Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-06-2014 03 Ran by Właściciele (administrator) on GFFD on 10-06-2014 22:49:35 Running from C:\Users\Właściciele\Desktop Platform: Microsoft Windows 7 Ultimate (X86) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\wlanext.exe () C:\ProgramData\DatacardService\HWDeviceService.exe () C:\Program Files\Canon\IJPLM\ijplmsvc.exe (Microsoft Corporation) C:\Windows\System32\audiodg.exe (Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Właściciele\AppData\Local\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Właściciele\Desktop\FRST (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation) HKLM\...\Run: [DataCardMonitor] => C:\Program Files\blueconnect\DataCardMonitor.exe [259424 2012-06-17] (Huawei Technologies Co., Ltd.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2516296 2010-03-25] (CANON INC.) HKLM\...\Run: [CanonSolutionMenuEx] => C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [Google Update] => C:\Users\Właściciele\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-29] (Google Inc.) HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [RAMKontroler] => C:\Program Files\XimSoft\RAM Kontroler\RAMKontroler.exe HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\Run: [dgvnbsi] => regsvr32.exe "C:\ProgramData\dgvnbsi.dat" HKU\S-1-5-21-2911960754-627070767-2633746932-1000\...\MountPoints2: {4ceb9f56-7642-11e3-947e-99700614c1aa} - G:\Launcher.exe Startup: C:\Users\Właściciele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope value is missing. BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin: @ganymede/GanymedeNetPlugin,version=1.0 - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Właściciele\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll No File Chrome: ======= CHR HomePage: CHR Plugin: (Widevine Content Decryption Module) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll No File CHR Plugin: (Shockwave Flash) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Chrome PDF Viewer) - C:\Users\W\u0142a\u015Bciciele\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll No File CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) CHR Plugin: (GanymedeNet.Detector) - C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( ) CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java(TM) Platform SE 7 U40) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll () CHR Plugin: (Java Deployment Toolkit 7.0.400.43) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) CHR Extension: (Google Wallet) - C:\Users\Właściciele\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22] ========================== Services (Whitelisted) ================= R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] () R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] () ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-01-05] (Disc Soft Ltd) S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [90368 2011-02-25] (Huawei Technologies Co., Ltd.) S3 PcaSp60; C:\Windows\System32\DRIVERS\PcaSp60.sys [28672 2010-09-07] (Printing Communications Assoc., Inc. (PCAUSA)) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-10 22:49 - 2014-06-10 22:49 - 00009141 _____ () C:\Users\Właściciele\Desktop\FRST.txt 2014-06-10 22:48 - 2014-06-10 22:48 - 00448512 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\TFC.exe 2014-06-10 22:46 - 2014-06-10 22:46 - 00005889 _____ () C:\Users\Właściciele\Desktop\AdwCleaner[S1].txt 2014-06-10 22:44 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-06-10 22:43 - 2014-06-10 22:43 - 01333465 _____ () C:\Users\Właściciele\Downloads\adwcleaner_3.212.exe 2014-06-10 20:34 - 2014-06-10 20:34 - 00211456 _____ () C:\Users\Właściciele\Downloads\WK-2014 Rozkład.xls 2014-06-10 19:50 - 2014-06-10 19:50 - 00054666 _____ () C:\Users\Właściciele\Downloads\Shortcut.txt 2014-06-10 19:49 - 2014-06-10 19:50 - 00021028 _____ () C:\Users\Właściciele\Downloads\Addition.txt 2014-06-10 19:48 - 2014-06-10 19:50 - 00030597 _____ () C:\Users\Właściciele\Downloads\FRST.txt 2014-06-10 19:47 - 2014-06-10 19:47 - 01177600 _____ (Farbar) C:\Users\Właściciele\Desktop\FRST (1).exe 2014-06-10 19:24 - 2014-06-10 19:24 - 00667136 _____ () C:\Users\Właściciele\Downloads\SCINAWA_200750_50511.xls 2014-06-10 19:24 - 2014-06-10 19:24 - 00599040 _____ () C:\Users\Właściciele\Downloads\0e2bbe616801f271afa9d132f9c8b72c45f1d59b.xls 2014-06-07 11:33 - 2014-06-10 22:45 - 00002576 _____ () C:\Windows\PFRO.log 2014-06-06 21:51 - 2014-06-10 22:49 - 00000000 ____D () C:\FRST 2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe 2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter 2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe 2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip 2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx 2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt 2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt 2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe 2014-06-05 09:50 - 2014-06-10 22:46 - 00002856 _____ () C:\Windows\setupact.log 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi 2014-06-04 22:16 - 2014-06-04 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-06-04 22:16 - 2014-06-04 22:15 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe 2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX 2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX 2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx 2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt 2014-05-29 22:25 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt 2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx 2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx 2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx 2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt 2014-05-29 22:16 - 2014-05-29 22:17 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx 2014-05-29 20:11 - 2014-05-29 21:39 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB 2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe 2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt 2014-05-25 22:10 - 2014-06-10 20:31 - 00011480 _____ () C:\Users\Właściciele\Desktop\lot07_m073.xlsx 2014-05-25 22:04 - 2014-05-25 22:05 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx 2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip 2014-05-23 23:19 - 2014-05-23 23:20 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4 2014-05-23 23:11 - 2014-06-10 22:30 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat 2014-05-21 21:16 - 2014-05-21 21:17 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw 2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls 2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls 2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls ==================== One Month Modified Files and Folders ======= 2014-06-10 22:50 - 2014-06-10 22:49 - 00009141 _____ () C:\Users\Właściciele\Desktop\FRST.txt 2014-06-10 22:50 - 2012-06-14 22:06 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Temp 2014-06-10 22:49 - 2014-06-06 21:51 - 00000000 ____D () C:\FRST 2014-06-10 22:48 - 2014-06-10 22:48 - 00448512 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\TFC.exe 2014-06-10 22:46 - 2014-06-10 22:46 - 00005889 _____ () C:\Users\Właściciele\Desktop\AdwCleaner[S1].txt 2014-06-10 22:46 - 2014-06-05 09:50 - 00002856 _____ () C:\Windows\setupact.log 2014-06-10 22:46 - 2014-02-17 00:56 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-10 22:46 - 2013-04-13 00:26 - 00000431 _____ () C:\Windows\system32\Drivers\etc\hosts.ics 2014-06-10 22:46 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-10 22:45 - 2014-06-07 11:33 - 00002576 _____ () C:\Windows\PFRO.log 2014-06-10 22:45 - 2012-06-14 21:58 - 01376586 _____ () C:\Windows\WindowsUpdate.log 2014-06-10 22:45 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-10 22:45 - 2009-07-14 06:34 - 00009584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-10 22:44 - 2013-09-04 20:06 - 00000000 ____D () C:\AdwCleaner 2014-06-10 22:44 - 2012-06-14 22:06 - 00000000 ____D () C:\Users\Właściciele 2014-06-10 22:43 - 2014-06-10 22:43 - 01333465 _____ () C:\Users\Właściciele\Downloads\adwcleaner_3.212.exe 2014-06-10 22:39 - 2014-02-17 00:56 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-10 22:39 - 2012-11-29 10:24 - 00001082 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000UA.job 2014-06-10 22:37 - 2014-02-17 00:19 - 00000000 ____D () C:\Moja Hodowla 6 2014-06-10 22:37 - 2013-02-21 22:26 - 00000000 ____D () C:\Program Files\Ganymede 2014-06-10 22:37 - 2012-11-29 10:24 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2911960754-627070767-2633746932-1000Core.job 2014-06-10 22:36 - 2014-03-12 23:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CueClub 2014-06-10 22:36 - 2014-02-17 01:15 - 00000000 ____D () C:\Program Files\Serious Sam - Pierwsze Starcie 2014-06-10 22:35 - 2012-06-14 21:10 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-10 22:35 - 2009-07-14 10:07 - 00687828 _____ () C:\Windows\system32\perfh015.dat 2014-06-10 22:35 - 2009-07-14 10:07 - 00131382 _____ () C:\Windows\system32\perfc015.dat 2014-06-10 22:31 - 2014-01-31 01:08 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-06-10 22:30 - 2014-05-23 23:11 - 00281600 _____ () C:\ProgramData\dgvnbsi.dat 2014-06-10 22:30 - 2012-06-16 23:32 - 00000000 ____D () C:\Users\Właściciele\Desktop\Dokumenty 2014-06-10 22:30 - 2009-07-14 04:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-06-10 20:34 - 2014-06-10 20:34 - 00211456 _____ () C:\Users\Właściciele\Downloads\WK-2014 Rozkład.xls 2014-06-10 20:31 - 2014-05-25 22:10 - 00011480 _____ () C:\Users\Właściciele\Desktop\lot07_m073.xlsx 2014-06-10 20:06 - 2012-06-15 12:21 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-10 19:50 - 2014-06-10 19:50 - 00054666 _____ () C:\Users\Właściciele\Downloads\Shortcut.txt 2014-06-10 19:50 - 2014-06-10 19:49 - 00021028 _____ () C:\Users\Właściciele\Downloads\Addition.txt 2014-06-10 19:50 - 2014-06-10 19:48 - 00030597 _____ () C:\Users\Właściciele\Downloads\FRST.txt 2014-06-10 19:47 - 2014-06-10 19:47 - 01177600 _____ (Farbar) C:\Users\Właściciele\Desktop\FRST (1).exe 2014-06-10 19:24 - 2014-06-10 19:24 - 00667136 _____ () C:\Users\Właściciele\Downloads\SCINAWA_200750_50511.xls 2014-06-10 19:24 - 2014-06-10 19:24 - 00599040 _____ () C:\Users\Właściciele\Downloads\0e2bbe616801f271afa9d132f9c8b72c45f1d59b.xls 2014-06-10 10:50 - 2013-07-30 15:10 - 00000095 _____ () C:\Users\Właściciele\AppData\Roaming\WB.CFG 2014-06-06 22:59 - 2009-07-14 04:04 - 00000580 _____ () C:\Windows\win.ini 2014-06-06 21:51 - 2014-06-06 21:51 - 01145344 _____ (Farbar) C:\Users\Właściciele\Downloads\FRST.exe 2014-06-06 21:50 - 2014-06-06 21:50 - 00000000 ____D () C:\Program Files\Image Converter 2014-06-06 21:49 - 2014-06-06 21:49 - 00677168 _____ () C:\Users\Właściciele\Downloads\ImageEditorSetup.exe 2014-06-06 21:45 - 2014-06-06 21:45 - 00370943 _____ () C:\Users\Właściciele\Downloads\gmer.zip 2014-06-06 21:25 - 2014-05-08 20:07 - 00013731 _____ () C:\Users\Właściciele\Desktop\MŁODE 2014.xlsx 2014-06-05 16:03 - 2014-06-05 16:03 - 00255615 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC (1).xlsx 2014-06-05 15:58 - 2014-06-05 15:58 - 00048124 _____ () C:\Users\Właściciele\Downloads\Extras.Txt 2014-06-05 15:56 - 2014-06-05 15:56 - 00059390 _____ () C:\Users\Właściciele\Downloads\OTL.Txt 2014-06-05 15:49 - 2014-06-05 15:49 - 00602112 _____ (OldTimer Tools) C:\Users\Właściciele\Downloads\OTL.exe 2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-04 22:28 - 2014-06-04 22:28 - 00561664 _____ () C:\Users\Właściciele\Downloads\RAM_Kontroler_1.2_www.PROGRAMOSY.pl.msi 2014-06-04 22:17 - 2014-01-05 22:03 - 00000000 ____D () C:\Users\Właściciele\AppData\Roaming\DAEMON Tools Lite 2014-06-04 22:16 - 2014-06-04 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-06-04 22:16 - 2014-02-17 00:57 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-06-04 22:16 - 2014-02-17 00:57 - 00000000 ____D () C:\Program Files\CCleaner 2014-06-04 22:15 - 2014-06-04 22:16 - 04748896 _____ (Piriform Ltd) C:\Users\Właściciele\Downloads\ccsetup414.exe 2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ___HD () C:\ProgramData\CanonIJEPPEX 2014-06-04 19:30 - 2014-06-04 19:30 - 00000000 ____D () C:\Users\Właściciele\AppData\Local\Canon Easy-PhotoPrint EX 2014-06-04 19:30 - 2012-06-17 13:37 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-06-04 19:30 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-06-03 11:29 - 2014-06-03 11:29 - 00247365 _____ () C:\Users\Właściciele\Downloads\SESJA LETNIA CALOSC.xlsx 2014-06-02 00:31 - 2012-09-23 18:53 - 00909824 ___SH () C:\Users\Właściciele\Desktop\Thumbs.db 2014-05-29 22:34 - 2014-05-29 22:34 - 00502272 _____ () C:\Users\Właściciele\Downloads\Marcin Saciłowski Zarządzanie łańcuchem dostaw.ppt 2014-05-29 22:34 - 2014-05-29 22:25 - 00502272 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchem dostaw cw 1.ppt 2014-05-29 22:25 - 2014-05-29 22:25 - 00631490 _____ () C:\Users\Właściciele\Downloads\lancuch3.pptx 2014-05-29 22:25 - 2014-05-29 22:25 - 00375899 _____ () C:\Users\Właściciele\Downloads\Mierniki zintegrowanego łańcucha dostaw.pptx 2014-05-29 22:24 - 2014-05-29 22:24 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1 (1).pptx 2014-05-29 22:23 - 2014-05-29 22:23 - 00095232 _____ () C:\Users\Właściciele\Downloads\Zarządzanie łańcuchami dostaw 2.ppt 2014-05-29 22:17 - 2014-05-29 22:16 - 03238673 _____ () C:\Users\Właściciele\Downloads\lancuch_dostaw1.pptx 2014-05-29 21:39 - 2014-05-29 20:11 - 00000000 ____D () C:\Users\Właściciele\Desktop\WSB 2014-05-28 18:31 - 2014-05-28 18:31 - 00921512 _____ (Oracle Corporation) C:\Users\Właściciele\Downloads\chromeinstall-7u55.exe 2014-05-25 22:30 - 2014-05-25 22:30 - 00093749 _____ () C:\Users\Właściciele\Downloads\060_lot04 (1).txt 2014-05-25 22:05 - 2014-05-25 22:04 - 00011773 _____ () C:\Users\Właściciele\Downloads\lotxx_nick.xlsx 2014-05-24 16:29 - 2014-05-24 16:29 - 00460129 _____ () C:\Users\Właściciele\Downloads\download.zip 2014-05-23 23:20 - 2014-05-23 23:19 - 25713488 _____ () C:\Users\Właściciele\Downloads\061.mp4 2014-05-21 21:17 - 2014-05-21 21:16 - 00000000 ____D () C:\Users\Właściciele\Desktop\Warsaw 2014-05-15 23:44 - 2009-07-14 06:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-12 14:44 - 2014-05-12 14:44 - 00294912 _____ () C:\Users\Właściciele\Downloads\oddzial_s03.xls 2014-05-12 14:43 - 2014-05-12 14:43 - 00309248 _____ () C:\Users\Właściciele\Downloads\oddzial_s01.xls 2014-05-12 14:43 - 2014-05-12 14:43 - 00290816 _____ () C:\Users\Właściciele\Downloads\oddzial_s02.xls Files to move or delete: ==================== C:\ProgramData\dgvnbsi.dat ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll [2009-07-14 01:24] - [2009-07-14 03:16] - 0811520 ____A (Microsoft Corporation) 8626F0C30D4E3564FFDD25C90F4426F1 C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-29 14:59 ==================== End Of Log ============================