Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-09-2014 Ran by JAREK (administrator) on JAREK-KOMPUTER on 11-09-2014 06:20:54 Running from C:\Users\JAREK\Desktop\Nowy folder Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\ProgramData\DatacardService\HWDeviceService.exe () C:\Program Files\PLAY ONLINE\AssistantServices.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-08-09] (AVAST Software) HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-06-09] (Microsoft Corporation) HKU\S-1-5-21-3503922415-40461195-2409546329-1000\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent HKLM\...\AppCertDlls: [x64] -> c:\program files\settings manager\systemk\x64\sysapcrt.dll ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140822 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120140822 SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = http://www.default-search.net/search?sid=476&aid=132&itype=a&ver=13277&tm=397&src=ds&p={searchTerms} BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95 Tcpip\..\Interfaces\{29C06BD8-8D87-4663-B7FF-41A08A7A9473}: [NameServer] 212.2.96.53 212.2.96.54 Tcpip\..\Interfaces\{BFCA06E5-07D7-4D7B-A84E-7A84233198DF}: [NameServer] 212.2.96.51 212.2.96.52 Tcpip\..\Interfaces\{D2067D21-4054-4484-9EE3-3E650FC023EF}: [NameServer] 212.2.96.51 212.2.96.52 Tcpip\..\Interfaces\{E308190F-979D-4B71-B8F4-BDFC4A1F4A77}: [NameServer] 212.2.96.53 212.2.96.54 FireFox: ======== FF ProfilePath: C:\Users\JAREK\AppData\Roaming\Mozilla\Firefox\Profiles\rze5hxcr.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\webssearches.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\default-search.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\webssearches.xml FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-01] Chrome: ======= CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-01] (AVAST Software) S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [276248 2012-03-26] (Intel Corporation) R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] () S3 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2013-05-01] () R2 UI Assistant Service; C:\Program Files\PLAY ONLINE\AssistantServices.exe [260976 2011-05-31] () ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-01] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-05-01] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-01] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [68312 2014-05-15] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-01] () R3 intelkmd; C:\Windows\System32\DRIVERS\igdpmd32.sys [13212672 2012-03-26] (Intel Corporation) S3 massfilter; C:\Windows\System32\drivers\massfilter.sys [9216 2011-03-26] (MBB Incorporated) R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [55104 2012-07-17] (Intel Corporation) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-11 06:19 - 2014-09-11 06:19 - 00244272 _____ () C:\Users\JAREK\Downloads\Firefox Setup Stub 32.0.exe 2014-09-11 06:19 - 2014-09-11 06:19 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-11 06:19 - 2014-09-11 06:19 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-11 06:19 - 2014-09-11 06:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-10 21:55 - 2014-09-10 21:55 - 00835295 _____ () C:\Users\JAREK\Downloads\dmde-free-2.10.0.560-win32-gui.zip 2014-09-10 21:17 - 2014-09-11 06:20 - 00000000 ____D () C:\FRST 2014-09-10 21:11 - 2014-09-10 21:11 - 00370943 _____ () C:\Users\JAREK\Downloads\gmer.zip 2014-09-10 21:09 - 2014-09-11 06:20 - 00000000 ____D () C:\Users\JAREK\Desktop\Nowy folder 2014-08-24 16:58 - 2014-08-24 17:03 - 39124432 _____ () C:\Users\JAREK\Downloads\iplasetup.exe 2014-08-23 16:33 - 2014-08-23 16:33 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-22 11:42 - 2014-08-22 11:42 - 00000000 ____D () C:\Users\JAREK\Documents\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:44 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Opera Software 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Opera Software 2014-08-22 10:42 - 2014-08-22 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder 2014-08-22 10:42 - 2006-03-23 12:56 - 00113486 _____ () C:\Windows\system32\NCTWMAProfiles.prx 2014-08-22 10:42 - 2005-05-18 11:52 - 01212416 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioInformation2.dll 2014-08-22 10:42 - 2005-05-17 12:37 - 01986560 _____ (NCT Company Ltd.) C:\Windows\system32\NCTAudioFile2.dll 2014-08-22 10:42 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioRecord2.dll 2014-08-22 10:42 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioPlayer2.dll 2014-08-22 10:42 - 2005-04-15 12:08 - 00880640 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioEditor2.dll 2014-08-22 10:42 - 2005-04-04 17:21 - 00602112 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioTransform2.dll 2014-08-22 10:42 - 2005-03-28 15:54 - 00479232 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTAudioVisualization2.dll 2014-08-22 10:42 - 2005-03-28 15:52 - 00417792 _____ (Online Media Technologies Ltd.) C:\Windows\system32\NCTTextToAudio2.dll 2014-08-22 10:42 - 2005-02-24 11:51 - 00348160 _____ (NCT Company Ltd.) C:\Windows\system32\NCTWMAFile2.dll 2014-08-22 10:42 - 2004-11-04 13:31 - 00835584 _____ (NCT) C:\Windows\system32\NCTAudioCDGrabber2.dll 2014-08-22 10:42 - 2002-01-05 16:37 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll 2014-08-22 10:37 - 2014-09-10 21:01 - 00000000 ____D () C:\Program Files\Opera 2014-08-22 10:37 - 2014-08-22 10:37 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-08-22 10:36 - 2014-08-22 10:36 - 11379008 _____ (Copyright© 2005-2014 FreeSoundRecorder Technologies, Inc. ) C:\Users\JAREK\Downloads\FreeSoundRecorder.exe 2014-08-21 20:58 - 2014-08-21 20:58 - 00000532 _____ () C:\Users\JAREK\Desktop\KOMPUTER i MONITOR.txt 2014-08-21 14:04 - 2014-08-22 14:54 - 00000000 ___RD () C:\Users\JAREK\Desktop\TR 2014-08-21 14:02 - 2014-08-21 14:02 - 00000926 _____ () C:\Users\Public\Desktop\The Sims 2 Rozrywka rodzinna - Akcesoria.lnk 2014-08-20 16:58 - 2014-08-22 14:50 - 00000000 ____D () C:\Users\JAREK\Desktop\gry na płyte 2014-08-20 10:23 - 2014-08-20 10:23 - 00000793 _____ () C:\Users\Public\Desktop\The Sims™ 3 Kariera.lnk 2014-08-19 23:44 - 2014-08-21 15:38 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 4 2014-08-19 19:47 - 2014-08-19 23:54 - 2021432831 _____ () C:\Users\JAREK\Downloads\SimCity.4.PL.2003.rar 2014-08-19 09:28 - 2014-08-19 09:28 - 00891551 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_154.rar 2014-08-19 09:26 - 2014-08-19 09:27 - 01114388 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_163.rar 2014-08-19 09:25 - 2014-08-19 09:26 - 01160853 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_175.rar 2014-08-19 09:25 - 2014-08-19 09:25 - 00661974 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_135.rar 2014-08-19 09:24 - 2014-08-19 09:25 - 00892016 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_142.rar 2014-08-19 09:24 - 2014-08-19 09:24 - 01042046 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_149.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00117050 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_31.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00007908 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_32.rar 2014-08-19 09:21 - 2014-08-19 09:22 - 01194293 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_217.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00893692 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_184.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00859103 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_226.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00794307 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_185.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00525422 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_227.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00971262 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_221.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00804505 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_194.rar 2014-08-19 09:19 - 2014-08-19 09:19 - 01365522 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_225.rar 2014-08-17 18:17 - 2014-08-17 18:17 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 2014-08-17 18:15 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2014-08-17 18:15 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2014-08-17 18:15 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2014-08-17 18:15 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2014-08-17 18:15 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2014-08-17 18:15 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2014-08-17 18:15 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2014-08-17 18:15 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2014-08-17 18:15 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2014-08-17 18:15 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2014-08-17 18:15 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2014-08-17 18:15 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2014-08-17 18:15 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2014-08-17 18:15 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2014-08-17 18:15 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2014-08-17 18:15 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2014-08-17 18:15 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2014-08-17 18:15 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2014-08-17 18:15 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2014-08-17 18:15 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2014-08-17 18:15 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2014-08-17 18:15 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2014-08-17 18:15 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2014-08-14 22:38 - 2014-08-14 22:38 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 21:50 - 2014-08-14 21:50 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Origin 2014-08-14 21:40 - 2014-08-14 21:40 - 00000615 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-08-14 15:12 - 2014-08-14 15:12 - 00000867 _____ () C:\Users\Public\Desktop\The Sims™ 3 Zostań gwiazdą.lnk 2014-08-14 14:57 - 2014-08-14 14:57 - 00000807 _____ () C:\Users\Public\Desktop\The Sims™ 3 Pokolenia.lnk 2014-08-14 14:26 - 2014-08-14 14:26 - 00000711 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-11 06:20 - 2014-09-10 21:17 - 00000000 ____D () C:\FRST 2014-09-11 06:20 - 2014-09-10 21:09 - 00000000 ____D () C:\Users\JAREK\Desktop\Nowy folder 2014-09-11 06:20 - 2013-05-01 10:10 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Mozilla 2014-09-11 06:19 - 2014-09-11 06:19 - 00244272 _____ () C:\Users\JAREK\Downloads\Firefox Setup Stub 32.0.exe 2014-09-11 06:19 - 2014-09-11 06:19 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-09-11 06:19 - 2014-09-11 06:19 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-09-11 06:19 - 2014-09-11 06:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-09-11 06:19 - 2013-05-01 10:15 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-09-11 06:15 - 2014-05-01 09:37 - 00000000 ____D () C:\Program Files\Bench 2014-09-11 06:15 - 2013-05-01 10:32 - 00086870 _____ () C:\Windows\PFRO.log 2014-09-11 06:15 - 2013-05-01 08:11 - 01356085 _____ () C:\Windows\WindowsUpdate.log 2014-09-11 06:15 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-11 06:15 - 2009-07-14 06:39 - 00067657 _____ () C:\Windows\setupact.log 2014-09-11 06:12 - 2009-07-14 06:34 - 00017168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-11 06:12 - 2009-07-14 06:34 - 00017168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-11 06:12 - 2009-07-14 04:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-09-11 06:03 - 2013-10-27 17:50 - 00000000 ____D () C:\Windows\pss 2014-09-10 22:09 - 2013-06-09 20:19 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-10 21:55 - 2014-09-10 21:55 - 00835295 _____ () C:\Users\JAREK\Downloads\dmde-free-2.10.0.560-win32-gui.zip 2014-09-10 21:45 - 2013-05-01 08:33 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-09-10 21:45 - 2013-05-01 08:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-09-10 21:11 - 2014-09-10 21:11 - 00370943 _____ () C:\Users\JAREK\Downloads\gmer.zip 2014-09-10 21:01 - 2014-08-22 10:37 - 00000000 ____D () C:\Program Files\Opera 2014-09-10 20:58 - 2013-05-01 08:23 - 01523412 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-10 20:58 - 2009-07-14 10:07 - 00687828 _____ () C:\Windows\system32\perfh015.dat 2014-09-10 20:58 - 2009-07-14 10:07 - 00131382 _____ () C:\Windows\system32\perfc015.dat 2014-08-24 18:51 - 2014-04-05 18:55 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-24 17:03 - 2014-08-24 16:58 - 39124432 _____ () C:\Users\JAREK\Downloads\iplasetup.exe 2014-08-24 16:59 - 2014-04-05 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-24 11:20 - 2014-07-05 10:49 - 00000000 ____D () C:\ProgramData\Origin 2014-08-23 18:19 - 2014-06-29 11:44 - 00000000 ___RD () C:\Users\JAREK\Desktop\kasia 2014-08-23 16:34 - 2014-03-15 19:09 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Skype 2014-08-23 16:33 - 2014-08-23 16:33 - 00000000 ____D () C:\Program Files\Common Files\Skype 2014-08-23 16:33 - 2014-03-15 19:09 - 00000000 ____D () C:\ProgramData\Skype 2014-08-22 14:54 - 2014-08-21 14:04 - 00000000 ___RD () C:\Users\JAREK\Desktop\TR 2014-08-22 14:50 - 2014-08-20 16:58 - 00000000 ____D () C:\Users\JAREK\Desktop\gry na płyte 2014-08-22 12:05 - 2014-03-14 16:24 - 00000000 ____D () C:\Users\JAREK\Desktop\Originals 2014-08-22 11:42 - 2014-08-22 11:42 - 00000000 ____D () C:\Users\JAREK\Documents\Free Sound Recorder 2014-08-22 10:44 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Free Sound Recorder 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Opera Software 2014-08-22 10:43 - 2014-08-22 10:43 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Opera Software 2014-08-22 10:42 - 2014-08-22 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder 2014-08-22 10:37 - 2014-08-22 10:37 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-08-22 10:36 - 2014-08-22 10:36 - 11379008 _____ (Copyright© 2005-2014 FreeSoundRecorder Technologies, Inc. ) C:\Users\JAREK\Downloads\FreeSoundRecorder.exe 2014-08-21 20:58 - 2014-08-21 20:58 - 00000532 _____ () C:\Users\JAREK\Desktop\KOMPUTER i MONITOR.txt 2014-08-21 15:38 - 2014-08-19 23:44 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 4 2014-08-21 14:02 - 2014-08-21 14:02 - 00000926 _____ () C:\Users\Public\Desktop\The Sims 2 Rozrywka rodzinna - Akcesoria.lnk 2014-08-21 14:02 - 2013-05-01 12:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES 2014-08-20 16:43 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-08-20 10:23 - 2014-08-20 10:23 - 00000793 _____ () C:\Users\Public\Desktop\The Sims™ 3 Kariera.lnk 2014-08-20 10:10 - 2013-08-18 17:49 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2014-08-19 23:54 - 2014-08-19 19:47 - 2021432831 _____ () C:\Users\JAREK\Downloads\SimCity.4.PL.2003.rar 2014-08-19 09:28 - 2014-08-19 09:28 - 00891551 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_154.rar 2014-08-19 09:27 - 2014-08-19 09:26 - 01114388 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_163.rar 2014-08-19 09:26 - 2014-08-19 09:25 - 01160853 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_175.rar 2014-08-19 09:25 - 2014-08-19 09:25 - 00661974 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_135.rar 2014-08-19 09:25 - 2014-08-19 09:24 - 00892016 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_142.rar 2014-08-19 09:24 - 2014-08-19 09:24 - 01042046 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_149.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00117050 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_31.rar 2014-08-19 09:23 - 2014-08-19 09:23 - 00007908 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_32.rar 2014-08-19 09:22 - 2014-08-19 09:21 - 01194293 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_217.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00893692 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_184.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00859103 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_226.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00794307 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_185.rar 2014-08-19 09:21 - 2014-08-19 09:21 - 00525422 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_227.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00971262 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_221.rar 2014-08-19 09:20 - 2014-08-19 09:20 - 00804505 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_194.rar 2014-08-19 09:19 - 2014-08-19 09:19 - 01365522 _____ () C:\Users\JAREK\Downloads\LianaSims3_Fashion_225.rar 2014-08-17 18:17 - 2014-08-17 18:17 - 00000000 ____D () C:\Users\JAREK\Documents\SimCity 2014-08-15 10:02 - 2014-05-01 20:07 - 00000000 ____D () C:\Users\JAREK\Documents\Electronic Arts 2014-08-15 10:02 - 2014-02-06 13:31 - 00000000 ____D () C:\ProgramData\Electronic Arts 2014-08-15 09:54 - 2014-07-05 10:51 - 00000000 ____D () C:\Users\JAREK\AppData\Roaming\Origin 2014-08-14 22:38 - 2014-08-14 22:38 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-14 21:50 - 2014-08-14 21:50 - 00000000 ____D () C:\Users\JAREK\AppData\Local\Origin 2014-08-14 21:40 - 2014-08-14 21:40 - 00000615 _____ () C:\Users\Public\Desktop\Origin.lnk 2014-08-14 15:12 - 2014-08-14 15:12 - 00000867 _____ () C:\Users\Public\Desktop\The Sims™ 3 Zostań gwiazdą.lnk 2014-08-14 14:57 - 2014-08-14 14:57 - 00000807 _____ () C:\Users\Public\Desktop\The Sims™ 3 Pokolenia.lnk 2014-08-14 14:26 - 2014-08-14 14:26 - 00000711 _____ () C:\Users\Public\Desktop\The Sims™ 3.lnk Some content of TEMP: ==================== C:\Users\JAREK\AppData\Local\Temp\14441-CTSCameraViewer_1.0.3_sciagnij.exe C:\Users\JAREK\AppData\Local\Temp\AutoRun.exe C:\Users\JAREK\AppData\Local\Temp\AutoRunGUI.dll C:\Users\JAREK\AppData\Local\Temp\avguidx.dll C:\Users\JAREK\AppData\Local\Temp\CommonInstaller.exe C:\Users\JAREK\AppData\Local\Temp\CTSCameraViewer_1.0.3.exe C:\Users\JAREK\AppData\Local\Temp\drm_dialogs.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7320013.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7330014.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7370012.dll C:\Users\JAREK\AppData\Local\Temp\drm_dyndata_7380014.dll C:\Users\JAREK\AppData\Local\Temp\EAD3C93.exe C:\Users\JAREK\AppData\Local\Temp\EADADCB.exe C:\Users\JAREK\AppData\Local\Temp\First15.exe C:\Users\JAREK\AppData\Local\Temp\iGearedHelper.dll C:\Users\JAREK\AppData\Local\Temp\MachineIdCreator.exe C:\Users\JAREK\AppData\Local\Temp\oi_{9DBD2486-1043-4EC0-B06B-5A84337A6742}.exe C:\Users\JAREK\AppData\Local\Temp\SettingsManagerSoftonicSetup.exe C:\Users\JAREK\AppData\Local\Temp\setup.exe C:\Users\JAREK\AppData\Local\Temp\setup[1].exe C:\Users\JAREK\AppData\Local\Temp\SimBundD.exe C:\Users\JAREK\AppData\Local\Temp\SimBundD[1].exe C:\Users\JAREK\AppData\Local\Temp\SkypeSetup.exe C:\Users\JAREK\AppData\Local\Temp\ToolbarInstaller.exe C:\Users\JAREK\AppData\Local\Temp\UNINSTALL.EXE C:\Users\JAREK\AppData\Local\Temp\UninstallEADM.dll C:\Users\JAREK\AppData\Local\Temp\VP6Install.exe C:\Users\JAREK\AppData\Local\Temp\VP6VFW.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-10 21:48 ==================== End Of Log ============================