2014-02-17 00:56 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-06 20:03 - 2013-04-13 00:26 - 00000431 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-06-06 20:03 - 2012-06-16 23:40 - 00000250 _____ () C:\Windows\Tasks\PC Fresh.job
2014-06-06 20:03 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx
2014-06-05 16:01 - 2014-06-05 16:01 - 00048124 _____ () C:\Users\Właściciele\Desktop\Extras.Txt
2014-06-05 15:59 - 2014-06-05 15:59 - 00059390 _____ () C:\Users\Właściciele\Desktop\OTL.Txt
2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt
2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt
2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 22:29 - 2014-06-04 22:29 - 00001114 _____ () C:\Users\Public\Desktop\RAMKontroler.lnk
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\Program Files\XimSoft
2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi
2014-06-04 22:17 - 2014-01-05 22:03 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DAEMON Tools Lite
2014-06-04 22:16 - 2014-02-17 00:57 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-04 22:16 - 2014-02-17 00:57 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-04 22:15 - 2014-06-04 22:16 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe
2014-06-04 22:15 - 2014-06-04 22:15 - 00702504 _____ () C:\Users\Właściciele\Downloads\CCleaner(13061).exe
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX
2014-06-04 19:30 - 2012-06-17 13:37 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-06-04 19:30 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-04 19:28 - 2014-05-25 22:10 - 00011482 _____ () C:\Users\Właściciele\Desktop\lot06_m073.xlsx
2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx
2014-06-02 00:31 - 2012-09-23 18:53 - 00909824 ___SH () C:\Users\Właściciele\Desktop\Thumbs.db
2014-06-01 00:55 - 2012-11-29 10:24 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000Core.job
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-31 00:15 - 2014-02-14 16:28 - 00002018 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-05-31 00:15 - 2012-09-28 15:15 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-29 23:50 - 2014-05-23 23:11 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat
2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt
2014-05-29 22:34 - 2014-05-29 22:25 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt
2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx
2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx
2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx
2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt
2014-05-29 22:17 - 2014-05-29 22:16 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx
2014-05-29 21:39 - 2014-05-29 20:11 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB
2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe
2014-05-28 18:30 - 2014-05-28 18:30 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (3).pl]-
2014-05-27 13:56 - 2014-05-27 13:56 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (2).pl]-
2014-05-27 13:55 - 2014-05-27 13:55 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (1).pl]-
2014-05-27 13:26 - 2014-05-27 13:26 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta.pl]-
2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt
2014-05-25 22:05 - 2014-05-25 22:04 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx
2014-05-25 11:26 - 2014-01-31 01:08 - 00000000 ____D () C:\ProgramData\144d5074a576204f
2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip
2014-05-23 23:20 - 2014-05-23 23:19 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4
2014-05-21 21:17 - 2014-05-21 21:16 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw
2014-05-21 14:50 - 2014-05-21 14:50 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\bsndwi.dat
2014-05-15 23:44 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls
2014-05-08 21:46 - 2014-05-08 21:46 - 00003689 _____ () C:\Users\Właściciele\Desktop\wsp_sopot.txt
2014-05-08 21:38 - 2014-05-08 21:38 - 00003689 _____ () C:\Users\Właściciele\Downloads\wsp_sopot (1).txt
2014-05-08 21:37 - 2014-05-08 21:37 - 00003689 _____ () C:\Users\Właściciele\Downloads\wsp_sopot.txt

Files to move or delete:
====================
C:\ProgramData\bsndwi.dat
C:\ProgramData\dgvnbsi.dat


Some content of TEMP:
====================
C:\Users\Właściciele\AppData\Local\Temp\ICReinstall_ImageEditorSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll
[2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-29 14:59

==================== End Of Log ============================