Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-10-2014
Ran by patatashka (administrator) on PATATASHKALOPON on 17-10-2014 20:31:46
Running from E:\Przeglądarki\Mozilla
Loaded Profile: patatashka (Available profiles: patatashka)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
() C:\Program Files (x86)\Mobiililaajakaista\Mobiililaajakaista\BecHelperService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Steamcore.se) C:\Users\patatashka\AppData\Local\Screamer Radio\screamer.exe
(Google) C:\Users\patatashka\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2010-04-28] ()
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.)
HKLM\...\Run: [Creative SB Monitoring Utility] => RunDll32 sbavmon.dll,SBAVMonitor
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2014-05-09] ()
HKLM-x32\...\Run: [Module Loader] => C:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe [57344 2007-07-23] (Creative Technology Ltd.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3499896 2014-05-08] (Adobe Systems Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5187088 2014-08-11] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\Sound Blaster X-Fi Surround 5.1 Pro\Volume Panel\VolPanlu.exe [241757 2010-12-08] (Creative Technology Ltd)
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\Run: [Google Update] => C:\Users\patatashka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-08-02] (Google Inc.)
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {1d86e49b-d791-11e3-ba7f-bcaec5d4b664} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {2d6b0b52-db4e-11e3-b68a-bcaec5d4b664} - F:\Setup.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {39592f7a-33b6-11e4-8f42-bcaec5d4b664} - J:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {59bd3b72-3399-11e4-ab15-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {8c228c82-339a-11e4-a0e1-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {8c228c9b-339a-11e4-a0e1-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {91b59e87-de9f-11e3-8290-bcaec5d4b664} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {aff4ecb4-3469-11e4-981f-bcaec5d4b664} - F:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {bddced57-df46-11e3-9743-c6eb8f7282b0} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {c6a7919e-33e4-11e4-9d9f-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {c6a791b7-33e4-11e4-9d9f-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {cac14b28-429f-11e4-a08b-bcaec5d4b664} - F:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {ef835bab-130c-11e4-942b-bcaec5d4b664} - G:\Autorun.exe
HKU\S-1-5-21-2518992581-3578176282-1322805360-1000\...\MountPoints2: {ef835bc5-130c-11e4-942b-bcaec5d4b664} - G:\Autorun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=128
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Tcpip\..\Interfaces\{FAFAAFA4-7845-40D2-8654-8FDC25C97094}: [NameServer] 195.197.54.100 195.74.0.47

FireFox:
========
FF ProfilePath: C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default
FF DefaultSearchUrluser_pref("browser.search.defaulturl", "");: user_pref("browser.search.defaulturl", "");
FF Homepage: google.pl
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\patatashka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\patatashka\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\patatashka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\patatashka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\patatashka\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\patatashka\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\searchplugins\duckduckgo.xml
FF Extension: DuckDuckGo Plus - C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2014-05-09]
FF Extension: Google Translator for Firefox - C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\Extensions\translator@zoli.bod.xpi [2014-07-24]
FF Extension: Session Manager - C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-08-01]
FF Extension: Adblock Plus - C:\Users\patatashka\AppData\Roaming\Mozilla\Firefox\Profiles\jwe6h5th.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-09]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-05-19]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3244048 2014-08-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-08-11] (AVG Technologies CZ, s.r.o.)
R2 BecHelperService; C:\Program Files (x86)\Mobiililaajakaista\Mobiililaajakaista\BecHelperService.exe [1961856 2011-11-09] ()
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-09-12] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-05-09] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
R2 MSSQL$KBMSS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [328992 2008-07-11] (SafeNet, Inc.)
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [226592 2008-07-11] (SafeNet, Inc)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [242968 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [235800 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [269080 2014-06-17] (AVG Technologies CZ, s.r.o.)
S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2011-11-09] (Huawei Technologies Co., Ltd.)
R3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1588480 2013-04-08] (Creative Technology Ltd.)
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-09-27] (Duplex Secure Ltd.)
S2 SentinelFilter; \??\C:\Users\patatashka\Downloads\DP Technology ESPRIT 2009\CRACK\SENTINELFILTER.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 20:29 - 2014-10-17 20:31 - 00000000 ____D () C:\Users\patatashka\Desktop\LOGI
2014-10-17 20:13 - 2014-10-17 20:31 - 00000000 ____D () C:\FRST
2014-10-16 22:33 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 22:33 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 22:33 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-16 22:33 - 2014-08-29 04:07 - 05780480 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 22:33 - 2014-08-29 04:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 22:33 - 2014-08-29 04:07 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-16 22:33 - 2014-08-29 04:07 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-16 22:33 - 2014-08-29 04:06 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 22:33 - 2014-08-29 03:44 - 04922368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-16 22:33 - 2014-08-29 03:44 - 01050112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-16 22:33 - 2014-08-29 03:44 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-16 22:33 - 2014-08-29 03:44 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-16 22:33 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 22:32 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 22:32 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 22:32 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 22:32 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-16 22:32 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 22:32 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 22:32 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 22:32 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 22:32 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 22:32 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 22:32 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-16 22:32 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-16 22:32 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-16 22:32 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 22:32 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-14 17:39 - 2014-10-14 17:39 - 360321172 _____ () C:\Windows\MEMORY.DMP
2014-10-14 17:39 - 2014-10-14 17:39 - 00276112 _____ () C:\Windows\Minidump\101414-28516-01.dmp
2014-10-13 14:37 - 2014-10-13 14:37 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Birdstep Technology
2014-10-13 14:36 - 2014-10-13 14:36 - 00002199 _____ () C:\Users\Public\Desktop\Mobiililaajakaista.lnk
2014-10-13 14:36 - 2014-10-13 14:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobiililaajakaista
2014-10-13 14:36 - 2014-10-13 14:36 - 00000000 ____D () C:\Program Files (x86)\Mobiililaajakaista
2014-10-13 09:54 - 2014-10-13 18:25 - 00000000 ____D () C:\Users\patatashka\Downloads\[Maxi-Torrents.Pl] Ida
2014-10-08 18:57 - 2014-10-08 18:57 - 00000000 ____D () C:\Program Files (x86)\Lame For Audacity
2014-10-08 18:55 - 2007-03-17 04:21 - 00000000 ____D () C:\Users\patatashka\Desktop\libmp3lame-3.98.2
2014-10-08 18:51 - 2014-10-08 18:51 - 00000000 ____D () C:\Users\patatashka\Desktop\Politycy w Piaskownicy
2014-10-08 18:21 - 2014-10-08 21:32 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Audacity
2014-10-08 18:21 - 2014-09-25 04:18 - 00000000 ____D () C:\Users\patatashka\Desktop\Audacity
2014-10-06 08:53 - 2014-10-06 08:54 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Tox
2014-10-01 21:01 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 21:01 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-01 09:44 - 2014-10-01 09:44 - 00000000 ____D () C:\Users\patatashka\Desktop\Zegarek
2014-09-29 14:33 - 2014-09-29 15:00 - 00000000 ____D () C:\Users\patatashka\Downloads\[WWW.Maxi-Torrents.pl] Nietykalni
2014-09-27 10:31 - 2014-07-24 14:53 - 00018324 _____ () C:\Users\patatashka\Downloads\index.html
2014-09-27 10:25 - 2014-09-27 10:25 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Creative
2014-09-27 10:18 - 2014-04-17 11:06 - 00175104 ____N (Creative Technology Ltd) C:\Windows\system32\CtUsAs64.DLL
2014-09-27 10:18 - 2014-04-17 11:06 - 00163840 ____N (Creative Technology Ltd) C:\Windows\SysWOW64\CtUsAsio.DLL
2014-09-27 10:16 - 2013-04-03 12:50 - 00001772 _____ () C:\ProgramData\cfSB1095A.ini
2014-09-27 09:57 - 2014-10-17 16:00 - 00005190 _____ () C:\Windows\setupact.log
2014-09-27 09:57 - 2014-10-13 14:33 - 00022172 _____ () C:\Windows\PFRO.log
2014-09-27 09:57 - 2014-09-27 09:57 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-27 09:54 - 2014-09-27 09:54 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2014-09-27 09:19 - 2014-09-27 09:19 - 00053732 _____ () C:\Users\patatashka\Documents\cc_20140927_091926.reg
2014-09-27 09:03 - 2013-05-27 19:10 - 00002060 _____ () C:\Users\patatashka\Downloads\ComboOffer.html
2014-09-27 09:01 - 2014-09-27 09:01 - 00000156 _____ () C:\Users\patatashka\Downloads\bootstrap_25128.html
2014-09-27 09:01 - 2014-09-27 09:00 - 00000156 _____ () C:\Users\patatashka\Downloads\bootstrap_37466.html
2014-09-25 23:42 - 2014-09-27 10:25 - 00014747 _____ () C:\Users\patatashka\Downloads\Product.htm
2014-09-24 16:45 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 16:45 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-24 12:15 - 2014-09-24 12:15 - 00001148 _____ () C:\Users\patatashka\Desktop\ASIO4ALL v2 Instruction Manual.lnk
2014-09-24 12:15 - 2014-09-24 12:15 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2014-09-24 12:15 - 2014-09-24 12:15 - 00000000 ____D () C:\Program Files (x86)\ASIO4ALL v2
2014-09-23 21:59 - 2014-09-23 21:59 - 00000000 ____D () C:\Users\patatashka\Downloads\kali-linux-1.0.9-i386
2014-09-23 21:58 - 2014-09-23 21:58 - 00000000 ____D () C:\Users\patatashka\Downloads\kali-linux-1.0.9-amd64
2014-09-23 21:57 - 2014-10-13 09:53 - 00000109 _____ () C:\Users\patatashka\Downloads\blank.htm

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 20:27 - 2014-08-02 14:22 - 00001078 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2518992581-3578176282-1322805360-1000UA.job
2014-10-17 20:20 - 2014-05-10 10:43 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\foobar2000
2014-10-17 20:11 - 2014-05-09 15:43 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-17 20:07 - 2014-05-09 14:37 - 01261273 _____ () C:\Windows\WindowsUpdate.log
2014-10-17 14:41 - 2014-08-02 14:22 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2518992581-3578176282-1322805360-1000Core.job
2014-10-17 10:07 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-17 10:07 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-17 10:00 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-17 09:58 - 2009-07-14 06:45 - 00268832 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-17 09:58 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-17 08:49 - 2014-05-10 08:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 08:46 - 2014-07-29 15:34 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-17 08:45 - 2014-05-10 08:46 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-15 11:19 - 2014-05-15 11:47 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\AIMP3
2014-10-14 17:39 - 2014-05-19 17:15 - 00000000 ____D () C:\Windows\Minidump
2014-10-14 17:04 - 2014-05-19 12:15 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-10-14 09:13 - 2014-07-30 14:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-13 18:14 - 2014-05-14 09:47 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\uTorrent
2014-10-13 14:37 - 2014-07-24 10:40 - 00000000 ____D () C:\ProgramData\Birdstep Technology
2014-10-13 14:36 - 2014-05-09 18:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-10 18:20 - 2014-05-10 10:47 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\vlc
2014-10-10 05:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-10 04:54 - 2011-04-12 15:21 - 00787244 _____ () C:\Windows\system32\perfh015.dat
2014-10-10 04:54 - 2011-04-12 15:21 - 00173420 _____ () C:\Windows\system32\perfc015.dat
2014-10-10 04:54 - 2009-07-14 07:13 - 01800754 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-06 08:53 - 2014-09-02 18:37 - 00000000 ____D () C:\Users\patatashka\Tox
2014-10-03 08:29 - 2014-05-09 18:42 - 00000000 ____D () C:\ProgramData\Skype
2014-10-03 08:27 - 2014-05-09 18:42 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Skype
2014-09-29 20:55 - 2014-05-09 16:25 - 00000000 ____D () C:\ProgramData\P4G
2014-09-29 20:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-09-29 20:28 - 2014-05-09 14:41 - 00000000 ____D () C:\Users\patatashka
2014-09-28 11:23 - 2014-05-14 12:45 - 00000000 ____D () C:\Users\patatashka\AppData\Local\ChomikBox
2014-09-28 11:15 - 2014-08-02 19:12 - 00000000 ____D () C:\Users\patatashka\Downloads\ChomikBox
2014-09-28 10:44 - 2014-05-14 12:45 - 00000000 ____D () C:\Users\patatashka\.gstreamer-0.10
2014-09-27 18:16 - 2014-07-19 22:02 - 00000000 ____D () C:\Users\patatashka\Documents\Traktor3
2014-09-27 10:37 - 2014-05-09 16:08 - 00001922 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-09-27 10:25 - 2014-09-12 17:08 - 00000202 _____ () C:\Users\patatashka\Downloads\SUConnect.htm
2014-09-27 10:25 - 2014-05-09 22:33 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\Creative
2014-09-27 10:21 - 2014-05-09 22:39 - 00000000 ____D () C:\ProgramData\Creative
2014-09-27 10:18 - 2014-05-09 22:36 - 00000000 ___HD () C:\Program Files (x86)\Creative Installation Information
2014-09-27 10:18 - 2014-05-09 22:34 - 00000310 ___RH () C:\Windows\ctfile.rfc
2014-09-27 10:18 - 2014-05-09 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2014-09-27 10:18 - 2014-05-09 22:29 - 00000000 ____D () C:\Program Files\Creative
2014-09-27 10:18 - 2014-05-09 22:29 - 00000000 ____D () C:\Program Files (x86)\Creative
2014-09-27 10:16 - 2014-09-12 16:46 - 00466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-09-27 10:16 - 2014-09-12 16:46 - 00445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-09-27 10:16 - 2014-09-12 16:46 - 00123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-09-27 10:16 - 2014-09-12 16:46 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-09-27 10:16 - 2014-09-12 16:46 - 00002331 _____ () C:\Users\Public\Desktop\Creative Product Registration.lnk
2014-09-27 09:18 - 2014-05-15 06:39 - 00000000 ____D () C:\Users\patatashka\AppData\Roaming\DAEMON Tools Lite
2014-09-27 09:18 - 2014-05-09 15:33 - 00000000 ____D () C:\Windows\Panther
2014-09-27 08:21 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-24 22:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-24 12:11 - 2014-05-09 15:43 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-24 12:11 - 2014-05-09 15:43 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-24 12:11 - 2014-05-09 15:43 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

Some content of TEMP:
====================
C:\Users\patatashka\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\patatashka\AppData\Local\Temp\gg10.upgr.exe
C:\Users\patatashka\AppData\Local\Temp\ResetDevice.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 00:44

==================== End Of Log ============================