Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-09-2014 01 Ran by JOB (administrator) on KOMPUTER-PC on 22-09-2014 21:03:44 Running from C:\Users\JOB\Desktop Platform: Microsoft® Windows Vista™ Home Basic Service Pack 2 (X86) OS Language: Polski (Polska) Internet Explorer Version 9 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe (Firebird Project) C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.SQLSERVER\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (ActMask Co.,Ltd - http://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe (Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Firebird Project) C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) C:\Windows\System32\conime.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [PrintDisp] => C:\Windows\system32\PrintDisp.exe [975360 2010-07-23] (ActMask Co.,Ltd - http://www.all2pdf.com) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5075104 2014-02-24] (ESET) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKU\S-1-5-21-3982480820-2891371465-2368233553-1486\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [1818472 2012-05-08] (Hewlett-Packard Co.) HKU\S-1-5-21-3982480820-2891371465-2368233553-1486\...\Run: [KSS] => C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO) Startup: C:\Users\JOB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab Tcpip\Parameters: [DhcpNameServer] 212.122.200.3 8.8.8.8 FireFox: ======== FF ProfilePath: C:\Users\JOB\AppData\Roaming\Mozilla\Firefox\Profiles\82yio4oe.default-1395126715228 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-03-07] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-09-13] Chrome: ======= CHR CustomProfile: C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (TV) - C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh [2014-08-15] CHR Extension: (Google Calendar) - C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-08-05] CHR Extension: (AdBlock) - C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-10] CHR Extension: (Weather Worldwide) - C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default\Extensions\kppfblhheocdidjdioajnkggcbjelojk [2014-08-05] CHR Extension: (Google Wallet) - C:\Users\JOB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-13] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\JOB\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1343408 2014-02-24] (ESET) R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2012-05-18] (Firebird Project) [File not signed] R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2785280 2012-05-18] (Firebird Project) [File not signed] R2 KSS; C:\Program Files\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202080 2014-06-15] (Kaspersky Lab ZAO) S2 MSSQL$INSOFT2008; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSOFT2008\MSSQL\Binn\sqlservr.exe [43128496 2014-07-10] (Microsoft Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43128496 2014-07-10] (Microsoft Corporation) R2 MSSQL$SQLSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLSERVER\MSSQL\Binn\sqlservr.exe [161440 2014-07-23] (Microsoft Corporation) R2 MSSQLSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [161440 2014-07-23] (Microsoft Corporation) R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [65536 2009-10-28] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [File not signed] S4 SQLAgent$INSOFT2008; C:\Program Files\Microsoft SQL Server\MSSQL10_50.INSOFT2008\MSSQL\Binn\SQLAGENT.EXE [381104 2014-07-10] (Microsoft Corporation) S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [381104 2014-07-10] (Microsoft Corporation) S4 SQLAgent$SQLSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.SQLSERVER\MSSQL\Binn\SQLAGENT.EXE [448680 2014-07-23] (Microsoft Corporation) S4 SQLSERVERAGENT; c:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [448680 2014-07-23] (Microsoft Corporation) S2 eins2750; C:\Windows\system32\rundll32.exe C:\Windows\eins2750.dll,RDServiceStart eins2750 "C:\Users\JOB\AppData\Local\Temp\inx1C5.tmp" ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET) R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET) R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET) R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET) S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [65896 2013-07-12] (FTDI Ltd.) R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [46592 2007-04-04] (Windows (R) Codename Longhorn DDK provider) S4 JRAID; C:\Windows\system32\drivers\jraid.sys [48256 2007-06-13] (JMicron Technology Corp.) S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [250160 2014-07-10] (Microsoft Corporation) S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [270824 2012-10-20] (Microsoft Corporation) S4 viamraid; C:\Windows\system32\drivers\viamraid.sys [102912 2006-11-08] (VIA Technologies inc,.ltd) S3 WIMMount; C:\Program Files\Windows Kits\8.0\Assessment and Deployment Kit\Deployment Tools\x86\DISM\wimmount.sys [34248 2012-07-25] (Microsoft Corporation) U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation) S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 esihdrv; \??\C:\Users\KOMPUTER\AppData\Local\Temp\esihdrv.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-22 21:03 - 2014-09-22 21:04 - 00012266 _____ () C:\Users\JOB\Desktop\FRST.txt 2014-09-22 21:03 - 2014-09-22 21:03 - 00000000 ____D () C:\FRST 2014-09-22 21:02 - 2014-09-22 21:03 - 00002707 _____ () C:\Users\JOB\Desktop\FSS.txt 2014-09-22 21:01 - 2014-09-22 21:02 - 00368705 _____ () C:\Users\JOB\Desktop\gm.zip 2014-09-22 21:01 - 2014-09-22 21:01 - 01097728 _____ (Farbar) C:\Users\JOB\Desktop\FRST.exe 2014-09-22 21:00 - 2014-09-22 21:00 - 00415232 _____ (Farbar) C:\Users\JOB\Desktop\FSS.exe 2014-09-22 15:19 - 2014-09-22 15:19 - 00000920 _____ () C:\Users\JOB\Desktop\Kaspersky Security Scan.lnk 2014-09-22 15:19 - 2014-09-22 15:19 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Program Files\Kaspersky Lab 2014-09-22 15:00 - 2014-09-22 15:00 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Desktop\kss12.0.1.340_pl (1).exe 2014-09-22 14:44 - 2014-09-22 14:44 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Desktop\kss12.0.1.340_pl.exe 2014-09-21 23:36 - 2014-09-21 23:36 - 00918440 _____ (Oracle Corporation) C:\Users\JOB\Desktop\chromeinstall-7u67.exe 2014-09-21 20:23 - 2014-09-22 21:03 - 00000000 ____D () C:\Users\JOB\Desktop\logi 2014-09-20 16:02 - 2014-09-20 16:02 - 253488494 _____ () C:\Windows\MEMORY.DMP 2014-09-20 16:02 - 2014-09-20 16:02 - 00143544 _____ () C:\Windows\Minidump\Mini092014-01.dmp 2014-09-20 14:39 - 2014-09-20 14:39 - 00602112 _____ (OldTimer Tools) C:\Users\JOB\Desktop\OTL.exe 2014-09-20 14:23 - 2014-09-20 14:23 - 02347384 _____ (ESET) C:\Users\JOB\Desktop\esetsmartinstaller_plk.exe 2014-09-20 14:00 - 2014-09-20 14:13 - 498580680 _____ (Microsoft Corporation) C:\Users\JOB\Desktop\Windows6.0-KB948465-X86.exe 2014-09-20 13:56 - 2014-09-20 13:56 - 00114712 _____ () C:\Users\JOB\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-20 12:42 - 2014-09-20 13:23 - 00433192 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-20 12:42 - 2014-09-20 13:22 - 00001348 _____ () C:\Windows\PFRO.log 2014-09-20 11:45 - 2014-09-20 11:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\JOB\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-18 08:28 - 2014-09-18 08:29 - 00000000 ____D () C:\bab3cddc3688b50ab1dfd5 2014-09-18 08:19 - 2014-09-18 08:19 - 00000000 ____D () C:\fc36e2ef84d1dd4113615e99ec 2014-09-17 17:49 - 2014-09-17 20:23 - 00000000 ____D () C:\Program Files\ophcrack 2014-09-17 17:39 - 2014-09-17 17:39 - 00000000 ____D () C:\Windows\Hewlett-Packard 2014-09-17 17:37 - 2014-09-17 17:39 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\HpUpdate 2014-09-17 12:14 - 2014-09-17 12:14 - 00000000 ____D () C:\feb0a93f8d2e41385d1471dd55beda 2014-09-16 22:06 - 2014-09-16 22:06 - 00000000 ____D () C:\17033dfc137a0927d5504bb85acc76ba 2014-09-15 23:53 - 2014-09-22 15:24 - 00002551 _____ () C:\Users\Public\Desktop\S4H Chef.lnk 2014-09-15 23:53 - 2014-09-22 15:24 - 00002549 _____ () C:\Users\Public\Desktop\S4H POS.lnk 2014-09-15 23:53 - 2014-09-22 15:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\S4H 2014-09-15 23:53 - 2014-09-22 15:24 - 00000000 ____D () C:\Program Files\S4H 2014-09-15 23:53 - 2014-09-18 23:05 - 00000000 ____D () C:\ProgramData\S4H 2014-09-15 21:53 - 2014-09-15 23:24 - 00000000 ____D () C:\Users\JOB\Desktop\S4h 2014-09-15 21:41 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKZIP.PIF 2014-09-15 21:41 - 2014-04-30 08:51 - 00000545 _____ () C:\Windows\PKUNZIP.PIF 2014-09-15 15:18 - 2014-09-17 19:02 - 00000000 ____D () C:\Users\JOB\Desktop\Nowy folder 2014-09-14 23:29 - 2014-09-14 23:38 - 302694400 _____ () C:\Users\JOB\Desktop\kav_rescue_10.iso 2014-09-14 14:59 - 2014-09-14 15:02 - 00000000 ____D () C:\AdwCleaner 2014-09-13 23:23 - 2014-09-18 22:16 - 00000000 ____D () C:\Users\JOB\Desktop\CV 2014-09-13 13:49 - 2014-09-21 23:05 - 00000000 ____D () C:\Program Files\ESET 2014-09-13 13:49 - 2014-09-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2014-09-13 13:49 - 2014-09-13 13:49 - 00000000 ____D () C:\ProgramData\ESET 2014-09-13 13:45 - 2014-09-13 13:45 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (3).exe 2014-09-13 12:55 - 2014-09-13 13:02 - 00000000 ____D () C:\Users\KOMPUTER\AppData\Roaming\Opera Software 2014-09-13 12:55 - 2014-09-13 13:02 - 00000000 ____D () C:\Users\KOMPUTER\AppData\Local\Opera Software 2014-09-13 12:51 - 2014-09-13 13:02 - 00000000 ____D () C:\Program Files\Opera 2014-09-13 12:47 - 2014-09-13 13:00 - 00000000 ____D () C:\Program Files\ClearThink 2014-09-13 12:38 - 2014-09-13 12:38 - 00000000 ____D () C:\Users\KOMPUTER\{4f6b483e-b4e6-4cc4-b2e0-ab64da64e6c6} 2014-09-13 12:31 - 2014-09-13 12:31 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (2).exe 2014-09-13 12:18 - 2014-09-19 15:24 - 00000000 ____D () C:\Users\KOMPUTER\Desktop\aaaaaaaaa 2014-09-13 12:06 - 2014-09-13 12:16 - 70938624 _____ () C:\Users\KOMPUTER\Downloads\ess_nt32_plk.msi 2014-09-13 11:48 - 2014-09-13 11:48 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (1).exe 2014-09-13 11:43 - 2014-09-13 11:43 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_.exe 2014-09-13 10:42 - 2014-09-13 10:42 - 00000000 ____D () C:\Users\JOB\{757ff9dd-0c15-43fb-a53c-f5f6283588af} 2014-09-13 09:45 - 2014-09-13 14:36 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-13 09:45 - 2014-09-13 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-09-13 01:48 - 2014-09-13 01:49 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Downloads\kss12.0.1.340_pl.exe 2014-09-13 00:59 - 2014-09-13 00:59 - 00000000 ____D () C:\Users\JOB\{f31d0737-279b-43f5-bd33-0eac26f9720a} 2014-09-13 00:11 - 2014-09-20 12:32 - 00000000 ____D () C:\Users\JOB\AppData\Local\ICSharpCode.net 2014-09-12 23:49 - 2014-09-12 23:49 - 00000000 ____D () C:\Users\JOB\{59560c17-aa94-4549-9869-78276cc19e18} 2014-09-11 23:23 - 2014-09-11 23:23 - 00000000 ____D () C:\found.000 2014-09-11 22:45 - 2014-09-11 22:45 - 00000000 ____D () C:\Users\Default\{f0547a9a-8f01-4889-81fa-9db6d85dd4f9} 2014-09-11 22:36 - 2014-09-11 22:36 - 00050227 _____ () C:\Windows\system32\epfwdata.bin 2014-09-11 17:04 - 2014-09-11 17:04 - 00000000 ____D () C:\Users\JOB\{c0da7030-76b4-4655-9fd5-e44cb58c2e21} 2014-09-11 17:03 - 2014-09-22 16:13 - 01322478 _____ () C:\Windows\WindowsUpdate.log 2014-09-11 12:05 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-11 12:05 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-11 12:05 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-11 12:05 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-11 12:05 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-11 12:05 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-11 12:05 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-11 12:05 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-11 12:05 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-09-11 12:05 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-11 12:05 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-11 12:05 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-11 12:05 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-09-11 12:05 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-09-11 10:32 - 2014-09-11 10:33 - 00000000 ____D () C:\Windows\TempA0672160-2EF2-FCC2-49F0-45F6F9D90862-Signatures 2014-09-11 10:32 - 2014-09-11 10:32 - 00000000 ____D () C:\Windows\Temp814B9DAF-CD20-31B5-69E5-DFD406C05D61-Signatures 2014-09-09 18:19 - 2014-09-09 18:19 - 00114712 _____ () C:\Users\KOMPUTER\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-01 21:11 - 2014-09-01 21:11 - 00000551 _____ () C:\Users\KOMPUTER\Desktop\klucz.txt 2014-09-01 20:56 - 2014-09-09 11:58 - 00000000 ____D () C:\Users\KOMPUTER\Downloads\office 2010 profesional 2014-08-28 21:57 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-28 21:57 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-26 16:20 - 2014-08-26 16:20 - 00000000 ____D () C:\Users\JOB\AppData\Local\Iceni 2014-08-26 16:20 - 2010-01-15 06:47 - 00897024 _____ (ActMask http://www.all2pdf.com) C:\Windows\system32\SaveTo.dll 2014-08-26 16:19 - 2010-09-12 05:35 - 01171456 _____ (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrtClient.exe 2014-08-26 16:19 - 2010-07-23 11:34 - 00975360 _____ (ActMask Co.,Ltd - http://www.all2pdf.com) C:\Windows\system32\PrintDisp.exe 2014-08-26 16:19 - 2010-07-15 10:15 - 00375296 _____ (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\SetPrinter.exe 2014-08-26 16:19 - 2010-06-09 10:52 - 00827904 _____ (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\SetupDrv.exe 2014-08-26 16:19 - 2010-01-20 03:40 - 02535424 _____ (DynaForms GmbH) C:\Windows\system32\CPDF.dll 2014-08-26 16:19 - 2009-10-28 19:59 - 00065536 _____ (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe 2014-08-26 16:19 - 2009-10-01 05:31 - 00740864 _____ (ActMask - http://www.all2pdf.com) C:\Windows\system32\PrtTools.exe 2014-08-26 16:19 - 2009-02-02 22:43 - 00691200 _____ () C:\Windows\system32\PrintLog.exe 2014-08-26 16:19 - 2008-01-18 23:36 - 01391616 _____ () C:\Windows\system32\ActPDF.dll 2014-08-26 16:19 - 2007-09-10 10:32 - 00524288 _____ () C:\Windows\system32\PrtPass.exe 2014-08-26 16:19 - 2001-09-05 19:00 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll 2014-08-26 16:18 - 2014-08-26 17:14 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\Aspell ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-22 21:04 - 2014-09-22 21:03 - 00012266 _____ () C:\Users\JOB\Desktop\FRST.txt 2014-09-22 21:03 - 2014-09-22 21:03 - 00000000 ____D () C:\FRST 2014-09-22 21:03 - 2014-09-22 21:02 - 00002707 _____ () C:\Users\JOB\Desktop\FSS.txt 2014-09-22 21:03 - 2014-09-21 20:23 - 00000000 ____D () C:\Users\JOB\Desktop\logi 2014-09-22 21:02 - 2014-09-22 21:01 - 00368705 _____ () C:\Users\JOB\Desktop\gm.zip 2014-09-22 21:01 - 2014-09-22 21:01 - 01097728 _____ (Farbar) C:\Users\JOB\Desktop\FRST.exe 2014-09-22 21:00 - 2014-09-22 21:00 - 00415232 _____ (Farbar) C:\Users\JOB\Desktop\FSS.exe 2014-09-22 20:55 - 2006-11-02 14:45 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-22 20:55 - 2006-11-02 14:45 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-22 20:54 - 2006-11-02 14:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-22 16:13 - 2014-09-11 17:03 - 01322478 _____ () C:\Windows\WindowsUpdate.log 2014-09-22 15:25 - 2006-11-02 14:58 - 00032548 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-22 15:24 - 2014-09-15 23:53 - 00002551 _____ () C:\Users\Public\Desktop\S4H Chef.lnk 2014-09-22 15:24 - 2014-09-15 23:53 - 00002549 _____ () C:\Users\Public\Desktop\S4H POS.lnk 2014-09-22 15:24 - 2014-09-15 23:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\S4H 2014-09-22 15:24 - 2014-09-15 23:53 - 00000000 ____D () C:\Program Files\S4H 2014-09-22 15:20 - 2014-05-20 06:05 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-22 15:19 - 2014-09-22 15:19 - 00000920 _____ () C:\Users\JOB\Desktop\Kaspersky Security Scan.lnk 2014-09-22 15:19 - 2014-09-22 15:19 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-09-22 15:02 - 2014-09-22 15:02 - 00000000 ____D () C:\Program Files\Kaspersky Lab 2014-09-22 15:02 - 2007-10-09 09:52 - 01021208 _____ () C:\Windows\system32\perfh015.dat 2014-09-22 15:02 - 2007-10-09 09:52 - 00271152 _____ () C:\Windows\system32\perfc015.dat 2014-09-22 15:02 - 2006-11-02 12:33 - 02485094 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-22 15:00 - 2014-09-22 15:00 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Desktop\kss12.0.1.340_pl (1).exe 2014-09-22 14:44 - 2014-09-22 14:44 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Desktop\kss12.0.1.340_pl.exe 2014-09-22 14:20 - 2014-07-26 10:13 - 00002543 _____ () C:\Users\JOB\Desktop\Microsoft OneNote 2010.lnk 2014-09-21 23:36 - 2014-09-21 23:36 - 00918440 _____ (Oracle Corporation) C:\Users\JOB\Desktop\chromeinstall-7u67.exe 2014-09-21 23:05 - 2014-09-13 13:49 - 00000000 ____D () C:\Program Files\ESET 2014-09-20 16:02 - 2014-09-20 16:02 - 253488494 _____ () C:\Windows\MEMORY.DMP 2014-09-20 16:02 - 2014-09-20 16:02 - 00143544 _____ () C:\Windows\Minidump\Mini092014-01.dmp 2014-09-20 16:02 - 2012-03-06 20:48 - 00000000 ____D () C:\Windows\Minidump 2014-09-20 14:39 - 2014-09-20 14:39 - 00602112 _____ (OldTimer Tools) C:\Users\JOB\Desktop\OTL.exe 2014-09-20 14:23 - 2014-09-20 14:23 - 02347384 _____ (ESET) C:\Users\JOB\Desktop\esetsmartinstaller_plk.exe 2014-09-20 14:13 - 2014-09-20 14:00 - 498580680 _____ (Microsoft Corporation) C:\Users\JOB\Desktop\Windows6.0-KB948465-X86.exe 2014-09-20 13:56 - 2014-09-20 13:56 - 00114712 _____ () C:\Users\JOB\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-20 13:23 - 2014-09-20 12:42 - 00433192 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-09-20 13:22 - 2014-09-20 12:42 - 00001348 _____ () C:\Windows\PFRO.log 2014-09-20 12:33 - 2014-07-11 21:55 - 00000000 ____D () C:\Windows\SHELLNEW 2014-09-20 12:32 - 2014-09-13 00:11 - 00000000 ____D () C:\Users\JOB\AppData\Local\ICSharpCode.net 2014-09-20 12:30 - 2014-06-10 14:31 - 00000000 ____D () C:\Users\KOMPUTER\Desktop\szczepionka 2014-09-20 11:51 - 2014-03-19 09:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-20 11:46 - 2014-09-20 11:45 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\JOB\Desktop\mbam-setup-2.0.2.1012.exe 2014-09-19 19:27 - 2013-01-08 01:21 - 00002425 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-09-19 17:44 - 2014-07-25 09:46 - 00000000 ___RD () C:\Users\JOB\Desktop\TopCard 2014-09-19 15:26 - 2014-01-28 10:25 - 00000000 ____D () C:\Users\Public\Documents\11111 2014-09-19 15:26 - 2012-03-25 20:32 - 00000000 ____D () C:\Users\KOMPUTER\Downloads\Pobieranie 2014-09-19 15:24 - 2014-09-13 12:18 - 00000000 ____D () C:\Users\KOMPUTER\Desktop\aaaaaaaaa 2014-09-18 23:05 - 2014-09-15 23:53 - 00000000 ____D () C:\ProgramData\S4H 2014-09-18 22:16 - 2014-09-13 23:23 - 00000000 ____D () C:\Users\JOB\Desktop\CV 2014-09-18 08:31 - 2013-11-13 06:53 - 00000000 ____D () C:\Users\JOB 2014-09-18 08:29 - 2014-09-18 08:28 - 00000000 ____D () C:\bab3cddc3688b50ab1dfd5 2014-09-18 08:19 - 2014-09-18 08:19 - 00000000 ____D () C:\fc36e2ef84d1dd4113615e99ec 2014-09-17 20:23 - 2014-09-17 17:49 - 00000000 ____D () C:\Program Files\ophcrack 2014-09-17 19:02 - 2014-09-15 15:18 - 00000000 ____D () C:\Users\JOB\Desktop\Nowy folder 2014-09-17 17:40 - 2013-07-29 21:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2014-09-17 17:39 - 2014-09-17 17:39 - 00000000 ____D () C:\Windows\Hewlett-Packard 2014-09-17 17:39 - 2014-09-17 17:37 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\HpUpdate 2014-09-17 12:14 - 2014-09-17 12:14 - 00000000 ____D () C:\feb0a93f8d2e41385d1471dd55beda 2014-09-16 22:06 - 2014-09-16 22:06 - 00000000 ____D () C:\17033dfc137a0927d5504bb85acc76ba 2014-09-15 23:24 - 2014-09-15 21:53 - 00000000 ____D () C:\Users\JOB\Desktop\S4h 2014-09-15 21:51 - 2013-12-16 20:11 - 00000166 _____ () C:\Windows\wcx_ftp.ini 2014-09-15 21:41 - 2013-03-24 01:27 - 00000000 ____D () C:\totalcmd 2014-09-14 23:38 - 2014-09-14 23:29 - 302694400 _____ () C:\Users\JOB\Desktop\kav_rescue_10.iso 2014-09-14 19:44 - 2013-08-26 22:33 - 00000000 ____D () C:\Programy 2014-09-14 15:02 - 2014-09-14 14:59 - 00000000 ____D () C:\AdwCleaner 2014-09-14 15:01 - 2012-03-06 20:13 - 00000000 ____D () C:\Users\KOMPUTER 2014-09-14 14:51 - 2006-11-02 12:23 - 00000215 _____ () C:\Windows\system.ini 2014-09-13 14:36 - 2014-09-13 09:45 - 00000000 ____D () C:\Program Files\CCleaner 2014-09-13 13:49 - 2014-09-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET 2014-09-13 13:49 - 2014-09-13 13:49 - 00000000 ____D () C:\ProgramData\ESET 2014-09-13 13:45 - 2014-09-13 13:45 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (3).exe 2014-09-13 13:37 - 2013-10-14 20:20 - 00001672 _____ () C:\Windows\system32\ASOROSet.bin 2014-09-13 13:37 - 2006-11-02 12:22 - 68157440 _____ () C:\Windows\system32\config\software.bak 2014-09-13 13:37 - 2006-11-02 12:22 - 38273024 _____ () C:\Windows\system32\config\system.bak 2014-09-13 13:37 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-09-13 13:33 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-09-13 13:31 - 2013-10-14 20:20 - 00000000 ____D () C:\Windows\system32\config\RCCBakup 2014-09-13 13:02 - 2014-09-13 12:55 - 00000000 ____D () C:\Users\KOMPUTER\AppData\Roaming\Opera Software 2014-09-13 13:02 - 2014-09-13 12:55 - 00000000 ____D () C:\Users\KOMPUTER\AppData\Local\Opera Software 2014-09-13 13:02 - 2014-09-13 12:51 - 00000000 ____D () C:\Program Files\Opera 2014-09-13 13:02 - 2012-03-06 20:14 - 00000915 _____ () C:\Users\KOMPUTER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-09-13 13:00 - 2014-09-13 12:47 - 00000000 ____D () C:\Program Files\ClearThink 2014-09-13 12:59 - 2006-11-02 12:23 - 00000345 _____ () C:\Windows\win.ini 2014-09-13 12:38 - 2014-09-13 12:38 - 00000000 ____D () C:\Users\KOMPUTER\{4f6b483e-b4e6-4cc4-b2e0-ab64da64e6c6} 2014-09-13 12:31 - 2014-09-13 12:31 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (2).exe 2014-09-13 12:16 - 2014-09-13 12:06 - 70938624 _____ () C:\Users\KOMPUTER\Downloads\ess_nt32_plk.msi 2014-09-13 11:48 - 2014-09-13 11:48 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_ (1).exe 2014-09-13 11:43 - 2014-09-13 11:43 - 01595776 _____ (ESET) C:\Users\KOMPUTER\Downloads\eset_smart_security_live_installer_.exe 2014-09-13 10:42 - 2014-09-13 10:42 - 00000000 ____D () C:\Users\JOB\{757ff9dd-0c15-43fb-a53c-f5f6283588af} 2014-09-13 09:45 - 2014-09-13 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-09-13 01:49 - 2014-09-13 01:48 - 00187792 _____ (Kaspersky Lab) C:\Users\JOB\Downloads\kss12.0.1.340_pl.exe 2014-09-13 00:59 - 2014-09-13 00:59 - 00000000 ____D () C:\Users\JOB\{f31d0737-279b-43f5-bd33-0eac26f9720a} 2014-09-12 23:49 - 2014-09-12 23:49 - 00000000 ____D () C:\Users\JOB\{59560c17-aa94-4549-9869-78276cc19e18} 2014-09-12 23:24 - 2013-11-13 13:18 - 00000000 ___RD () C:\Users\JOB\Desktop\dokumenty 2014-09-12 22:46 - 2012-03-06 20:29 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-09-12 22:46 - 2006-11-02 12:23 - 00002577 _____ () C:\Windows\system32\config.nt 2014-09-12 22:19 - 2014-03-22 15:02 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-09-11 23:23 - 2014-09-11 23:23 - 00000000 ____D () C:\found.000 2014-09-11 22:53 - 2006-11-02 13:18 - 00000000 __RHD () C:\Users\Default 2014-09-11 22:45 - 2014-09-11 22:45 - 00000000 ____D () C:\Users\Default\{f0547a9a-8f01-4889-81fa-9db6d85dd4f9} 2014-09-11 22:36 - 2014-09-11 22:36 - 00050227 _____ () C:\Windows\system32\epfwdata.bin 2014-09-11 17:04 - 2014-09-11 17:04 - 00000000 ____D () C:\Users\JOB\{c0da7030-76b4-4655-9fd5-e44cb58c2e21} 2014-09-11 16:55 - 2013-11-28 09:37 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\TeamViewer 2014-09-11 16:07 - 2013-11-18 21:27 - 00000000 ___RD () C:\Users\JOB\Desktop\programy użytkowe 2014-09-11 15:50 - 2013-10-14 20:34 - 00000000 ____D () C:\Windows\pss 2014-09-11 12:35 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET 2014-09-11 12:03 - 2012-03-06 20:19 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-09-11 10:56 - 2013-08-13 22:06 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 10:33 - 2014-09-11 10:32 - 00000000 ____D () C:\Windows\TempA0672160-2EF2-FCC2-49F0-45F6F9D90862-Signatures 2014-09-11 10:32 - 2014-09-11 10:32 - 00000000 ____D () C:\Windows\Temp814B9DAF-CD20-31B5-69E5-DFD406C05D61-Signatures 2014-09-09 21:19 - 2012-04-05 21:12 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-09-09 21:19 - 2012-03-06 23:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-09-09 18:19 - 2014-09-09 18:19 - 00114712 _____ () C:\Users\KOMPUTER\AppData\Local\GDIPFONTCACHEV1.DAT 2014-09-09 11:58 - 2014-09-01 20:56 - 00000000 ____D () C:\Users\KOMPUTER\Downloads\office 2010 profesional 2014-09-09 11:49 - 2012-04-19 19:13 - 00000000 ____D () C:\Users\KOMPUTER\AppData\Roaming\uTorrent 2014-09-09 11:46 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\LogFiles 2014-09-04 22:57 - 2013-11-18 20:56 - 00000000 ___RD () C:\Users\JOB\Desktop\Serwis 2014-09-01 21:11 - 2014-09-01 21:11 - 00000551 _____ () C:\Users\KOMPUTER\Desktop\klucz.txt 2014-09-01 16:08 - 2014-03-23 19:02 - 03022848 _____ () C:\Users\KOMPUTER\Documents\Baza danych1.accdb 2014-08-29 13:01 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-08-26 17:14 - 2014-08-26 16:18 - 00000000 ____D () C:\Users\JOB\AppData\Roaming\Aspell 2014-08-26 16:20 - 2014-08-26 16:20 - 00000000 ____D () C:\Users\JOB\AppData\Local\Iceni 2014-08-25 06:53 - 2012-03-06 20:42 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-08-23 03:03 - 2014-08-28 21:57 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 01:26 - 2014-08-28 21:57 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-22 21:02 ==================== End Of Log ============================