Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014
Ran by leszek (administrator) on JOLA-KOMPUTER on 11-11-2014 11:31:17
Running from C:\Users\leszek\Desktop
Loaded Profile: leszek (Available profiles: JOLA & leszek)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(mst software GmbH, Germany) C:\Program Files\Ashampoo\Ashampoo WinOptimizer 10\DfSdkS.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Reputation\fsorsp.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSMA32.EXE
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM\...\Run: [NSU_agent] => "C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
HKLM\...\Run: [NBAgent] => "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
HKLM\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] => C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbrmon.exe
HKLM\...\Run: [VideoDownloadConverter Search Scope Monitor] => "C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
HKLM\...\Run: [USBToolTip] => C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2014-07-25] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [332288 2010-12-17] ()
HKLM\...\Run: [APSDaemon] => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\...\Run: [AdobeCS6ServiceManager] => C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073352 2012-06-25] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS5ServiceManager] => C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\Run: [MyCuteBuddy] => "C:\Program Files\My Cute Buddy\myCuteBuddy.exe" "file:///C:/Program Files/My Cute Buddy/Content/Cute Kitty/piticho.buddy" /m /u
Startup: C:\Users\leszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Torpedo.lnk
ShortcutTarget: Torpedo.lnk -> C:\Users\leszek\AppData\Local\Torpedo\Torpedo.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://pl.yhs4.search.yahoo.com/?hspart=avast&hsimp=yhs-001&type=avastbcl
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.yhs4.search.yahoo.com/?hspart=avast&hsimp=yhs-001&type=avastbcl
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3924117992-576461840-467304932-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=sc&from=newgdp&uid=3219913727_67194_E4491345&ts=1380449203
SearchScopes: HKLM - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=3219913727_67194_E4491345&ts=3145797
SearchScopes: HKLM - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKCU - DefaultScope {EE787C3C-9781-4F60-9144-867CF372E02C} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {083B013B-BC06-4A46-8F86-5C8FCC449C95} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3176921&CUI=UN26636382493222292&UM=2
SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKCU - {EE787C3C-9781-4F60-9144-867CF372E02C} URL = https://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} ->  No File
BHO: fassurun -> {e6efad0c-2d79-4b0d-8996-3e759a9c7914} ->  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Hosts: 127.0.0.1	localhost
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-30]
CHR Extension: (YouTube) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-12]
CHR Extension: (Google Search) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-12]
CHR Extension: (BonanzaDeals) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2014-02-13]
CHR Extension: (Lightning Newtab) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo [2014-02-13]
CHR Extension: (express-files) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh [2014-02-24]
CHR Extension: (\x4c\x79\x72\x6d\x69\x78) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidmhllhjmmmnpbiaihafgchacpmokof [2013-10-10]
CHR Extension: (Skype Click to Call) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-13]
CHR Extension: (Helper extension) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla [2013-08-05]
CHR Extension: (Google Wallet) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-13]
CHR Extension: (Gmail) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-12]
CHR HKLM\...\Chrome\Extension: [hjeglkhenpckoocpnajnnmcehdkcemnm] - C:\Program Files\fassurun\hjeglkhenpckoocpnajnnmcehdkcemnm.crx []
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-08-24]
CHR HKLM\...\Chrome\Extension: [iibmmjhgclhlahmjniokmhleigemjpbh] - C:\Users\leszek\AppData\Local\CRE\iibmmjhgclhlahmjniokmhleigemjpbh.crx [2013-03-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]
R2 fshoster; C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
R3 FSMA; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-14] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Reputation\fsorsp.exe [60352 2014-05-01] (F-Secure Corporation)
S2 KMService; C:\Windows\system32\srvany.exe [8192 2012-10-06] () [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3081216 2012-11-22] (Qualcomm Atheros Communications, Inc.)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R3 F-Secure Gatekeeper; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [146472 2014-06-09] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\HIPS\drivers\fshs.sys [73896 2014-06-23] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [44240 2014-05-01] ()
R3 fsni; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Scanning\fsni32.sys [70184 2014-06-19] (F-Secure Corporation)
R1 fsvista; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12736 2013-08-14] ()
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2014-04-01] (Duplex Secure Ltd.)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 NVHDA; system32\drivers\nvhda32v.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 11:31 - 2014-11-11 11:31 - 00016165 _____ () C:\Users\leszek\Desktop\FRST.txt
2014-11-11 11:29 - 2014-11-11 11:29 - 01107968 _____ (Farbar) C:\Users\leszek\Desktop\FRST.exe
2014-11-11 10:59 - 2014-11-11 10:59 - 00000000 ____D () C:\Users\JOLA\AppData\Local\NokiaAccount
2014-11-11 10:59 - 2014-11-11 10:59 - 00000000 ____D () C:\Users\JOLA\AppData\Local\Nokia
2014-11-10 11:24 - 2014-11-10 11:26 - 558177864 _____ () C:\Users\leszek\Desktop\MAKBET.Macbeth.1983.BBC.LEKTOR.avi
2014-11-09 15:10 - 2014-11-09 15:13 - 1172302845 _____ () C:\Users\leszek\Desktop\Polsat Boxing Night 3 Gala cz.2 (2014) Komentarz PL.DVBRip.XviD.avi
2014-11-09 13:39 - 2014-11-09 13:41 - 450000806 _____ () C:\Users\leszek\Desktop\Tomasz Adamek - Artur Szpilka (2014) Komentarz PL DVBRip XviD-TROD4T.avi
2014-11-02 20:11 - 2014-11-02 20:11 - 00002204 _____ () C:\Users\Public\Desktop\Pinnacle Studio 17.lnk
2014-11-02 19:59 - 2014-11-02 20:00 - 334149416 _____ (Microsoft) C:\Users\leszek\Desktop\PinnacleStudio_Patch_17_5_0.exe
2014-10-26 19:30 - 2014-10-26 19:30 - 00003429 _____ () C:\Users\leszek\Downloads\Wielofunkcyjny program Windowsowy v0.1.bat
2014-10-26 17:48 - 2014-10-26 17:48 - 00000004 _____ () C:\Users\leszek\Desktop\savefirstklin.txt
2014-10-26 17:46 - 2014-10-26 17:46 - 00000000 ____D () C:\Users\leszek\kółko i krzyżyk
2014-10-26 14:14 - 2014-11-11 09:48 - 00000000 ____D () C:\Users\leszek\Documents\Nowy folder (4)
2014-10-26 12:59 - 2014-11-11 09:48 - 00000000 ____D () C:\Users\leszek\Documents\win3
2014-10-25 21:59 - 2014-11-11 09:48 - 00000000 ____D () C:\Users\JOLA\Documents\Nowy folder
2014-10-24 17:30 - 2014-11-01 19:14 - 00000000 ____D () C:\Users\leszek\Desktop\Nowy folder (2)
2014-10-23 18:26 - 2014-10-23 08:33 - 445644800 _____ () C:\Users\leszek\Documents\ophcrack-xp-livecd-3.6.0.iso
2014-10-23 18:22 - 2014-10-23 06:23 - 02399596 _____ () C:\Users\leszek\Documents\Kon Boot v2.1.rar
2014-10-22 19:09 - 2014-10-22 19:09 - 00000000 ____D () C:\Users\leszek\Documents\Nowy folder (2)
2014-10-21 12:24 - 2014-11-11 10:57 - 00001960 _____ () C:\Windows\setupact.log
2014-10-21 12:24 - 2014-10-21 12:24 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-19 19:53 - 2014-10-19 19:53 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-19 19:53 - 2014-10-19 19:52 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-19 19:52 - 2014-10-19 19:52 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-19 19:52 - 2014-10-19 19:52 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-19 19:52 - 2014-10-19 19:52 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-19 19:52 - 2014-10-19 19:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-15 13:55 - 2014-10-10 02:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 13:55 - 2014-10-10 02:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 13:55 - 2014-10-10 02:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 13:55 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 13:54 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 13:54 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 13:54 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 13:54 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 13:54 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 13:54 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 13:54 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 13:54 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 13:54 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 13:54 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 13:54 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 13:54 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 13:54 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 13:54 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 13:54 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 13:54 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 13:54 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 13:54 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 13:54 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 13:54 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 13:54 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 13:54 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 13:54 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 13:54 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 13:54 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 13:54 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 13:54 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 13:54 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 13:54 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 13:54 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 13:54 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 13:54 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 13:54 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 13:54 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 13:53 - 2014-08-29 02:44 - 04922368 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 13:53 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-15 13:53 - 2014-08-29 02:44 - 01050112 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-15 13:53 - 2014-08-29 02:44 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-10-15 13:53 - 2014-08-29 02:44 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-15 13:53 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 13:53 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 13:53 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 13:53 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 13:53 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 13:53 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 13:53 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 13:53 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 13:51 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 13:51 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-15 13:51 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-15 13:51 - 2014-07-07 02:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-10-15 13:51 - 2014-07-07 02:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-15 13:51 - 2014-07-07 02:28 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-15 13:51 - 2014-06-28 01:21 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-15 13:51 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-15 13:51 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-15 13:50 - 2014-08-19 03:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-15 13:50 - 2014-08-19 03:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-15 13:50 - 2014-08-19 03:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-15 13:50 - 2014-08-19 03:40 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-15 13:50 - 2014-08-19 03:40 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-15 13:50 - 2014-08-19 02:48 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-15 13:50 - 2014-07-07 02:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-15 13:50 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-15 13:50 - 2014-07-07 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-15 13:50 - 2014-07-07 02:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-15 13:50 - 2014-07-07 02:39 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-15 13:50 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-15 13:50 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-15 13:50 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-14 09:31 - 2014-10-14 12:18 - 58564453 _____ () C:\Users\leszek\Desktop\035b.psd

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-11 11:31 - 2013-10-21 17:17 - 00000000 ____D () C:\FRST
2014-11-11 11:05 - 2009-07-14 05:34 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-11 11:05 - 2009-07-14 05:34 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-11 11:01 - 2012-07-02 20:28 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-11 11:01 - 2012-07-02 20:19 - 01393378 _____ () C:\Windows\WindowsUpdate.log
2014-11-11 11:01 - 2009-07-14 09:07 - 00740672 _____ () C:\Windows\system32\perfh015.dat
2014-11-11 11:01 - 2009-07-14 09:07 - 00156214 _____ () C:\Windows\system32\perfc015.dat
2014-11-11 10:59 - 2012-11-04 19:16 - 00000000 ____D () C:\Users\JOLA\AppData\Roaming\Skype
2014-11-11 10:58 - 2014-08-15 09:00 - 00000000 ____D () C:\Users\JOLA\AppData\Local\Adobe
2014-11-11 10:57 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-11 10:54 - 2013-02-02 15:14 - 00000000 ____D () C:\Windows\pss
2014-11-11 10:51 - 2012-07-02 20:26 - 00000000 ____D () C:\Users\JOLA
2014-11-11 10:33 - 2013-05-12 11:33 - 00000282 _____ () C:\Windows\Tasks\DSite.job
2014-11-11 10:33 - 2013-02-11 15:29 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-11 10:13 - 2012-10-14 20:35 - 00000000 ____D () C:\Temp
2014-11-11 10:00 - 2012-07-03 19:34 - 00000000 ____D () C:\Users\leszek\AppData\Local\Adobe
2014-11-11 09:50 - 2012-07-02 20:52 - 00000000 ____D () C:\Users\leszek
2014-11-11 09:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-11-11 09:48 - 2014-02-28 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 17
2014-11-11 09:48 - 2012-07-02 20:28 - 00000000 ____D () C:\Windows\system32\Macromed
2014-11-11 09:47 - 2014-05-01 11:40 - 00000000 ____D () C:\Program Files\Pakiet Bezpieczenstwa UPC
2014-11-11 09:47 - 2012-09-01 17:28 - 00000000 ____D () C:\DIAGOGOL
2014-11-11 09:47 - 2012-07-03 19:33 - 00000000 ____D () C:\Program Files\Adobe
2014-11-11 09:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-11-11 09:45 - 2014-05-30 20:56 - 00000000 ____D () C:\Users\leszek\AppData\Roaming\GG
2014-11-11 09:45 - 2012-11-06 18:59 - 00000000 ____D () C:\Users\leszek\AppData\Roaming\Skype
2014-11-11 09:41 - 2012-07-03 19:33 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-11-11 09:41 - 2012-07-03 19:32 - 00000000 ____D () C:\ProgramData\Adobe
2014-11-07 20:07 - 2014-02-13 15:14 - 00000904 _____ () C:\Users\leszek\AppData\Roaming\__AvidCloudManager.log
2014-11-07 18:46 - 2014-02-13 15:14 - 00000794 _____ () C:\Users\leszek\AppData\Roaming\__AvidCloudManagerPrevious.log
2014-11-07 16:32 - 2012-10-11 14:36 - 00012453 _____ () C:\Users\leszek\AppData\Roaming\JOLA-KOMPUTER.MTBF.txt
2014-11-05 17:27 - 2014-04-12 16:11 - 00000000 ____D () C:\ProgramData\Google
2014-11-03 20:49 - 2012-10-11 15:34 - 00000000 ____D () C:\Users\leszek\temp
2014-11-02 20:11 - 2014-09-26 21:22 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-11-02 19:46 - 2014-02-13 15:08 - 00000000 ____D () C:\Users\leszek\AppData\Local\Pinnacle
2014-11-01 17:54 - 2014-10-11 18:07 - 00000000 ____D () C:\Users\JOLA\Desktop\gokarty
2014-10-20 18:52 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-20 18:22 - 2012-11-04 19:16 - 00000000 ___RD () C:\Program Files\Skype
2014-10-20 18:22 - 2012-11-04 19:15 - 00000000 ____D () C:\ProgramData\Skype
2014-10-19 19:53 - 2013-10-17 08:46 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-19 12:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-16 10:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-15 18:36 - 2009-07-14 05:33 - 03910648 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-15 18:36 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-15 18:32 - 2014-05-06 13:24 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-15 18:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-10-15 17:30 - 2013-08-15 10:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 17:30 - 2012-07-02 23:19 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\JOLA\AppData\Local\temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\JOLA\AppData\Local\temp\install_flashplayer11x32ax_gtbp_chra_aih.exe
C:\Users\JOLA\AppData\Local\temp\install_flashplayer11x32ax_gtbp_chra_aih_1.exe
C:\Users\JOLA\AppData\Local\temp\jre-7u55-windows-i586-iftw.exe
C:\Users\JOLA\AppData\Local\temp\jre-7u71-windows-i586-iftw.exe
C:\Users\JOLA\AppData\Local\temp\NEventMessages.dll
C:\Users\JOLA\AppData\Local\temp\NOSEventMessages.dll
C:\Users\JOLA\AppData\Local\temp\SkypeSetup.exe
C:\Users\leszek\AppData\Local\temp\lmeopau4.4g1.exe
C:\Users\leszek\AppData\Local\temp\ose00003.exe
C:\Users\leszek\AppData\Local\temp\vgzal1g1.lfi.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-07 14:00

==================== End Of Log ============================