Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-01-2015
Ran by user (administrator) on USER-KOMPUTER on 23-01-2015 01:49:23
Running from C:\Users\user\Downloads
Loaded Profiles: user (Available profiles: user & Ogólne & Adminhaha & DefaultAppPool)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Kingsoft Corporation) C:\Program Files\kingsoft\kingsoft antivirus\kxescore.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Aladdin Knowledge Systems Ltd.) C:\Windows\System32\hasplms.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Program Files\HW group\HW VSP3s\HW_VSP3s_srv.exe
(Lectra) C:\Program Files\Lectra\Modaservice\modaserv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
() C:\Program Files\PAD System 6.0\PAD Service\padservice.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(ATK0100) C:\Program Files\ATK Hotkey\HControl.exe
() C:\Program Files\ATKOSD2\ATKOSD2.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files\ATK Hotkey\ATKOSD.exe
(ASUSTeK Computer INC.) C:\Program Files\ASUS\ATK Media\DMedia.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
() C:\Program Files\Lectra\VigiPrint\bin\vpdaemon.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [61440 2006-11-02] (ASUSTeK Computer INC.)
HKLM\...\Run: [DataCardMonitor] => C:\Program Files\blueconnect\DataCardMonitor.exe [259424 2013-09-02] (Huawei Technologies Co., Ltd.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [5188112 2014-12-16] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [LectraVPDaemon] => C:\Program Files\Lectra\VigiPrint\bin\vpdaemon.exe [95480 2008-02-20] ()
HKLM\...\Run: [LectraXCDaemon] => C:\Program Files\Lectra\XChangCutOut\bin\xcdaemon.exe
HKLM\...\Run: [] => [X]
HKLM\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [210208 2008-11-17] (Acresso Corporation)
HKLM\...\Run: [kxesc] => c:\program files\kingsoft\kingsoft antivirus\kxetray.exe [1474984 2015-01-22] (Kingsoft Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30524000 2014-10-23] (Skype Technologies S.A.)
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: I - I:\AutoRun.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {5ffe01e7-165c-11e3-9e13-002215668f74} - J:\AutoRun.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {83d069b6-1412-11e3-9d9b-002215668f74} - H:\AutoRun.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {98db346b-ad48-11e3-9fcf-002215668f74} - F:\LGAutoRun.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {be289e54-c201-11e2-8c04-002215668f74} - E:\AutoRun.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {cd134046-0d90-11e4-9b1e-002215668f74} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL I:\Common_Handset_USB_Driver.exe
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\...\MountPoints2: {df90dce2-16ff-11e3-a259-002215668f74} - F:\AutoRun.exe
HKU\S-1-5-18\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-18\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
GroupPolicyUsers\S-1-5-21-293211453-2188891835-2584668199-1003\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-293211453-2188891835-2584668199-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duba.com/?f=duba_lock&v=2015.00
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKU\S-1-5-21-293211453-2188891835-2584668199-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duba.com/?f=duba_lock&v=2015.00
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.8.0/jinstall-1_8_0_25-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{C572265E-CE06-4099-9398-A05098A7FA6B}: [NameServer] 194.204.159.1,194.204.152.34

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll No File
FF Plugin: @graphisoft.com/GDL Web Plug-in -> C:\Program Files\GRAPHISOFT\GDLWebControl\npGDLMozilla.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll No File
FF Plugin: @kingsfot.com/npkws -> c:\program files\kingsoft\kingsoft antivirus\npkws.dll (Kingsoft Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-293211453-2188891835-2584668199-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-293211453-2188891835-2584668199-1000: @talk.google.com/O1DPlugin -> C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-293211453-2188891835-2584668199-1000: @tools.google.com/Google Update;version=3 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-293211453-2188891835-2584668199-1000: @tools.google.com/Google Update;version=9 -> C:\Users\user\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: Live HTTP Headers - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2014-02-04]
FF Extension: FireFTP - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2014-10-15]
FF Extension: DownloadHelper - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08]
FF Extension: 1-Click Dailymotion Video Downloader - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\DailymotionVideoDownloader@PeterOlayev.com.xpi [2013-11-04]
FF Extension: MEGA - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\firefox@mega.co.nz.xpi [2014-11-02]
FF Extension: Media Hint - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\mediahint@jetpack.xpi [2013-12-02]
FF Extension: عارض PDF - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\uriloader@pdf.js.xpi [2013-05-25]
FF Extension: CouponsHelper - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\{239cc760-75a9-4276-b1fc-c0ceb963f373}.xpi [2013-12-04]
FF Extension: Adblock Plus - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\xx3m6mzm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-06-24]

Chrome: 
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-09]
CHR Extension: (Dysk Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-09]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-11-09]
CHR Extension: (Szukaj w Google) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-11-09]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-09]
CHR Extension: (Adblock Pro) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2013-11-09]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-11-09]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASLDRService; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208 2007-02-05] () [File not signed]
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] () [File not signed]
S4 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3247120 2014-12-16] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [289328 2014-12-16] (AVG Technologies CZ, s.r.o.)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [245760 2010-01-25] (Brother Industries, Ltd.) [File not signed]
S3 EasyAntiCheat; C:\Windows\system32\EasyAntiCheat.exe [182304 2015-01-16] (EasyAntiCheat Ltd)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2013-03-05] (Flexera Software, Inc.)
S4 FontServer; C:\Program Files\Lectra\IManager\bin\fontserver.exe [463096 2008-02-20] ()
R2 hasplms; C:\Windows\system32\hasplms.exe [2869760 2009-04-21] (Aladdin Knowledge Systems Ltd.)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 HW_VSP3s_Service; C:\Program Files\HW group\HW VSP3s\HW_VSP3s_srv.exe [498968 2010-04-20] ()
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 kxescore; c:\program files\kingsoft\kingsoft antivirus\kxescore.exe [284144 2015-01-22] (Kingsoft Corporation)
S4 LpDaemon; C:\Program Files\Lectra\IManager\bin\lpdaemon.exe [234232 2008-02-20] ()
R2 Modaservice; C:\Program Files\Lectra\Modaservice\modaserv.exe [353528 2008-03-05] (Lectra)
S4 ndsvc; C:\Program Files\NetDrive\ndsvc.exe [2088960 2013-02-25] (Bdrive Inc.) [File not signed]
R2 PADSystem Service 6; C:\Program Files\PAD System 6.0\PAD Service\padservice.exe [44032 2013-08-19] () [File not signed]
S4 PLAY ONLINE. RunOuc; C:\Program Files\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-05-21] ()
S4 VPDaemon; C:\Program Files\Lectra\VigiPrint\bin\vpdaemon.exe [95480 2008-02-20] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S4 XCDaemon; C:\Program Files\Lectra\XChangCutOut\bin\xcdaemon.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aksfridge; C:\Windows\System32\DRIVERS\aksfridge.sys [352256 2009-01-16] (Aladdin Knowledge Systems Ltd.)
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [238208 2009-03-13] (Aladdin Knowledge Systems Ltd.)
S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [46336 2007-07-23] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [16384 2009-06-22] (Aladdin Knowledge Systems Ltd.)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
S3 Asushwio; C:\Windows\system32\drivers\Asushwio.sys [10288 2006-10-11] () [File not signed]
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [200984 2014-07-21] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147736 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [189720 2014-10-24] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [241944 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [98584 2014-10-29] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [197400 2014-10-20] (AVG Technologies CZ, s.r.o.)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R1 EterlogicVirtualSerialDriver; C:\Windows\system32\drivers\VSPE.sys [25984 2014-01-15] () [File not signed]
S3 evserial; C:\Windows\System32\DRIVERS\evserial.sys [55808 2010-04-19] (ELTIMA Software)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [587776 2009-07-09] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\Windows\system32\drivers\Haspnt.sys [47616 2013-12-10] (Aladdin Knowledge Systems) [File not signed]
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [95616 2013-05-21] (Huawei Technologies Co., Ltd.)
R0 KAVBootC; C:\Windows\System32\Drivers\KAVBootC.sys [31592 2015-01-22] (Kingsoft Corporation)
R1 KDHacker; c:\program files\kingsoft\kingsoft antivirus\security\kxescan\kdhacker.sys [146248 2015-01-22] (Kingsoft Corporation)
R2 kisknl; C:\Windows\system32\drivers\kisknl.sys [239432 2015-01-22] (Kingsoft Corporation)
R1 kisnetm; c:\program files\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm.sys [113464 2015-01-22] (Kingsoft Corporation)
R2 ksapi; C:\Windows\system32\drivers\ksapi.sys [80744 2015-01-22] (Kingsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
S3 ndfs; C:\Program Files\NetDrive\ndfs.sys [48352 2013-02-01] (Bdrive Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [140800 2014-09-03] (Prolific Technology Inc.)
R3 VSBC; C:\Windows\System32\DRIVERS\evsbc.sys [27648 2010-04-19] (ELTIMA Software)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey.sys [79728 2013-02-27] (WIBU-SYSTEMS AG)
S3 cmshusbser; system32\DRIVERS\cmshusbser.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-23 01:49 - 2015-01-23 01:52 - 00022598 _____ () C:\Users\user\Downloads\FRST.txt
2015-01-23 01:46 - 2015-01-23 01:47 - 01118208 _____ (Farbar) C:\Users\user\Downloads\FRST.exe
2015-01-23 01:38 - 2015-01-23 01:38 - 00000000 ____D () C:\Users\user\AppData\Local\Kingsoft
2015-01-23 01:37 - 2015-01-23 01:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\ReaConverter7
2015-01-23 01:36 - 2015-01-23 01:46 - 00000000 ____D () C:\Users\user\AppData\Roaming\Kingsoft
2015-01-23 01:29 - 2015-01-23 01:29 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Stal Szymusiak
2015-01-22 23:41 - 2015-01-22 23:32 - 00033128 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\bootsafe64.sys
2015-01-22 23:41 - 2015-01-22 23:32 - 00024936 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\bootsafe.sys
2015-01-22 23:21 - 2015-01-22 23:21 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Revo Uninstaller Pro 2.4.1 32bit
2015-01-22 23:21 - 2015-01-22 23:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-01-22 23:21 - 2009-12-30 12:21 - 00027192 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2015-01-22 22:53 - 2015-01-22 22:53 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\VS Revo Group
2015-01-22 22:51 - 2015-01-22 22:51 - 10801480 _____ (VS Revo Group ) C:\Users\Adminhaha\Downloads\RevoUninProSetup(1).exe
2015-01-22 22:00 - 2015-01-22 22:00 - 02186752 _____ () C:\Users\Adminhaha\Downloads\AdwCleaner.exe
2015-01-22 21:59 - 2015-01-22 21:59 - 10801480 _____ (VS Revo Group ) C:\Users\Adminhaha\Downloads\RevoUninProSetup.exe
2015-01-22 20:46 - 2015-01-22 23:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\金山毒霸
2015-01-22 20:46 - 2015-01-22 22:28 - 00000000 ____D () C:\ProgramData\kingsoft
2015-01-22 20:46 - 2015-01-22 21:44 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Kingsoft
2015-01-22 20:46 - 2015-01-22 20:46 - 00000000 __SHD () C:\KRECYCLE
2015-01-22 20:46 - 2015-01-22 20:46 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Kingsoft
2015-01-22 20:46 - 2015-01-22 20:46 - 00000000 _____ () C:\Windows\system32\config\KAVEventLog.EVT
2015-01-22 20:45 - 2015-01-22 22:43 - 00000000 ____D () C:\Program Files\kingsoft
2015-01-22 20:45 - 2015-01-22 21:14 - 00080744 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksapi.sys
2015-01-22 20:45 - 2015-01-22 21:08 - 00239432 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl_del.sys
2015-01-22 20:45 - 2015-01-22 21:08 - 00239432 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl.sys
2015-01-22 20:45 - 2015-01-22 21:02 - 00031592 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00223032 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kisknl64.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00166776 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker64.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00127992 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kdhacker.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00031848 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kavbootc64.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00024472 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\bc.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00019352 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\ksskrpr.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00018296 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery64.sys
2015-01-22 20:45 - 2015-01-22 20:45 - 00014200 _____ (Kingsoft Corporation) C:\Windows\system32\Drivers\kusbquery.sys
2015-01-22 20:39 - 2015-01-22 20:39 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyCAD
2015-01-22 20:39 - 2015-01-22 20:39 - 00000000 ____D () C:\Program Files\AnyCAD Inc
2015-01-22 20:37 - 2015-01-22 20:37 - 00000000 ____D () C:\Users\Adminhaha\Downloads\AnyExchange3D5
2015-01-22 20:36 - 2015-01-22 20:36 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\reaConverter7
2015-01-22 20:35 - 2015-01-23 01:38 - 00000000 ____D () C:\ProgramData\reaConverter7
2015-01-22 20:35 - 2015-01-23 01:38 - 00000000 ____D () C:\Program Files\reaConverter 7 Standard
2015-01-22 20:33 - 2015-01-22 20:33 - 11319692 _____ () C:\Users\Adminhaha\Downloads\AnyExchange3D5.zip
2015-01-22 20:32 - 2015-01-22 20:33 - 47286896 _____ (reaConverter LLC ) C:\Users\Adminhaha\Downloads\reaConverterStandard-Setup.exe
2015-01-22 20:23 - 2015-01-22 22:01 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Skype
2015-01-22 20:23 - 2015-01-22 20:23 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Skype
2015-01-19 22:27 - 2015-01-19 22:27 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Wykład 8
2015-01-19 22:26 - 2015-01-19 22:26 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Wykład 9
2015-01-17 02:19 - 2015-01-17 02:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-16 23:24 - 2015-01-16 23:24 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\.mono
2015-01-16 23:22 - 2015-01-16 23:21 - 00182304 _____ (EasyAntiCheat Ltd) C:\Windows\system32\EasyAntiCheat.exe
2015-01-16 23:13 - 2015-01-22 14:56 - 00000000 ____D () C:\Users\Adminhaha\Desktop\WilQ
2015-01-16 23:11 - 2015-01-16 23:11 - 00001606 _____ () C:\Users\Adminhaha\Desktop\Robocraft.lnk
2015-01-16 23:11 - 2015-01-16 23:11 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Robocraft
2015-01-16 23:11 - 2015-01-16 23:11 - 00000000 ____D () C:\Games
2015-01-16 23:10 - 2015-01-16 23:10 - 07277184 _____ (Freejam ) C:\Users\Adminhaha\Downloads\RobocraftSetup.exe
2015-01-16 22:57 - 2015-01-22 22:24 - 00000000 ____D () C:\Program Files\Steam
2015-01-16 22:57 - 2015-01-16 22:57 - 00000875 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-01-16 22:57 - 2015-01-16 22:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-01-16 22:55 - 2015-01-16 22:55 - 01669632 _____ () C:\Users\Adminhaha\Downloads\SteamInstall.msi
2015-01-16 22:50 - 2015-01-16 22:50 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-01-16 20:46 - 2015-01-16 20:46 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Microsoft Games
2015-01-16 10:37 - 2014-12-05 13:54 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Commonde
2015-01-14 12:22 - 2015-01-14 12:28 - 00000000 ____D () C:\Users\Adminhaha\Desktop\Eduroam
2015-01-11 09:19 - 2015-01-11 09:57 - 00000348 _____ () C:\Users\Adminhaha\Documents\plot.log
2015-01-11 09:17 - 2015-01-11 09:17 - 00000201 ____H () C:\Users\Adminhaha\Documents\Rysunek1.dwl2
2015-01-11 09:17 - 2015-01-11 09:17 - 00000051 ____H () C:\Users\Adminhaha\Documents\Rysunek1.dwl
2015-01-11 08:58 - 2015-01-11 08:58 - 00000000 ____D () C:\Users\Adminhaha\Documents\Autodesk
2015-01-10 10:29 - 2014-12-13 16:44 - 04046336 ____N () C:\Users\Adminhaha\Desktop\pomiary_realiz.ppt
2015-01-10 10:24 - 2015-01-10 10:22 - 01811456 ____N () C:\Users\Adminhaha\Desktop\Tyczenie.ppt
2015-01-10 10:22 - 2015-01-10 10:22 - 00000000 ____D () C:\Users\Adminhaha\Documents\samsung
2015-01-10 00:31 - 2015-01-10 00:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-01-10 00:30 - 2015-01-10 00:30 - 00000000 ____D () C:\Program Files\MarkAny
2015-01-10 00:29 - 2015-01-10 00:31 - 00000000 ____D () C:\ProgramData\Samsung
2015-01-10 00:28 - 2015-01-10 00:28 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Downloaded Installations
2015-01-09 13:21 - 2015-01-09 13:21 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Avg
2015-01-08 10:50 - 2015-01-08 10:50 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Apple
2015-01-08 10:45 - 2015-01-08 10:45 - 00001848 _____ () C:\Users\Adminhaha\Desktop\VSPEmulator — skrót.lnk
2015-01-07 15:38 - 2015-01-07 15:38 - 00023177 _____ () C:\Users\Adminhaha\Downloads\Encoding_HVD_v1.xlsx
2015-01-02 12:25 - 2015-01-02 12:25 - 00000000 ____D () C:\Users\Ogólne\AppData\Roaming\Radmin
2014-12-29 13:17 - 2014-12-29 13:17 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Macromedia
2014-12-29 13:15 - 2014-12-29 13:15 - 00034795 _____ () C:\Users\Adminhaha\Desktop\LISTA_MODELI.xlsx
2014-12-26 03:22 - 2014-12-26 03:22 - 06958304 _____ (Microsoft Corporation) C:\Users\user\Downloads\Silverlight.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-23 01:50 - 2009-07-14 05:34 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-23 01:50 - 2009-07-14 05:34 - 00021296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-23 01:49 - 2014-01-01 18:50 - 00000000 ____D () C:\FRST
2015-01-23 01:49 - 2012-12-02 23:09 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-01-23 01:47 - 2013-07-25 09:01 - 01910837 _____ () C:\Windows\WindowsUpdate.log
2015-01-23 01:43 - 2014-01-02 20:20 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-01-23 01:43 - 2013-11-09 20:33 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-23 01:42 - 2014-11-03 11:00 - 00110260 _____ () C:\Windows\PFRO.log
2015-01-23 01:42 - 2014-11-03 11:00 - 00020746 _____ () C:\Windows\setupact.log
2015-01-23 01:42 - 2013-06-20 02:01 - 00000000 ____D () C:\Program Files\PowerISO
2015-01-23 01:42 - 2012-12-30 21:49 - 00000000 ____D () C:\ProgramData\TEMP
2015-01-23 01:42 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-23 01:36 - 2014-08-24 17:22 - 00000000 ____D () C:\Users\user\AppData\Local\TSVNCache
2015-01-23 01:36 - 2011-04-12 06:08 - 16588262 _____ () C:\Windows\system32\perfh015.dat
2015-01-23 01:36 - 2011-04-12 06:08 - 05784270 _____ () C:\Windows\system32\perfc015.dat
2015-01-23 01:36 - 2010-11-20 22:01 - 00006866 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-23 01:35 - 2014-12-18 02:05 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\TSVNCache
2015-01-23 01:34 - 2013-11-09 20:33 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-23 01:20 - 2014-02-18 20:56 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-293211453-2188891835-2584668199-1000UA.job
2015-01-23 01:02 - 2013-11-13 16:55 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-23 00:28 - 2014-12-18 02:05 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Lectra
2015-01-22 23:21 - 2013-03-05 17:54 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-01-22 23:20 - 2014-02-18 20:56 - 00001002 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-293211453-2188891835-2584668199-1000Core.job
2015-01-22 22:44 - 2014-12-18 02:05 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Avg2014
2015-01-22 22:16 - 2014-03-19 09:20 - 00000000 ____D () C:\AdwCleaner
2015-01-22 20:03 - 2014-01-17 11:42 - 00000000 ____D () C:\ProgramData\MFAData
2015-01-20 13:38 - 2013-11-09 00:46 - 00000000 ____D () C:\Program Files\Common Files\Steam
2015-01-19 21:26 - 2014-12-18 12:32 - 00156617 _____ () C:\Users\Adminhaha\Desktop\Encoding_HVD_v9.xlsx
2015-01-19 14:51 - 2012-12-12 20:59 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-16 22:57 - 2014-12-18 02:04 - 00000000 ____D () C:\Users\Adminhaha
2015-01-16 10:36 - 2014-12-03 15:09 - 00000000 ____D () C:\Users\Adminhaha\Desktop\LIST
2015-01-14 14:41 - 2014-12-19 12:50 - 00000000 ____D () C:\Users\Adminhaha\AppData\Roaming\Autodesk
2015-01-11 08:58 - 2014-12-18 02:05 - 00000000 ____D () C:\Users\Adminhaha\AppData\Local\Autodesk
2015-01-10 15:09 - 2014-07-22 09:01 - 00000000 ____D () C:\Users\Adminhaha\Desktop\ERP
2015-01-10 00:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-10 00:33 - 2013-10-10 21:36 - 00000000 ____D () C:\Program Files\Samsung
2015-01-10 00:30 - 2012-11-08 09:18 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2015-01-09 13:22 - 2014-05-14 17:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-01-02 12:05 - 2014-08-25 12:04 - 00000000 ____D () C:\Users\Ogólne\AppData\Local\TSVNCache
2014-12-29 11:00 - 2009-07-14 05:53 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-26 03:34 - 2014-10-03 20:39 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-12-26 03:25 - 2012-11-29 16:54 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-26 03:25 - 2012-11-29 16:54 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======
2013-06-29 05:41 - 2013-06-29 05:41 - 0000656 _____ () C:\Users\user\AppData\Roaming\.backup.dm
2014-04-14 12:23 - 2014-09-16 21:43 - 0000132 _____ () C:\Users\user\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2014-10-24 11:53 - 2014-10-24 11:53 - 0000218 _____ () C:\Users\user\AppData\Local\recently-used.xbel
2012-11-08 18:37 - 2012-11-10 22:56 - 0007597 _____ () C:\Users\user\AppData\Local\Resmon.ResmonCfg
2013-09-20 17:53 - 2013-09-20 17:53 - 0000057 _____ () C:\ProgramData\Ament.ini

Some content of TEMP:
====================
C:\Users\Adminhaha\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Adminhaha\AppData\Local\Temp\Quarantine.exe
C:\Users\Adminhaha\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Adminhaha\AppData\Local\Temp\sqlite3.dll
C:\Users\Ogólne\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\user\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\user\AppData\Local\Temp\hdinst_x64.exe
C:\Users\user\AppData\Local\Temp\ICReinstall_XN Resource Editor 3.exe
C:\Users\user\AppData\Local\Temp\Quarantine.exe
C:\Users\user\AppData\Local\Temp\SimBundD.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-14 10:31

==================== End Of Log ============================