Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-01-2015
Ran by Madga (administrator) on MADGA-PC on 06-01-2015 00:07:17
Running from G:\1Służbowe\1FRST
Loaded Profile: Madga (Available profiles: Madga)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\AEstSrv.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [450652 2009-06-03] (IDT, Inc.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)
HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432 2008-12-08] (Hewlett-Packard)
HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [914224 2008-11-18] (Hewlett-Packard)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-894316807-4337371-2112429552-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-894316807-4337371-2112429552-1000 -> {EC5E52F7-FFE4-43FA-8109-14461CB08DA5} URL = https://www.google.com/search?q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Madga\AppData\Roaming\Mozilla\Firefox\Profiles\emi0gcsm.default-1400330218256
FF Homepage: www.google.pl
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: Adblock Plus - C:\Users\Madga\AppData\Roaming\Mozilla\Firefox\Profiles\emi0gcsm.default-1400330218256\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-01-05]

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\aestsrv.exe [81920 2009-03-02] (Andrea Electronics Corporation)
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard) [File not signed]
R3 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [223232 2008-10-23] (Hewlett-Packard Development Company, L.P.) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]
S4 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-12-17] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-09-15] () [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exe [217170 2009-06-03] (IDT, Inc.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [102784 2010-07-27] (Huawei Technologies Co., Ltd.) [File not signed]
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [66688 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
S3 huawei_enumerator; C:\Windows\System32\DRIVERS\ew_jubusenum.sys [73984 2011-09-09] (Huawei Technologies Co., Ltd.) [File not signed]
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [87536 2008-11-28] (CyberLink Corp.)
U2 ezSharedSvc; No ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-05 23:55 - 2015-01-05 23:55 - 00000797 _____ () C:\Users\Madga\Desktop\fix.vbs
2015-01-05 22:44 - 2015-01-05 23:08 - 02229224 _____ (Hewlett-Packard Company ) C:\Users\Madga\Desktop\sp54629.exe
2015-01-05 21:53 - 2015-01-05 21:53 - 00000838 _____ () C:\Users\Public\Desktop\RealFlight 7.5 Launcher.lnk
2015-01-05 21:34 - 2015-01-05 21:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-05 21:10 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-05 21:09 - 2014-11-07 02:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-05 21:09 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-05 21:03 - 2014-12-03 03:06 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-05 20:54 - 2014-11-24 21:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-01-05 20:54 - 2014-11-24 21:35 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-05 20:54 - 2014-11-24 21:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-05 20:54 - 2014-11-24 21:34 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-05 20:54 - 2014-11-24 21:34 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-05 20:54 - 2014-11-24 21:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-05 20:54 - 2014-11-24 21:33 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-01-05 20:54 - 2014-11-24 21:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-05 20:54 - 2014-11-24 21:32 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-05 20:54 - 2014-11-24 21:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-05 20:54 - 2014-11-24 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-01-05 20:54 - 2014-11-24 21:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-01-05 20:53 - 2014-11-24 21:41 - 12369920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-05 20:53 - 2014-11-24 21:40 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-05 20:53 - 2014-11-24 21:37 - 09740800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-05 20:53 - 2014-11-24 21:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-05 20:53 - 2014-11-24 21:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-05 20:47 - 2015-01-05 20:47 - 00000266 __RSH () C:\ProgramData\ntuser.pol
2015-01-05 20:28 - 2014-10-10 02:01 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-05 20:28 - 2014-10-10 02:00 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-05 20:28 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-05 20:28 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-05 20:28 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-05 20:28 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-05 20:26 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-05 20:25 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-05 20:23 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-05 20:23 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-05 20:23 - 2014-10-03 02:17 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-05 20:23 - 2014-10-03 02:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-05 20:22 - 2014-10-18 02:08 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-05 20:14 - 2014-10-13 00:34 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-05 16:22 - 2015-01-05 16:22 - 00138984 _____ () C:\Windows\Minidump\Mini010515-02.dmp
2015-01-05 16:20 - 2015-01-05 21:43 - 00000000 ____D () C:\Users\Madga\AppData\Local\CrashDumps
2015-01-05 16:09 - 2015-01-05 16:09 - 00145456 _____ () C:\Windows\Minidump\Mini010515-01.dmp
2015-01-05 15:03 - 2015-01-06 00:07 - 00000000 ____D () C:\FRST
2015-01-03 22:21 - 2015-01-03 22:21 - 00145456 _____ () C:\Windows\Minidump\Mini010315-01.dmp
2015-01-03 20:26 - 2015-01-03 20:26 - 00001048 _____ () C:\DelFix.txt
2015-01-03 19:20 - 2015-01-05 20:35 - 00001320 _____ () C:\Windows\system32\spsys.log
2015-01-03 19:19 - 2015-01-05 22:09 - 00005332 _____ () C:\Windows\PFRO.log
2015-01-03 18:58 - 2015-01-03 20:16 - 00000000 ____D () C:\Users\Madga\Desktop\Antyvir
2015-01-03 18:36 - 2015-01-03 18:36 - 00093778 _____ () C:\sfc.txt
2015-01-03 17:23 - 2012-09-10 22:25 - 00454056 _____ (Helge Klein) C:\SetACL.exe
2015-01-03 17:06 - 2015-01-03 17:07 - 00004916 _____ () C:\ESETSirefefCleaner.exe_20150103.170634.1456.log
2015-01-03 17:03 - 2015-01-03 17:03 - 00524762 _____ () C:\ESETSirefefCleaner.exe_20150103.170329.1316.log
2015-01-03 03:31 - 2015-01-03 17:34 - 00001798 _____ () C:\fix.txt
2015-01-03 03:29 - 2015-01-03 03:29 - 00000773 _____ () C:\Users\Madga\Documents\SetACL — skrót.lnk
2015-01-03 03:25 - 2012-09-10 22:25 - 00454056 _____ (Helge Klein) C:\Windows\SetACL.exe
2015-01-02 23:12 - 2015-01-03 00:11 - 00000000 ____D () C:\Windows\erdnt
2015-01-02 21:55 - 2015-01-02 22:33 - 00048067 _____ () C:\Windows\bcmwl.log
2015-01-02 21:55 - 2015-01-02 21:57 - 00051154 _____ () C:\Windows\bcmwl.log.1
2015-01-02 21:55 - 2015-01-02 21:55 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\InstallShield
2014-12-31 18:23 - 2015-01-05 21:58 - 00000262 _____ () C:\WirelessDiagLog.csv
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Users\Madga\AppData\Roaming\Intel
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-12-31 16:41 - 2014-12-31 16:41 - 00000000 ____D () C:\Program Files\Cisco
2014-12-31 16:40 - 2014-12-31 16:40 - 00000000 ____D () C:\ProgramData\Intel
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
2014-12-31 16:30 - 2014-12-31 16:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-12-31 16:29 - 2014-12-31 16:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-12-31 16:28 - 2011-09-09 11:50 - 00089856 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-12-31 16:28 - 2011-09-09 11:50 - 00073984 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-12-31 16:28 - 2011-09-09 11:50 - 00066688 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-12-31 16:28 - 2011-08-16 16:40 - 01112288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-12-31 16:28 - 2010-07-27 09:52 - 00102784 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-12-31 16:26 - 2015-01-03 01:56 - 00000000 ____D () C:\ProgramData\DatacardService
2014-12-31 16:26 - 2014-12-31 16:41 - 00013426 _____ () C:\Windows\DPINST.LOG

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-06 00:07 - 2009-03-03 11:54 - 00714932 _____ () C:\Windows\system32\perfh015.dat
2015-01-06 00:07 - 2009-03-03 11:54 - 00151772 _____ () C:\Windows\system32\perfc015.dat
2015-01-06 00:07 - 2006-11-02 11:33 - 01616158 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-06 00:05 - 2011-10-30 22:46 - 01460626 _____ () C:\Windows\WindowsUpdate.log
2015-01-06 00:01 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-06 00:01 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-06 00:01 - 2006-11-02 13:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-06 00:00 - 2006-11-02 14:01 - 00032624 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-05 23:58 - 2009-03-03 04:22 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-05 23:24 - 2014-05-21 17:14 - 00018632 _____ () C:\Windows\setupact.log
2015-01-05 22:06 - 2014-06-21 18:31 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-05 22:05 - 2012-07-31 18:10 - 00000000 ____D () C:\Users\Madga\AppData\Local\Google
2015-01-05 21:56 - 2014-09-09 13:15 - 00000000 ____D () C:\Users\Madga\Documents\RealFlight 7
2015-01-05 21:54 - 2014-09-09 13:38 - 00000000 ____D () C:\Program Files\Common Files\KnifeEdge
2015-01-05 21:53 - 2014-09-09 13:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealFlight 7
2015-01-05 21:40 - 2014-09-09 13:38 - 00000000 ____D () C:\Program Files\RealFlight7
2015-01-05 21:31 - 2014-09-26 21:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-05 21:31 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2015-01-05 21:14 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-01-05 21:12 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-05 21:09 - 2013-07-19 18:20 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-05 21:04 - 2006-11-02 11:24 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-01-05 20:47 - 2006-11-02 12:18 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-05 20:42 - 2014-06-08 22:18 - 00000000 ____D () C:\Users\Madga\Desktop\Magda
2015-01-05 20:39 - 2014-05-18 15:16 - 00325016 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-05 16:22 - 2011-07-05 14:14 - 00000000 ____D () C:\Windows\Minidump
2015-01-05 16:21 - 2014-09-09 20:25 - 174903009 _____ () C:\Windows\MEMORY.DMP
2015-01-03 19:14 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
2015-01-03 19:12 - 2006-11-02 11:23 - 00000215 _____ () C:\Windows\system.ini
2015-01-03 17:19 - 2009-09-12 14:44 - 00000000 ____D () C:\Program Files\PLAY ONLINE
2015-01-03 16:56 - 2011-08-20 17:23 - 00007512 _____ () C:\Users\Madga\AppData\Local\d3d9caps.dat
2015-01-03 02:07 - 2014-05-18 15:21 - 00079960 _____ () C:\Users\Madga\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-03 00:39 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Provisioning
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\th-TH
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\it-IT
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\he-IL
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\et-EE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\el-GR
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\de-DE
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2015-01-02 22:33 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2015-01-02 22:32 - 2009-04-06 02:32 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2015-01-02 22:04 - 2013-04-19 11:36 - 00000000 ____D () C:\Windows\pss
2015-01-02 21:56 - 2009-06-27 13:37 - 00000000 ____D () C:\Users\Madga
2015-01-02 21:55 - 2009-04-06 02:32 - 03862528 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 03551232 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 02438648 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL6.SYS
2015-01-02 21:55 - 2009-04-06 02:32 - 00091376 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2015-01-02 21:55 - 2009-04-06 02:32 - 00000000 ____D () C:\Windows\system32\no-NO
2015-01-02 09:20 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-12-31 16:40 - 2009-04-06 02:33 - 00000000 ____D () C:\Program Files\Intel

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-05 23:21

==================== End Of Log ============================