Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-06-2014 03
Ran by Właściciele (administrator) on GFFD on 10-06-2014 19:48:13
Running from C:\Users\Właściciele\Downloads
Platform: Microsoft Windows 7 Ultimate  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Ascora GmbH) C:\Program Files\PC Fresh\PC Fresh.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Update\GoogleUpdate.exe
(Huawei Technologies Co., Ltd.) C:\Users\Właściciele\AppData\Roaming\blueconnect\ouc.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\Właściciele\Downloads\FRST (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [IObit Malware Fighter] => C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [4474832 2012-12-25] (IObit)
HKLM\...\Run: [DataCardMonitor] => C:\Program Files\blueconnect\DataCardMonitor.exe [259424 2012-06-17] (Huawei Technologies Co., Ltd.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2516296 2010-03-25] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenuEx] => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [HW_OPENEYE_OUC_blueconnect] => C:\Program Files\blueconnect\UpdateDog\ouc.exe [116064 2011-03-26] (Huawei Technologies Co., Ltd.)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [Google Update] => C:\Users\Właściciele\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-29] (Google Inc.)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [NextLive] => C:\Windows\system32\rundll32.exe "C:\Users\Właściciele\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [dgvnbsi] => regsvr32.exe "C:\ProgramData\dgvnbsi.dat"
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [RAMKontroler] => C:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe [618496 2010-06-03] (PHU XimSoft Tomasz Wyderka)
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {2b1caaa9-f9a0-11e1-a846-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {4ceb9f56-7642-11e3-947e-99700614c1aa} - G:\Launcher.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {863e2bf6-d0de-11e1-80f0-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a67f-b851-11e1-a6ec-806e6f6e6963} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a6b4-b851-11e1-a6ec-f46d044d0096} - F:\AutoRun.exe
HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {9186a6ea-b851-11e1-a6ec-f46d044d0096} - F:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Właściciele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.oversearch.info/?pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.oversearch.info/?pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.oversearch.info/?l=1&q={searchTerms}&pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?src=sp&aff=51&cf=127628fc-3c83-11e2-a55b-e18eca7b13b2&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?src=sp&aff=51&cf=127628fc-3c83-11e2-a55b-e18eca7b13b2&q={searchTerms}
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.oversearch.info/?l=1&q={searchTerms}&pid=34&r=2013/09/21&hid=9341803433448381243&lg=EN&cc=PL&unqvl=36
SearchScopes: HKCU - {D1DD79B4-EBB9-4D5B-B4F9-0EB87A2D5F09} URL = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=446F05E2-5A36-4986-9BFB-4D18D5EB21CF&apn_sauid=74589724-0539-4075-B529-CEB65887B572
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Właściciele\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Właściciele\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npganymedenet.dll ( )

Chrome: 
=======
CHR HomePage: hxxp://wp.pl/
CHR RestoreOnStartup: "hxxp://www.wp.pl/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Extension: (UtubeAdRemoVaal) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnocfaonmelkfjnpocebnjagodddlfhh [2014-01-31]
CHR Extension: (WebConnect) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon [2013-09-04]
CHR Extension: (Google Wallet) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-09-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [821592 2012-01-09] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-05] (Disc Soft Ltd)
R3 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [20336 2012-01-05] (IObit)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [90368 2011-02-25] (Huawei Technologies Co., Ltd.)
S3 PcaSp60; C:\Windows\System32\DRIVERS\PcaSp60.sys [28672 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA))
R3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [30640 2012-07-05] (IObit.com)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2013-09-25] ()
R3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [19832 2012-07-05] (IObit.com)
R1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw.sys [52824 2014-06-06] (StdLib)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-10 19:48 - 2014-06-10 19:48 - 00013899 _____ () C:\Users\Właściciele\Downloads\FRST.txt
2014-06-10 19:47 - 2014-06-10 19:47 - 01177600 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST (1).exe
2014-06-10 19:24 - 2014-06-10 19:24 - 00667136 _____ () C:\Users\Właściciele\Downloads\SCINAWA_200750_50511.xls
2014-06-10 19:24 - 2014-06-10 19:24 - 00599040 _____ () C:\Users\Właściciele\Downloads\0e2bbe616801f271afa9d132f9c8b72c45f1d59b.xls
2014-06-07 11:33 - 2014-06-07 11:34 - 00000822 _____ () C:\Windows\PFRO.log
2014-06-06 23:28 - 2014-06-06 23:28 - 00000000 ____D () C:\Program Files\SavEELOTs
2014-06-06 22:59 - 2014-06-06 11:23 - 00052824 _____ (StdLib) C:\Windows\system32\Drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw.sys
2014-06-06 21:51 - 2014-06-10 19:48 - 00000000 ____D () C:\FRST
2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe
2014-06-06 21:50 - 2014-06-10 18:50 - 00000326 _____ () C:\Windows\Tasks\Digital Sites.job
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DigitalSites
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter
2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe
2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip
2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx
2014-06-05 15:59 - 2014-06-05 15:59 - 00059390 _____ () C:\Users\Właściciele\Desktop\OTL.Txt
2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt
2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt
2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe
2014-06-05 09:50 - 2014-06-10 19:10 - 00002688 _____ () C:\Windows\setupact.log
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 22:29 - 2014-06-04 22:29 - 00001114 _____ () C:\Users\Public\Desktop\RAMKontroler.lnk
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAM Kontroler
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\Program Files\XimSoft
2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi
2014-06-04 22:16 - 2014-06-04 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-04 22:16 - 2014-06-04 22:15 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe
2014-06-04 22:15 - 2014-06-04 22:15 - 00702504 _____ () C:\Users\Właściciele\Downloads\CCleaner(13061).exe
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX
2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt
2014-05-29 22:25 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt
2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx
2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx
2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx
2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt
2014-05-29 22:16 - 2014-05-29 22:17 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx
2014-05-29 20:11 - 2014-05-29 21:39 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB
2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe
2014-05-28 18:30 - 2014-05-28 18:30 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (3).pl]-
2014-05-27 13:56 - 2014-05-27 13:56 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (2).pl]-
2014-05-27 13:55 - 2014-05-27 13:55 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (1).pl]-
2014-05-27 13:26 - 2014-05-27 13:26 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta.pl]-
2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt
2014-05-25 22:10 - 2014-06-04 19:28 - 00011482 _____ () C:\Users\Właściciele\Desktop\lot06_m073.xlsx
2014-05-25 22:04 - 2014-05-25 22:05 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx
2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip
2014-05-23 23:19 - 2014-05-23 23:20 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4
2014-05-23 23:11 - 2014-05-29 23:50 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat
2014-05-21 21:16 - 2014-05-21 21:17 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw
2014-05-21 14:50 - 2014-05-21 14:50 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\bsndwi.dat
2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls

==================== One Month Modified Files and Folders =======

2014-06-10 19:48 - 2014-06-10 19:48 - 00013899 _____ () C:\Users\Właściciele\Downloads\FRST.txt
2014-06-10 19:48 - 2014-06-06 21:51 - 00000000 ____D () C:\FRST
2014-06-10 19:48 - 2012-06-14 22:06 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Temp
2014-06-10 19:47 - 2014-06-10 19:47 - 01177600 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST (1).exe
2014-06-10 19:24 - 2014-06-10 19:24 - 00667136 _____ () C:\Users\Właściciele\Downloads\SCINAWA_200750_50511.xls
2014-06-10 19:24 - 2014-06-10 19:24 - 00599040 _____ () C:\Users\Właściciele\Downloads\0e2bbe616801f271afa9d132f9c8b72c45f1d59b.xls
2014-06-10 19:10 - 2014-06-05 09:50 - 00002688 _____ () C:\Windows\setupact.log
2014-06-10 19:06 - 2012-06-15 12:21 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-10 19:01 - 2014-02-17 00:56 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-10 18:56 - 2014-01-05 22:02 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\newnext.me
2014-06-10 18:56 - 2012-06-14 21:58 - 01366767 _____ () C:\Windows\WindowsUpdate.log
2014-06-10 18:55 - 2012-11-29 10:24 - 00001082 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000UA.job
2014-06-10 18:50 - 2014-06-06 21:50 - 00000326 _____ () C:\Windows\Tasks\Digital Sites.job
2014-06-10 18:50 - 2012-06-14 21:10 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-10 18:50 - 2009-07-14 10:07 - 00687828 _____ () C:\Windows\system32\perfh015.dat
2014-06-10 18:50 - 2009-07-14 10:07 - 00131382 _____ () C:\Windows\system32\perfc015.dat
2014-06-10 18:46 - 2013-04-13 00:26 - 00000431 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-06-10 18:45 - 2014-02-17 00:56 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-10 18:45 - 2012-06-16 23:40 - 00000250 _____ () C:\Windows\Tasks\PC Fresh.job
2014-06-10 18:45 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-10 14:43 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-10 14:43 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-10 10:50 - 2013-07-30 15:10 - 00000095 _____ () C:\Users\Właściciele\AppData\Roaming\WB.CFG
2014-06-09 00:55 - 2012-11-29 10:24 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000Core.job
2014-06-07 11:34 - 2014-06-07 11:33 - 00000822 _____ () C:\Windows\PFRO.log
2014-06-07 11:33 - 2014-03-07 16:30 - 00000000 ____D () C:\ProgramData\SavEELOTs
2014-06-06 23:28 - 2014-06-06 23:28 - 00000000 ____D () C:\Program Files\SavEELOTs
2014-06-06 23:28 - 2014-01-31 01:08 - 00000000 ____D () C:\ProgramData\144d5074a576204f
2014-06-06 22:59 - 2009-07-14 04:04 - 00000580 _____ () C:\Windows\win.ini
2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DigitalSites
2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter
2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe
2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip
2014-06-06 21:25 - 2014-05-08 20:07 - 00013731 _____ () C:\Users\Właściciele\Desktop\MŁODE 2014.xlsx
2014-06-06 11:23 - 2014-06-06 22:59 - 00052824 _____ (StdLib) C:\Windows\system32\Drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw.sys
2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx
2014-06-05 15:59 - 2014-06-05 15:59 - 00059390 _____ () C:\Users\Właściciele\Desktop\OTL.Txt
2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt
2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt
2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-04 22:29 - 2014-06-04 22:29 - 00001114 _____ () C:\Users\Public\Desktop\RAMKontroler.lnk
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAM Kontroler
2014-06-04 22:29 - 2014-06-04 22:29 - 00000000 ____D () C:\Program Files\XimSoft
2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi
2014-06-04 22:17 - 2014-01-05 22:03 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DAEMON Tools Lite
2014-06-04 22:16 - 2014-06-04 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-04 22:16 - 2014-02-17 00:57 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-04 22:16 - 2014-02-17 00:57 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-04 22:15 - 2014-06-04 22:16 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe
2014-06-04 22:15 - 2014-06-04 22:15 - 00702504 _____ () C:\Users\Właściciele\Downloads\CCleaner(13061).exe
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX
2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX
2014-06-04 19:30 - 2012-06-17 13:37 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-06-04 19:30 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-04 19:28 - 2014-05-25 22:10 - 00011482 _____ () C:\Users\Właściciele\Desktop\lot06_m073.xlsx
2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx
2014-06-02 00:31 - 2012-09-23 18:53 - 00909824 ___SH () C:\Users\Właściciele\Desktop\Thumbs.db
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-05-31 00:15 - 2014-05-31 00:15 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-05-31 00:15 - 2014-02-14 16:28 - 00002018 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-05-31 00:15 - 2012-09-28 15:15 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-29 23:50 - 2014-05-23 23:11 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat
2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt
2014-05-29 22:34 - 2014-05-29 22:25 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt
2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx
2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx
2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx
2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt
2014-05-29 22:17 - 2014-05-29 22:16 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx
2014-05-29 21:39 - 2014-05-29 20:11 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB
2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe
2014-05-28 18:30 - 2014-05-28 18:30 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (3).pl]-
2014-05-27 13:56 - 2014-05-27 13:56 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (2).pl]-
2014-05-27 13:55 - 2014-05-27 13:55 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta (1).pl]-
2014-05-27 13:26 - 2014-05-27 13:26 - 00000000 _____ () C:\Users\Właściciele\Downloads\whitesnake_-_is_this_love [pobieranie-wrzuta.pl]-
2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt
2014-05-25 22:05 - 2014-05-25 22:04 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx
2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip
2014-05-23 23:20 - 2014-05-23 23:19 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4
2014-05-21 21:17 - 2014-05-21 21:16 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw
2014-05-21 14:50 - 2014-05-21 14:50 - 00264817 _____ (Microsoft Corporation) C:\ProgramData\bsndwi.dat
2014-05-15 23:44 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls
2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls

Files to move or delete:
====================
C:\ProgramData\bsndwi.dat
C:\ProgramData\dgvnbsi.dat


Some content of TEMP:
====================
C:\Users\Właściciele\AppData\Local\Temp\ICReinstall_ImageEditorSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll
[2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1

C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-05-29 14:59

==================== End Of Log ============================