Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 Ran by dik (administrator) on MOTOPARTNER-PC on 30-07-2014 17:45:08 Running from F:\ Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Nokia) C:\Program Files (x86)\Nokia\PC Internet Access\NPCIA.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Nokia.) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe () C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\Run: [NokiaPCInternetAccess] => C:\Program Files (x86)\Nokia\PC Internet Access\NPCIA.exe [663552 2009-09-17] (Nokia) HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\Run: [Yahoo! Search] => C:\Users\dik\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-06-19] (Google Inc.) HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\MountPoints2: {63688c3a-534c-11e2-b5a0-f46d042c378c} - F:\NokiaPCIA_Autorun.exe HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\MountPoints2: {6a716f72-3190-11e1-b07a-f46d042c378c} - J:\LANLauncher.exe HKU\S-1-5-21-929496005-2636014437-118799002-1000\...\MountPoints2: {8cf3c1c3-9230-11e1-a7f1-f46d042c378c} - K:\Startme.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://nmd.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://nmd.msn.com HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank URLSearchHook: HKCU - (No Name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No File StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - {0B35F5CE-B518-428C-B366-BBAABB1A8AF8} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392 SearchScopes: HKCU - {9D9FAA59-58ED-4596-AE1C-273E3A32B1D5} URL = http://rts.dsrlte.com/?q={searchTerms}&r=245 BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Pomocnik logowania za pomocą identyfikatora Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKCU - No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File Toolbar: HKCU - No Name - {00000000-0000-0000-0000-000000000000} - No File DPF: HKLM-x32 {AC2721FA-207D-44AE-8673-AE9074FC725C} http://192.168.2.25/DvrOcx.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 84.40.247.158 dk-logistics.polcar24.pl Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default FF NetworkProxy: "type", 0 FF Homepage: user_pref("browser.startup.homepage", ); FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\searchplugins\keepmysearch.xml FF Extension: shortcut - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\Extensions\shortcutff@gmail.com [2014-06-12] FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2012-12-27] FF Extension: Plug-in by Integra Software - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\Extensions\integra@integra.com.pl.xpi [2012-09-14] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-04-15] FF HKLM-x32\...\Firefox\Extensions: [shortcutff@gmail.com] - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\extensions\shortcutff@gmail.com FF Extension: No Name - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\extensions\adapter@babylontc.com.xpi [] FF Extension: No Name - C:\Users\dik\AppData\Roaming\Mozilla\Firefox\Profiles\4276yqqn.default\extensions\ocr@babylon.com.xpi [] Chrome: ======= CHR HomePage: CHR StartupUrls: "hxxp://rts.dsrlte.com" CHR DefaultSearchKeyword: pay-by-ads.com CHR DefaultSearchProvider: Yahoo! Search CHR DefaultSearchURL: http://rts.dsrlte.com/?q={searchTerms} CHR DefaultNewTabURL: CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll () CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (YouTube) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-06-19] CHR Extension: (Szukaj w Google) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-06-19] CHR Extension: (Skype Click to Call) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-08-23] CHR Extension: (No Name) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid [2012-07-31] CHR Extension: (Google Wallet) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28] CHR Extension: (No Name) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo [2014-07-12] CHR Extension: (No Name) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcgaoafcmbadjkfdippkdddgkeaipbn [2013-06-06] CHR Extension: (Gmail) - C:\Users\dik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-06-19] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) R3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [575488 2008-09-23] (Nokia.) [File not signed] S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-30] () [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-28] (DT Soft Ltd) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2012-03-26] (Apple Inc.) [File not signed] R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) R1 {7f2b4ad0-671a-477b-bcd4-79d041f50d27}w64; C:\Windows\System32\drivers\{7f2b4ad0-671a-477b-bcd4-79d041f50d27}w64.sys [61120 2014-04-24] (StdLib) S1 hqsfcvog; \??\C:\windows\system32\drivers\hqsfcvog.sys [X] S1 vlsasdkt; \??\C:\windows\system32\drivers\vlsasdkt.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-30 06:36 - 2014-07-30 06:36 - 00000000 ____D () C:\Users\dik\AppData\Local\{CA22E1A6-C8F1-459A-A0D3-5510A01160A9} 2014-07-29 18:35 - 2014-07-29 18:35 - 00000000 ____D () C:\Users\dik\AppData\Local\{A88B7207-5CE5-481A-8BAE-8DE42E5347F1} 2014-07-29 06:34 - 2014-07-29 06:34 - 00000000 ____D () C:\Users\dik\AppData\Local\{544D5CC3-4E96-4DD2-B378-C51B128488DB} 2014-07-28 06:48 - 2014-07-28 06:49 - 00000000 ____D () C:\Users\dik\AppData\Local\{28AE90EF-1447-40CA-A4F8-6D22B5BFE5B4} 2014-07-26 08:10 - 2014-07-26 08:10 - 00000000 ____D () C:\Users\dik\AppData\Local\{1F54FC79-DE81-47AC-B4B6-42767F4738F9} 2014-07-26 06:57 - 2014-07-26 06:57 - 00000000 ____D () C:\Users\dik\AppData\Local\{33F827DF-AC96-4B2A-B55C-76C47EA43FE1} 2014-07-25 17:24 - 2014-07-30 17:42 - 00000000 ____D () C:\AdwCleaner 2014-07-25 17:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\SysWOW64\sqlite3.dll 2014-07-25 06:22 - 2014-07-25 06:22 - 00000000 ____D () C:\Users\dik\AppData\Local\{CCD42936-6BE2-45DA-89C5-E3DF1A00A781} 2014-07-24 18:21 - 2014-07-24 18:21 - 00000000 ____D () C:\Users\dik\AppData\Local\{14DFC413-9E18-4B99-AADE-FD12D9A44425} 2014-07-24 18:19 - 2014-07-24 18:19 - 00276336 _____ () C:\windows\Minidump\072414-18283-01.dmp 2014-07-24 17:25 - 2014-07-30 17:45 - 00000000 ____D () C:\FRST 2014-07-24 06:03 - 2014-07-24 06:03 - 00000000 ____D () C:\Users\dik\AppData\Local\{71A0A4FA-2673-4CF9-9BB4-C620387867DA} 2014-07-23 17:43 - 2014-07-23 17:44 - 00961024 _____ () C:\Users\dik\Downloads\kl_uninstall.txt 2014-07-23 17:42 - 2014-07-23 17:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files 2014-07-23 17:40 - 2014-07-23 17:42 - 243878208 _____ (Kaspersky Lab) C:\Users\dik\Downloads\kav14.0.0.4651pl-pl.exe 2014-07-23 17:39 - 2014-07-23 17:39 - 04430600 _____ (Avira Operations GmbH & Co. KG) C:\Users\dik\Downloads\avira_en_av___ws2.exe 2014-07-23 17:39 - 2014-07-23 17:39 - 00000000 ____D () C:\OETemp 2014-07-23 17:11 - 2014-07-23 17:11 - 00000000 ____D () C:\Users\dik\AppData\Local\{D92CF441-D42F-4434-B2CB-B25BE2788CF4} 2014-07-23 05:10 - 2014-07-23 05:11 - 00000000 ____D () C:\Users\dik\AppData\Local\{A787BCC0-3512-4A83-9070-E4C0696F532E} 2014-07-22 17:09 - 2014-07-22 17:09 - 00000000 ____D () C:\Users\dik\AppData\Local\{4B435928-CCBC-41D1-96D0-3DCF0E47F379} 2014-07-22 05:08 - 2014-07-22 05:08 - 00000000 ____D () C:\Users\dik\AppData\Local\{86A4709C-2799-49AA-984F-C07ADBE32337} 2014-07-21 07:21 - 2014-07-21 07:21 - 00000000 ____D () C:\Users\dik\AppData\Local\{DF72796E-94F0-43CE-9933-3EF44BE4D471} 2014-07-19 06:06 - 2014-07-19 06:06 - 00000000 ____D () C:\Users\dik\AppData\Local\{750A5D64-AADC-44A8-BDB0-2062D8E2B71D} 2014-07-18 06:39 - 2014-07-18 06:39 - 00000000 ____D () C:\Users\dik\AppData\Local\{D3C33D08-CBC0-4873-A866-A05E042AA958} 2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\dik\AppData\Local\{9A7F0020-F6BD-43B2-900A-076B7576A31C} 2014-07-17 06:16 - 2014-07-17 06:16 - 00000000 ____D () C:\Users\dik\AppData\Local\{EB388BCD-CEED-4783-A9DD-B45D229F6BB1} 2014-07-16 17:31 - 2014-07-16 17:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{1D0EC77F-7BEE-4858-B4C1-E83FA25C5153} 2014-07-16 09:15 - 2014-07-16 09:15 - 00085299 _____ () C:\Users\dik\Desktop\zdjecie.JPGakt1 2014-07-16 05:29 - 2014-07-16 05:30 - 00000000 ____D () C:\Users\dik\AppData\Local\{5E98B047-5AED-462F-947B-37870F2A76FD} 2014-07-15 17:13 - 2014-07-15 17:13 - 00000000 ____D () C:\Users\dik\AppData\Local\{9FC83788-C5AC-49C9-A1FA-17DD2FC1A575} 2014-07-15 05:11 - 2014-07-15 05:11 - 00000000 ____D () C:\Users\dik\AppData\Local\{3CF6B996-BAA9-4EA9-A100-7842597DD926} 2014-07-14 11:15 - 2014-07-14 11:15 - 00000839 _____ () C:\Users\dik\Desktop\POZAŃSKI.txt 2014-07-14 07:17 - 2014-07-14 07:17 - 00000000 ____D () C:\Users\dik\AppData\Local\{43E355BA-CBB2-4E9F-908C-AE4201F9C05F} 2014-07-12 07:24 - 2014-07-12 07:24 - 00000000 ____D () C:\Users\dik\AppData\Local\{C38D9DB5-669C-4600-BD58-95B61F65FE9A} 2014-07-11 10:05 - 2014-07-11 10:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{AB8ABFEE-93C2-42F4-AD13-304876E30AEB} 2014-07-10 06:12 - 2014-07-10 06:12 - 00000000 ____D () C:\Users\dik\AppData\Local\{AAB57FE4-FAEF-4D9D-823E-D8FFA1517B5B} 2014-07-09 17:06 - 2014-07-09 17:06 - 00000000 ____D () C:\Users\dik\AppData\Local\{5EAD162B-E7C4-4C03-B435-628970E79A71} 2014-07-09 16:37 - 2014-07-09 16:37 - 00000000 _____ () C:\Users\dik\Documents\Nowy dokument tekstowy.txt 2014-07-09 15:33 - 2014-07-09 15:33 - 00000161 _____ () C:\Users\dik\Desktop\Katalog FTP -zdj%EAcia%20z%20wyjazdu%20do%20Tr%F3jmiasta- w pandora.polcar.com.pl.url 2014-07-09 05:19 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-07-09 05:19 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2014-07-09 05:18 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2014-07-09 05:18 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2014-07-09 05:18 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-07-09 05:18 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-07-09 05:18 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-07-09 05:18 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-07-09 05:18 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-07-09 05:18 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-07-09 05:18 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2014-07-09 05:18 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-07-09 05:18 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-07-09 05:18 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-07-09 05:18 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-07-09 05:18 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-07-09 05:18 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-07-09 05:18 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-07-09 05:18 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2014-07-09 05:18 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-07-09 05:18 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-07-09 05:18 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-07-09 05:18 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2014-07-09 05:18 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-07-09 05:18 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-07-09 05:18 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-07-09 05:18 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-07-09 05:18 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-07-09 05:18 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2014-07-09 05:18 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2014-07-09 05:18 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll 2014-07-09 05:18 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll 2014-07-09 05:18 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-07-09 05:18 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2014-07-09 05:18 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2014-07-09 05:18 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2014-07-09 05:18 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-07-09 05:18 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-07-09 05:18 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2014-07-09 05:18 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe 2014-07-09 05:18 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll 2014-07-09 05:18 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll 2014-07-09 05:18 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-07-09 05:18 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2014-07-09 05:18 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2014-07-09 05:18 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-07-09 05:18 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2014-07-09 05:18 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2014-07-09 05:18 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-07-09 05:18 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2014-07-09 05:18 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll 2014-07-09 05:18 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2014-07-09 05:18 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2014-07-09 05:18 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-07-09 05:18 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-07-09 05:18 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2014-07-09 05:18 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2014-07-09 05:18 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2014-07-09 05:18 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe 2014-07-09 05:18 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe 2014-07-09 05:18 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-07-09 05:18 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll 2014-07-09 05:18 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll 2014-07-09 05:18 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-07-09 05:18 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll 2014-07-09 05:18 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2014-07-09 05:18 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll 2014-07-09 05:18 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll 2014-07-09 05:18 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys 2014-07-09 05:05 - 2014-07-09 05:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{5F626737-9126-4C7F-AB53-C8E48519A36E} 2014-07-08 07:20 - 2014-07-08 07:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{746F4A49-40F5-49D2-B0EE-FD99848FFA10} 2014-07-07 19:20 - 2014-07-07 19:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{C362A5D2-B623-40C4-A821-216BC38D82B3} 2014-07-07 07:38 - 2014-07-07 07:38 - 00000000 ____D () C:\Users\dik\AppData\Roaming\ModelViews 2014-07-07 07:36 - 2014-07-07 07:36 - 00000000 ____D () C:\Users\dik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Optimizer 2014-07-07 07:36 - 2014-07-07 07:36 - 00000000 ____D () C:\Program Files (x86)\PC-Optimizer 2014-07-07 07:19 - 2014-07-07 07:19 - 00000000 ____D () C:\Users\dik\AppData\Local\{137A0AD0-CA21-4B01-AD1B-613A7A77CCFD} 2014-07-05 06:00 - 2014-07-05 06:00 - 00000000 ____D () C:\Users\dik\AppData\Local\{7F9974A9-6F6A-409A-BE64-07767A8272AB} 2014-07-04 07:58 - 2014-07-04 07:58 - 00000000 ____D () C:\Users\dik\AppData\Local\{7E8C87A7-3CF3-4D49-B1CA-995D7B522D6E} 2014-07-03 06:20 - 2014-07-03 06:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{2FE27832-E074-482D-949D-BB03CBB8EFF1} 2014-07-02 08:18 - 2014-07-02 08:19 - 00000000 ____D () C:\Users\dik\AppData\Local\{EF71C7E2-2226-49E6-9DE3-3D0E850B4E46} 2014-07-01 16:31 - 2014-07-01 16:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{89D870B4-CEAF-4A96-B8EF-DA5406C33605} 2014-07-01 12:52 - 2014-07-01 12:52 - 00095356 _____ () C:\Users\dik\Desktop\zdjecie.JPG8 2014-07-01 04:31 - 2014-07-01 04:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{4BD8E1FF-0402-491E-8232-F36F9FDB42F2} 2014-06-30 17:42 - 2014-06-30 17:42 - 00159219 _____ () C:\Users\dik\Desktop\zdjecie.JPG5 2014-06-30 17:41 - 2014-06-30 17:41 - 00125587 _____ () C:\Users\dik\Desktop\zdjecie.JPG4 2014-06-30 07:05 - 2014-06-30 07:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{02BE33B8-0F89-4077-BA9E-83919AA9AB64} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-07-30 17:45 - 2014-07-24 17:25 - 00000000 ____D () C:\FRST 2014-07-30 17:43 - 2012-06-19 09:31 - 00001038 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-30 17:43 - 2011-05-06 08:01 - 00118370 _____ () C:\windows\setupact.log 2014-07-30 17:43 - 2010-11-21 05:47 - 00417438 _____ () C:\windows\PFRO.log 2014-07-30 17:43 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-07-30 17:42 - 2014-07-25 17:24 - 00000000 ____D () C:\AdwCleaner 2014-07-30 17:42 - 2011-10-18 20:37 - 02058487 _____ () C:\windows\WindowsUpdate.log 2014-07-30 17:42 - 2011-10-18 20:37 - 00000000 ____D () C:\Users\dik 2014-07-30 17:41 - 2012-06-19 09:31 - 00001042 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-30 17:41 - 2011-10-19 18:08 - 00000000 ____D () C:\Users\dik\AppData\Roaming\SoftGrid Client 2014-07-30 17:20 - 2014-02-26 19:26 - 00000000 ____D () C:\Users\dik\Desktop\Nowy folder (8) 2014-07-30 17:02 - 2014-04-16 15:28 - 00000000 ____D () C:\Progress_TerminalXML 2014-07-30 16:57 - 2013-09-24 14:42 - 00000930 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job 2014-07-30 14:42 - 2013-12-19 15:42 - 00000140 _____ () C:\Users\dik\AppData\Roaming\WB.CFG 2014-07-30 08:47 - 2009-07-14 06:45 - 00020688 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-30 08:47 - 2009-07-14 06:45 - 00020688 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-30 06:36 - 2014-07-30 06:36 - 00000000 ____D () C:\Users\dik\AppData\Local\{CA22E1A6-C8F1-459A-A0D3-5510A01160A9} 2014-07-29 18:35 - 2014-07-29 18:35 - 00000000 ____D () C:\Users\dik\AppData\Local\{A88B7207-5CE5-481A-8BAE-8DE42E5347F1} 2014-07-29 06:34 - 2014-07-29 06:34 - 00000000 ____D () C:\Users\dik\AppData\Local\{544D5CC3-4E96-4DD2-B378-C51B128488DB} 2014-07-28 06:49 - 2014-07-28 06:48 - 00000000 ____D () C:\Users\dik\AppData\Local\{28AE90EF-1447-40CA-A4F8-6D22B5BFE5B4} 2014-07-26 08:10 - 2014-07-26 08:10 - 00000000 ____D () C:\Users\dik\AppData\Local\{1F54FC79-DE81-47AC-B4B6-42767F4738F9} 2014-07-26 07:58 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF 2014-07-26 06:57 - 2014-07-26 06:57 - 00000000 ____D () C:\Users\dik\AppData\Local\{33F827DF-AC96-4B2A-B55C-76C47EA43FE1} 2014-07-25 17:23 - 2012-06-19 09:37 - 00002191 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-07-25 17:23 - 2012-03-28 13:35 - 00001144 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-25 17:23 - 2012-03-28 13:35 - 00001132 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-25 17:21 - 2013-09-20 06:43 - 00001368 _____ () C:\Users\dik\Desktop\Wyczyść rejestr za darmo!.lnk 2014-07-25 17:09 - 2009-07-14 04:34 - 00000603 _____ () C:\windows\win.ini 2014-07-25 06:22 - 2014-07-25 06:22 - 00000000 ____D () C:\Users\dik\AppData\Local\{CCD42936-6BE2-45DA-89C5-E3DF1A00A781} 2014-07-25 05:06 - 2012-09-17 14:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-07-25 05:06 - 2012-09-17 14:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-07-24 19:10 - 2012-09-17 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-07-24 18:21 - 2014-07-24 18:21 - 00000000 ____D () C:\Users\dik\AppData\Local\{14DFC413-9E18-4B99-AADE-FD12D9A44425} 2014-07-24 18:19 - 2014-07-24 18:19 - 00276336 _____ () C:\windows\Minidump\072414-18283-01.dmp 2014-07-24 18:19 - 2014-03-05 07:55 - 684185587 _____ () C:\windows\MEMORY.DMP 2014-07-24 18:19 - 2014-03-05 07:55 - 00000000 ____D () C:\windows\Minidump 2014-07-24 17:28 - 2010-11-21 14:53 - 00751024 _____ () C:\windows\system32\perfh015.dat 2014-07-24 17:28 - 2010-11-21 14:53 - 00162218 _____ () C:\windows\system32\perfc015.dat 2014-07-24 17:28 - 2009-07-14 07:13 - 01703088 _____ () C:\windows\system32\PerfStringBackup.INI 2014-07-24 06:03 - 2014-07-24 06:03 - 00000000 ____D () C:\Users\dik\AppData\Local\{71A0A4FA-2673-4CF9-9BB4-C620387867DA} 2014-07-23 17:45 - 2011-05-05 14:41 - 00000000 ____D () C:\ProgramData\G DATA 2014-07-23 17:44 - 2014-07-23 17:43 - 00961024 _____ () C:\Users\dik\Downloads\kl_uninstall.txt 2014-07-23 17:44 - 2011-05-05 14:41 - 00000000 ____D () C:\Program Files (x86)\G Data 2014-07-23 17:42 - 2014-07-23 17:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab Setup Files 2014-07-23 17:42 - 2014-07-23 17:40 - 243878208 _____ (Kaspersky Lab) C:\Users\dik\Downloads\kav14.0.0.4651pl-pl.exe 2014-07-23 17:39 - 2014-07-23 17:39 - 04430600 _____ (Avira Operations GmbH & Co. KG) C:\Users\dik\Downloads\avira_en_av___ws2.exe 2014-07-23 17:39 - 2014-07-23 17:39 - 00000000 ____D () C:\OETemp 2014-07-23 17:37 - 2011-10-19 17:09 - 00002012 ____H () C:\Users\dik\Documents\Default.rdp 2014-07-23 17:11 - 2014-07-23 17:11 - 00000000 ____D () C:\Users\dik\AppData\Local\{D92CF441-D42F-4434-B2CB-B25BE2788CF4} 2014-07-23 16:24 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\registration 2014-07-23 05:11 - 2014-07-23 05:10 - 00000000 ____D () C:\Users\dik\AppData\Local\{A787BCC0-3512-4A83-9070-E4C0696F532E} 2014-07-22 17:09 - 2014-07-22 17:09 - 00000000 ____D () C:\Users\dik\AppData\Local\{4B435928-CCBC-41D1-96D0-3DCF0E47F379} 2014-07-22 05:08 - 2014-07-22 05:08 - 00000000 ____D () C:\Users\dik\AppData\Local\{86A4709C-2799-49AA-984F-C07ADBE32337} 2014-07-21 14:15 - 2012-01-05 15:51 - 02342912 ___SH () C:\Users\dik\Desktop\Thumbs.db 2014-07-21 07:21 - 2014-07-21 07:21 - 00000000 ____D () C:\Users\dik\AppData\Local\{DF72796E-94F0-43CE-9933-3EF44BE4D471} 2014-07-19 06:06 - 2014-07-19 06:06 - 00000000 ____D () C:\Users\dik\AppData\Local\{750A5D64-AADC-44A8-BDB0-2062D8E2B71D} 2014-07-18 06:39 - 2014-07-18 06:39 - 00000000 ____D () C:\Users\dik\AppData\Local\{D3C33D08-CBC0-4873-A866-A05E042AA958} 2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\dik\AppData\Local\{9A7F0020-F6BD-43B2-900A-076B7576A31C} 2014-07-17 06:16 - 2014-07-17 06:16 - 00000000 ____D () C:\Users\dik\AppData\Local\{EB388BCD-CEED-4783-A9DD-B45D229F6BB1} 2014-07-16 17:31 - 2014-07-16 17:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{1D0EC77F-7BEE-4858-B4C1-E83FA25C5153} 2014-07-16 09:15 - 2014-07-16 09:15 - 00085299 _____ () C:\Users\dik\Desktop\zdjecie.JPGakt1 2014-07-16 05:30 - 2014-07-16 05:29 - 00000000 ____D () C:\Users\dik\AppData\Local\{5E98B047-5AED-462F-947B-37870F2A76FD} 2014-07-15 17:13 - 2014-07-15 17:13 - 00000000 ____D () C:\Users\dik\AppData\Local\{9FC83788-C5AC-49C9-A1FA-17DD2FC1A575} 2014-07-15 05:11 - 2014-07-15 05:11 - 00000000 ____D () C:\Users\dik\AppData\Local\{3CF6B996-BAA9-4EA9-A100-7842597DD926} 2014-07-14 11:15 - 2014-07-14 11:15 - 00000839 _____ () C:\Users\dik\Desktop\POZAŃSKI.txt 2014-07-14 07:17 - 2014-07-14 07:17 - 00000000 ____D () C:\Users\dik\AppData\Local\{43E355BA-CBB2-4E9F-908C-AE4201F9C05F} 2014-07-12 07:24 - 2014-07-12 07:24 - 00000000 ____D () C:\Users\dik\AppData\Local\{C38D9DB5-669C-4600-BD58-95B61F65FE9A} 2014-07-11 10:05 - 2014-07-11 10:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{AB8ABFEE-93C2-42F4-AD13-304876E30AEB} 2014-07-10 06:12 - 2014-07-10 06:12 - 00000000 ____D () C:\Users\dik\AppData\Local\{AAB57FE4-FAEF-4D9D-823E-D8FFA1517B5B} 2014-07-10 05:09 - 2009-07-14 06:45 - 00281320 _____ () C:\windows\system32\FNTCACHE.DAT 2014-07-10 05:06 - 2014-05-06 17:51 - 00000000 ___SD () C:\windows\system32\CompatTel 2014-07-10 05:06 - 2010-11-21 15:04 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 05:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism 2014-07-10 05:06 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism 2014-07-09 18:01 - 2013-08-14 18:39 - 00000000 ____D () C:\windows\system32\MRT 2014-07-09 17:59 - 2011-05-05 14:12 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2014-07-09 17:06 - 2014-07-09 17:06 - 00000000 ____D () C:\Users\dik\AppData\Local\{5EAD162B-E7C4-4C03-B435-628970E79A71} 2014-07-09 16:37 - 2014-07-09 16:37 - 00000000 _____ () C:\Users\dik\Documents\Nowy dokument tekstowy.txt 2014-07-09 15:33 - 2014-07-09 15:33 - 00000161 _____ () C:\Users\dik\Desktop\Katalog FTP -zdj%EAcia%20z%20wyjazdu%20do%20Tr%F3jmiasta- w pandora.polcar.com.pl.url 2014-07-09 10:57 - 2013-09-24 14:42 - 00003868 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 10:57 - 2012-06-19 09:31 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2014-07-09 10:57 - 2011-11-24 07:55 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-09 05:05 - 2014-07-09 05:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{5F626737-9126-4C7F-AB53-C8E48519A36E} 2014-07-08 07:20 - 2014-07-08 07:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{746F4A49-40F5-49D2-B0EE-FD99848FFA10} 2014-07-07 19:20 - 2014-07-07 19:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{C362A5D2-B623-40C4-A821-216BC38D82B3} 2014-07-07 07:38 - 2014-07-07 07:38 - 00000000 ____D () C:\Users\dik\AppData\Roaming\ModelViews 2014-07-07 07:36 - 2014-07-07 07:36 - 00000000 ____D () C:\Users\dik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Optimizer 2014-07-07 07:36 - 2014-07-07 07:36 - 00000000 ____D () C:\Program Files (x86)\PC-Optimizer 2014-07-07 07:19 - 2014-07-07 07:19 - 00000000 ____D () C:\Users\dik\AppData\Local\{137A0AD0-CA21-4B01-AD1B-613A7A77CCFD} 2014-07-05 06:00 - 2014-07-05 06:00 - 00000000 ____D () C:\Users\dik\AppData\Local\{7F9974A9-6F6A-409A-BE64-07767A8272AB} 2014-07-04 20:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache 2014-07-04 17:44 - 2012-04-17 12:38 - 00000600 _____ () C:\Users\dik\PUTTY.RND 2014-07-04 07:58 - 2014-07-04 07:58 - 00000000 ____D () C:\Users\dik\AppData\Local\{7E8C87A7-3CF3-4D49-B1CA-995D7B522D6E} 2014-07-03 06:20 - 2014-07-03 06:20 - 00000000 ____D () C:\Users\dik\AppData\Local\{2FE27832-E074-482D-949D-BB03CBB8EFF1} 2014-07-02 08:19 - 2014-07-02 08:18 - 00000000 ____D () C:\Users\dik\AppData\Local\{EF71C7E2-2226-49E6-9DE3-3D0E850B4E46} 2014-07-01 16:31 - 2014-07-01 16:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{89D870B4-CEAF-4A96-B8EF-DA5406C33605} 2014-07-01 12:52 - 2014-07-01 12:52 - 00095356 _____ () C:\Users\dik\Desktop\zdjecie.JPG8 2014-07-01 04:31 - 2014-07-01 04:31 - 00000000 ____D () C:\Users\dik\AppData\Local\{4BD8E1FF-0402-491E-8232-F36F9FDB42F2} 2014-06-30 17:42 - 2014-06-30 17:42 - 00159219 _____ () C:\Users\dik\Desktop\zdjecie.JPG5 2014-06-30 17:41 - 2014-06-30 17:41 - 00125587 _____ () C:\Users\dik\Desktop\zdjecie.JPG4 2014-06-30 16:56 - 2014-04-29 08:46 - 00060761 _____ () C:\Users\dik\Desktop\wszystko.ods 2014-06-30 07:05 - 2014-06-30 07:05 - 00000000 ____D () C:\Users\dik\AppData\Local\{02BE33B8-0F89-4077-BA9E-83919AA9AB64} 2014-06-30 04:09 - 2014-07-09 05:19 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2014-06-30 04:04 - 2014-07-09 05:19 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll Some content of TEMP: ==================== C:\Users\dik\AppData\Local\Temp\-rqb-csa.dll C:\Users\dik\AppData\Local\Temp\8egklu-f.dll C:\Users\dik\AppData\Local\Temp\BackupSetup.exe C:\Users\dik\AppData\Local\Temp\ChromeInstaller.exe C:\Users\dik\AppData\Local\Temp\eueioev_.dll C:\Users\dik\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\dik\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe C:\Users\dik\AppData\Local\Temp\GoogleToolbarInstaller_en32_signed.exe C:\Users\dik\AppData\Local\Temp\GUninstaller.exe C:\Users\dik\AppData\Local\Temp\hrtlib.dll C:\Users\dik\AppData\Local\Temp\ICReinstall_setup.exe C:\Users\dik\AppData\Local\Temp\ncn6qghn.dll C:\Users\dik\AppData\Local\Temp\Quarantine.exe C:\Users\dik\AppData\Local\Temp\r-s6p2wa.dll C:\Users\dik\AppData\Local\Temp\Sqlite3.dll C:\Users\dik\AppData\Local\Temp\tbBit0.dll C:\Users\dik\AppData\Local\Temp\uninst1.exe C:\Users\dik\AppData\Local\Temp\v26933993.978.exe C:\Users\dik\AppData\Local\Temp\v26935148.704.exe C:\Users\dik\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-04 20:16 ==================== End Of Log ============================