Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-01-2015 01
Ran by WOLEK (administrator) on WOLEK-KOMPUTER on 25-01-2015 08:43:09
Running from C:\Users\WOLEK\Desktop
Loaded Profiles: WOLEK & postgres (Available profiles: WOLEK & elephant & postgres)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\pg_ctl.exe
(Motorola, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13667032 2000-01-01] (Realtek Semiconductor)
HKLM-x32\...\Run: [WLSS] => C:\Program Files (x86)\Wireless Select Switch\WLSS.exe [189736 2007-10-17] (Compal Electronics, Inc.)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [665424 2008-12-04] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DivXUpdate] => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Run: [Google Update] => C:\Users\WOLEK\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-18] (Google Inc.)
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Run: [Facebook Update] => C:\Users\WOLEK\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-09-03] (Facebook Inc.)
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-05-16] (Nero AG)
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\MountPoints2: {02e7625c-9618-11e2-a2d6-001b3875f27e} - G:\LaunchU3.exe -a
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\MountPoints2: {038c1500-bb3c-11e2-8cf1-001b3875f27e} - G:\AutoRun.exe
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\MountPoints2: {038c150f-bb3c-11e2-8cf1-001b3875f27e} - G:\AutoRun.exe
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\MountPoints2: {3f6fe0c6-070a-11df-acbf-806e6f6e6963} - E:\setup.exe
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\...\MountPoints2: {969b0bcb-7784-11df-a88a-001b3875f27e} - G:\start.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShA64.dll (AVAST Software)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1771713310-1976957200-1765415759-1004\User: Group Policy restriction detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220140906
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220140906
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.omiga-plus.com/?type=hppp&ts=1421326122&from=cor&uid=TOSHIBAXMK3252GSX_884NFFP5SXX884NFFP5S
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.omiga-plus.com/?type=hppp&ts=1421326122&from=cor&uid=TOSHIBAXMK3252GSX_884NFFP5SXX884NFFP5S
HKU\S-1-5-21-1771713310-1976957200-1765415759-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1421326122&from=cor&uid=TOSHIBAXMK3252GSX_884NFFP5SXX884NFFP5S&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKU\S-1-5-21-1771713310-1976957200-1765415759-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1421326122&from=cor&uid=TOSHIBAXMK3252GSX_884NFFP5SXX884NFFP5S&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1771713310-1976957200-1765415759-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://isearch.omiga-plus.com/web/?type=dspp&ts=1421326122&from=cor&uid=TOSHIBAXMK3252GSX_884NFFP5SXX884NFFP5S&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 31.11.202.254 37.8.214.2

FireFox:
========
FF ProfilePath: C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default
FF DefaultSearchEngine: Yahoo! Search
FF Keyword.URL: 
FF SelectedSearchEngine: Yahoo! Search
FF NewTab: 
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
FF Plugin-x32: @divx.com/DivX Content Upload Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Content Uploader\npUpload.dll No File
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1771713310-1976957200-1765415759-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\WOLEK\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1771713310-1976957200-1765415759-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\WOLEK\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-1771713310-1976957200-1765415759-1000: @talk.google.com/O1DPlugin -> C:\Users\WOLEK\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-1771713310-1976957200-1765415759-1000: @tools.google.com/Google Update;version=3 -> C:\Users\WOLEK\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1771713310-1976957200-1765415759-1000: @tools.google.com/Google Update;version=9 -> C:\Users\WOLEK\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft)
FF Plugin ProgramFiles/Appdata: C:\Users\WOLEK\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\WOLEK\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\searchplugins\keepmysearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\Extensions\elemhidehelper@adblockplus.org [2010-11-04]
FF Extension: Stylish - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2011-03-29]
FF Extension: Adblock Plus - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2011-03-29]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012-06-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-06-14]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-08-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2010-10-25]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2010-12-20]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-02-28]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} [2012-08-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-01]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-10-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2013-02-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-10-03]
FF Extension: No Name - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\extensions\engine@conduit.com [Not Found]
FF Extension: No Name - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [Not Found]
FF Extension: No Name - C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.5 [Not Found]
FF Extension: No Name - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\extensions\ffxtlbr@funmoods.com [Not Found]
FF Extension: No Name - C:\Users\WOLEK\AppData\Roaming\Mozilla\Firefox\Profiles\5ss0c12m.default\extensions\plugin@yontoo.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.pl/
CHR StartupUrls: Default -> "hxxp://www.google.pl/"
CHR DefaultSuggestURL: Default -> 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\WOLEK\AppData\Local\Google\Chrome\Application\39.0.2171.99\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\WOLEK\AppData\Local\Google\Chrome\Application\39.0.2171.99\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\WOLEK\AppData\Local\Google\Chrome\Application\39.0.2171.99\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (DivX Player Netscape Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Winamp Application Detector) - C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (Nullsoft)
CHR Plugin: (Google Talk Plugin) - C:\Users\WOLEK\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\WOLEK\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Profile: C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20]
CHR Extension: (Adblock Plus) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-05-17]
CHR Extension: (Szukaj w Google) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20]
CHR Extension: (Internet Program) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nalhelnoplapkggeaahomnnglhnlgfhp [2015-01-15]
CHR Extension: (Google Wallet) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (Gmail) - C:\Users\WOLEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-20]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-11-30]
StartMenuInternet: Google Chrome - C:\Users\WOLEK\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-11-30] (AVAST Software)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [647680 2011-11-02] (Macrovision Europe Ltd.) [File not signed]
R3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [1028096 2011-11-02] (Macrovision Europe Ltd.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-05-16] (Nero AG)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft Corporation) [File not signed]
S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [File not signed]
R2 postgresql-x64-9.0; C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [X]
S4 vToolbarUpdater14.0.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-11-30] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-11-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-11-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-11-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-11-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-11-30] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [37720 2013-01-20] (AVG Technologies)
R0 EMSC; C:\Windows\SysWOW64\DRIVERS\EMSC.SYS [9856 2007-04-19] () [File not signed]
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [37392 2008-08-25] (Paragon Software Group)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 smserial; C:\Windows\System32\DRIVERS\SmSerl64.sys [1227776 2009-06-10] (Motorola Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-02-02] () [File not signed]
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [45320 2008-09-26] (Windows (R) 2000 DDK provider)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2011-02-14] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2011-02-14] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2011-02-14] (LG Electronics Inc.)
U3 aoptenwt; C:\Windows\System32\Drivers\aoptenwt.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 08:43 - 2015-01-25 08:44 - 00024429 _____ () C:\Users\WOLEK\Desktop\FRST.txt
2015-01-25 08:34 - 2015-01-25 08:34 - 00000000 ____D () C:\Users\WOLEK\Desktop\FRST-OlderVersion
2015-01-20 21:04 - 2015-01-25 08:34 - 02129920 _____ (Farbar) C:\Users\WOLEK\Desktop\FRST64.exe
2015-01-20 19:57 - 2015-01-25 08:43 - 00000000 ____D () C:\FRST
2015-01-20 19:08 - 2015-01-19 16:56 - 02031992 ____N (Microsoft Corporation) C:\Users\WOLEK\Desktop\MGADiag.exe
2015-01-19 22:34 - 2015-01-19 22:34 - 00002782 _____ () C:\Windows\CompatibilityIssues.txt
2015-01-19 22:22 - 2015-01-19 22:35 - 00002562 _____ () C:\Windows\diagwrn.xml
2015-01-19 22:22 - 2015-01-19 22:35 - 00001908 _____ () C:\Windows\diagerr.xml
2015-01-19 21:45 - 2015-01-19 22:04 - 00046736 _____ () C:\Users\WOLEK\Desktop\sfcdetails.txt
2015-01-19 20:51 - 2015-01-19 20:55 - 00051864 _____ () C:\Windows\iis7.log
2015-01-19 20:51 - 2015-01-19 20:53 - 00000000 ____D () C:\inetpub
2015-01-19 16:32 - 2015-01-19 16:32 - 00003036 _____ () C:\Windows\System32\Tasks\{93C17D04-1D0B-463C-8A96-7F15212C135B}
2015-01-19 05:46 - 2015-01-19 05:46 - 00003250 _____ () C:\Windows\System32\Tasks\{DE1811F2-D744-4B66-BC59-56CE5BA547B5}
2015-01-18 11:41 - 2015-01-18 11:41 - 00001425 _____ () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-18 11:41 - 2015-01-18 11:41 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Adobe
2015-01-18 11:39 - 2015-01-18 11:39 - 00000640 __RSH () C:\Users\TEMP\ntuser.pol
2015-01-18 11:39 - 2015-01-18 11:39 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Ustawienia lokalne
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Szablony
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Moje dokumenty
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Menu Start
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Documents\Moje wideo
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Documents\Moje obrazy
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Documents\Moja muzyka
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\Dane aplikacji
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Historia
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Dane aplikacji
2015-01-18 11:39 - 2015-01-18 11:39 - 00000000 ____D () C:\Users\TEMP\AppData\Local\VirtualStore
2015-01-18 11:38 - 2015-01-18 11:40 - 00000000 ____D () C:\Users\TEMP
2015-01-18 11:38 - 2014-05-05 00:56 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Google
2015-01-18 11:38 - 2011-06-17 02:08 - 00000000 ____D () C:\Users\TEMP\Documents\Visual Studio 2008
2015-01-18 11:38 - 2011-02-27 10:14 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Microsoft Help
2015-01-18 11:38 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-18 11:38 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-18 07:08 - 2015-01-18 07:08 - 00000000 __SHD () C:\found.001
2015-01-17 23:35 - 2015-01-17 23:35 - 00000000 __SHD () C:\found.000
2015-01-17 18:38 - 2015-01-17 18:38 - 00119296 _____ () C:\Users\WOLEK\Downloads\wyniki_testu_zima_2015.xls
2015-01-17 12:37 - 2015-01-17 12:37 - 00000000 ____D () C:\Users\WOLEK\Desktop\genetykaklinicznasem_1
2015-01-16 23:23 - 2015-01-16 23:23 - 00019822 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.mentalist.s07e07.hdtv.x264.lol.ettv.torrent
2015-01-15 23:22 - 2015-01-15 23:22 - 15541892 _____ () C:\Users\WOLEK\Downloads\testyztorakochirurgii.zip
2015-01-15 23:19 - 2015-01-15 23:19 - 00094707 _____ () C:\Users\WOLEK\Downloads\Weryfikacja nieobecności na wykładach prowadzonych przez Panią Profesor Bandurską-Stankiewicz.eml
2015-01-15 23:09 - 2015-01-15 23:09 - 01221971 _____ () C:\Users\WOLEK\Downloads\Stany nagłe w psychiatrii.pptx
2015-01-15 13:49 - 2015-01-15 13:49 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-01-15 13:49 - 2015-01-15 13:49 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-01-15 13:48 - 2015-01-15 13:48 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-01-15 13:47 - 2015-01-17 16:42 - 00000000 ____D () C:\ProgramData\6fb1f30a-cea7-4ccf-bff8-acbecbfe46f9
2015-01-15 13:47 - 2015-01-15 13:47 - 01355012 _____ (Artur Sikora ) C:\Users\WOLEK\Downloads\subedit_install.exe
2015-01-15 13:47 - 2015-01-15 13:47 - 00730528 _____ ( ) C:\Users\WOLEK\Downloads\SubEditPlayer(12488)-dp.exe
2015-01-15 13:47 - 2015-01-15 13:47 - 00000000 ____D () C:\Users\WOLEK\AppData\Roaming\omiga-plus
2015-01-15 13:47 - 2015-01-15 13:47 - 00000000 ____D () C:\Program Files (x86)\Internet Program
2015-01-15 13:46 - 2015-01-15 13:46 - 00730528 _____ ( ) C:\Users\WOLEK\Downloads\Subtitle-Edit(14987)-dp.exe
2015-01-15 13:04 - 2015-01-15 13:04 - 00260779 _____ () C:\Users\WOLEK\Downloads\Choroby współistniejące z ciążą (1).pptx
2015-01-14 21:40 - 2015-01-14 21:40 - 12099768 _____ (MPC-HC Team ) C:\Users\WOLEK\Downloads\MPC-HC.1.7.7.x64.exe
2015-01-14 21:32 - 2015-01-14 21:32 - 00000000 ____D () C:\Users\WOLEK\AppData\Roaming\MPC-HC
2015-01-14 21:02 - 2015-01-14 21:02 - 00001362 _____ () C:\Users\Public\Desktop\Free Video Editor.lnk
2015-01-14 21:02 - 2015-01-14 21:02 - 00001205 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-01-14 21:02 - 2015-01-14 21:02 - 00000000 ____D () C:\Users\WOLEK\AppData\RoamingDVDVideoSoft
2015-01-14 21:02 - 2015-01-14 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-01-14 21:02 - 2015-01-14 21:02 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-01-14 20:59 - 2015-01-14 21:02 - 00000000 ____D () C:\Users\WOLEK\AppData\Roaming\DVDVideoSoft
2015-01-14 20:58 - 2015-01-14 20:59 - 03525136 _____ (DVDVideoSoft Ltd. ) C:\Users\WOLEK\Downloads\FreeVideoEditor.exe
2015-01-14 13:56 - 2015-01-14 13:56 - 00000000 ____D () C:\Users\WOLEK\Desktop\USG prenatalne 14.01.2015 13t3d dr Hoppe
2015-01-14 13:26 - 2005-01-01 01:00 - 575950848 _____ () C:\Users\WOLEK\Desktop\VTS_01_1.VOB
2015-01-14 11:13 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 11:13 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 11:13 - 2014-12-12 06:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 11:13 - 2014-12-12 06:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 11:13 - 2014-12-12 06:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 11:13 - 2014-12-12 06:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 11:13 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 11:13 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 11:13 - 2014-12-12 06:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-14 11:13 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 11:13 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 11:13 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 11:13 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 10:40 - 2015-01-25 08:11 - 00001757 _____ () C:\Windows\setupact.log
2015-01-14 10:40 - 2015-01-19 22:22 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-13 23:56 - 2015-01-13 23:56 - 00645439 _____ () C:\Users\WOLEK\Downloads\Seminarium 2 - Stany nieprzytomności _ definicja, klasyfikacja, rozpoznanie, leczenie.pptx
2015-01-12 20:56 - 2015-01-15 12:19 - 00000000 ____D () C:\Users\WOLEK\Desktop\6 rok
2015-01-12 17:05 - 2015-01-12 17:05 - 00088689 _____ () C:\Users\WOLEK\Downloads\1416671503_bol-seminarka-na-kartkowke.pptx
2015-01-12 17:01 - 2015-01-12 17:01 - 05547486 _____ () C:\Users\WOLEK\Downloads\1420983377_choroby-naczyniowe-mózgu.pptx
2015-01-12 17:01 - 2015-01-12 17:01 - 05547486 _____ () C:\Users\WOLEK\Downloads\1420831073_choroby-naczyniowe-mózgu.pptx
2015-01-11 12:18 - 2015-01-11 12:18 - 00637952 _____ () C:\Users\WOLEK\Downloads\1420831125_udar-mózgu(1).ppt
2015-01-11 09:44 - 2015-01-11 09:44 - 00821625 _____ () C:\Users\WOLEK\Downloads\radiologiazubiegegoroku.zip
2015-01-11 09:44 - 2015-01-11 09:44 - 00821625 _____ () C:\Users\WOLEK\Downloads\radiologiazubiegegoroku (2).zip
2015-01-11 09:44 - 2015-01-11 09:44 - 00821625 _____ () C:\Users\WOLEK\Downloads\radiologiazubiegegoroku (1).zip
2015-01-10 09:40 - 2015-01-10 09:40 - 06384769 _____ () C:\Users\WOLEK\Downloads\udar studenci.zip
2015-01-09 08:16 - 2015-01-09 08:16 - 02066944 ____R () C:\Users\WOLEK\Downloads\1420584146_reumatologia.ppt
2015-01-08 22:36 - 2015-01-08 22:36 - 00008499 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.mentalist.s07e06.hdtv.x264.lol.eztv.torrent
2015-01-07 22:12 - 2015-01-07 22:12 - 00000000 ____D () C:\Users\WOLEK\Desktop\moje notatki
2015-01-07 21:45 - 2015-01-07 21:45 - 21818854 _____ () C:\Users\WOLEK\Desktop\moje notatki.rar
2015-01-07 21:40 - 2015-01-07 21:40 - 00000000 ____D () C:\Users\WOLEK\Downloads\10691420_10202595192315618_166484276_n
2015-01-07 21:39 - 2015-01-07 21:39 - 00166558 _____ () C:\Users\WOLEK\Downloads\10691420_10202595192315618_166484276_n.rar
2015-01-07 21:27 - 2015-01-07 21:27 - 00000000 ____D () C:\Users\WOLEK\Downloads\oko
2015-01-07 21:25 - 2015-01-07 21:26 - 18967120 _____ () C:\Users\WOLEK\Downloads\oko.rar
2015-01-06 19:22 - 2015-01-06 19:22 - 00111400 _____ () C:\Users\WOLEK\Downloads\[kickass.so]what.we.do.in.the.shadows.2014.limited.brrip.xvid.ac3.evo.torrent
2015-01-06 19:20 - 2015-01-06 19:20 - 00057411 _____ () C:\Users\WOLEK\Downloads\[kickass.so]88.2015.hdrip.xvid.juggs.etrg.torrent
2015-01-06 19:18 - 2015-01-06 19:18 - 00057475 _____ () C:\Users\WOLEK\Downloads\[kickass.so]time.lapse.2014.hdrip.xvid.juggs.etrg.torrent
2015-01-06 19:16 - 2015-01-06 19:16 - 00018529 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.lord.of.the.rings.the.return.of.the.king.extended.2003.720p.brrip.x264.yify.torrent
2015-01-06 19:15 - 2015-01-06 19:16 - 00015049 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.lord.of.the.rings.the.two.towers.2002.extended.720p.brrip.yify.torrent
2015-01-06 19:15 - 2015-01-06 19:15 - 00015426 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.lord.of.the.rings.the.fellowship.of.the.ring.extended.2001.720p.brrip.x264.yify.torrent
2015-01-05 22:25 - 2015-01-05 22:25 - 00109806 _____ () C:\Users\WOLEK\Downloads\[kickass.so]whiplash.2014.hdrip.xvid.ac3.evo.torrent
2015-01-05 22:25 - 2015-01-05 22:25 - 00015203 _____ () C:\Users\WOLEK\Downloads\[kickass.so]fury.2014.hdrip.xvid.700mb.lonewolf666.torrent
2015-01-04 19:52 - 2015-01-04 19:52 - 00057388 _____ () C:\Users\WOLEK\Downloads\[kickass.so]poker.night.2014.hdrip.xvid.juggs.etrg.torrent
2015-01-04 19:51 - 2015-01-04 19:51 - 00020468 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.hobbit.the.battle.of.the.five.armies.2014.1080p.hd.ts.x264.pimp4003.torrent
2015-01-01 21:06 - 2015-01-01 21:06 - 00018036 _____ () C:\Users\WOLEK\Downloads\[kickass.so]american.pie.1999.unrated.1080p.bluray.x264.english.5.1.tbi.torrent
2015-01-01 20:59 - 2015-01-01 20:59 - 00021799 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.hobbit.the.desolation.of.smaug.2013.extended.1080p.bdrip.x264.aac.kingdom.torrent
2015-01-01 20:57 - 2015-01-01 20:57 - 00013811 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.hobbit.an.unexpected.journey.2012.1080p.brrip.x264.yify.torrent
2015-01-01 11:45 - 2015-01-01 11:45 - 00008786 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.drop.2014.720p.brrip.x264.yify.torrent
2015-01-01 11:44 - 2015-01-01 11:44 - 00057255 _____ () C:\Users\WOLEK\Downloads\[kickass.so]penguins.of.madagascar.2014.hc.hdrip.xvid.juggs.etrg.torrent
2015-01-01 11:11 - 2015-01-01 11:11 - 00057471 _____ () C:\Users\WOLEK\Downloads\[kickass.so]dr.cabbie.2014.hdrip.xvid.juggs.etrg.torrent
2015-01-01 11:10 - 2015-01-01 11:10 - 00014927 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.judge.2014.hdrip.xvid.sam.etrg.torrent
2014-12-30 12:21 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-30 12:21 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-12-30 01:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-12-30 01:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-12-30 01:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-12-30 01:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-12-30 01:33 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-12-30 01:33 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-12-30 01:33 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-12-30 01:33 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-12-30 01:33 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-12-30 01:33 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-12-30 01:33 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-12-30 01:33 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-12-30 01:33 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-12-30 01:33 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-12-30 01:33 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-12-29 16:03 - 2014-12-29 16:03 - 00020351 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.mentalist.s07e05.hdtv.x264.killers.ettv.torrent
2014-12-29 15:54 - 2014-12-29 15:54 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-26 21:39 - 2014-12-26 21:39 - 00014783 _____ () C:\Users\WOLEK\Downloads\[kickass.so]how.to.train.your.dragon.2.2014.1080p.web.dl.x264.ac3.jyk.torrent
2014-12-26 20:59 - 2014-12-26 20:59 - 00021255 _____ () C:\Users\WOLEK\Downloads\[kickass.so]pk.2014.hindi.1cd.pre.dvdrip.xvid.aac.by.tg.torrent
2014-12-26 20:58 - 2014-12-26 20:58 - 00009419 _____ () C:\Users\WOLEK\Downloads\[kickass.so]pride.2014.720p.brrip.x264.yify.torrent
2014-12-26 20:56 - 2014-12-26 20:56 - 00108453 _____ () C:\Users\WOLEK\Downloads\[kickass.so]son.of.a.gun.2014.hdrip.xvid.ac3.ift.torrent
2014-12-26 20:54 - 2014-12-26 20:54 - 00015829 _____ () C:\Users\WOLEK\Downloads\[kickass.so]the.interview.2014.720p.web.dl.xvid.mp3.rarbg.torrent
2014-12-26 20:53 - 2014-12-26 20:53 - 00017646 _____ () C:\Users\WOLEK\Downloads\[kickass.so]dumb.and.dumber.to.2014.720p.hdrip.x264.aac.kingdom.torrent

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-25 08:29 - 2010-10-03 19:54 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771713310-1976957200-1765415759-1000UA.job
2015-01-25 08:19 - 2011-06-25 11:21 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-25 08:19 - 2009-07-14 05:45 - 00027456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-25 08:19 - 2009-07-14 05:45 - 00027456 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-25 08:15 - 2010-01-22 05:00 - 01508502 _____ () C:\Windows\WindowsUpdate.log
2015-01-25 08:11 - 2011-06-25 11:21 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-25 08:11 - 2010-01-22 05:11 - 00000000 ____D () C:\Users\WOLEK
2015-01-25 08:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-20 06:29 - 2010-10-03 19:54 - 00001006 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1771713310-1976957200-1765415759-1000Core.job
2015-01-20 01:24 - 2011-06-22 12:59 - 00000000 ____D () C:\Windows\rescache
2015-01-19 23:31 - 2012-12-16 14:30 - 00000000 ____D () C:\Windows\pss
2015-01-19 20:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2015-01-19 20:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2015-01-19 20:52 - 2009-07-14 18:55 - 00809240 _____ () C:\Windows\system32\perfh015.dat
2015-01-19 20:52 - 2009-07-14 18:55 - 00184528 _____ () C:\Windows\system32\perfc015.dat
2015-01-19 20:52 - 2009-07-14 06:13 - 01832766 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-18 09:14 - 2014-04-30 17:31 - 00000000 ____D () C:\Users\postgres
2015-01-18 08:46 - 2010-01-22 01:50 - 00000000 ____D () C:\Temp
2015-01-17 11:43 - 2013-02-02 16:06 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-17 11:41 - 2014-10-08 08:00 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-01-17 11:40 - 2010-01-22 05:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-17 06:58 - 2013-02-15 18:24 - 00406580 _____ () C:\Windows\PFRO.log
2015-01-17 02:26 - 2010-09-04 08:44 - 00000000 ____D () C:\Users\WOLEK\AppData\Roaming\uTorrent
2015-01-16 23:32 - 2010-09-04 08:48 - 00000000 ____D () C:\Pliki Torrent
2015-01-16 09:52 - 2011-02-09 20:21 - 01651176 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-15 11:20 - 2014-02-08 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-01-14 15:49 - 2013-08-14 15:27 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-14 15:42 - 2010-01-22 05:50 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-14 05:01 - 2010-02-24 17:41 - 00000000 ____D () C:\Windows\Minidump
2015-01-02 20:11 - 2010-11-13 19:36 - 00000000 ____D () C:\Users\WOLEK\AppData\Local\PokerStars.EU
2015-01-02 20:10 - 2014-04-03 14:25 - 00000000 ____D () C:\Program Files (x86)\PokerStars.EU
2014-12-30 12:08 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

==================== Files in the root of some directories =======

2010-05-31 10:18 - 2010-08-27 23:19 - 0000600 _____ () C:\Users\WOLEK\AppData\Roaming\winscp.rnd
2011-06-12 17:25 - 2011-06-12 20:35 - 0009536 ___SH () C:\Users\WOLEK\AppData\Local\dbm44e48s8
2011-11-17 13:23 - 2014-10-10 04:43 - 0016896 _____ () C:\Users\WOLEK\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-02-09 21:42 - 2011-02-09 21:42 - 0000377 _____ () C:\Users\WOLEK\AppData\Local\postgresinstall.bat
2010-03-05 07:57 - 2010-05-31 11:52 - 0000600 _____ () C:\Users\WOLEK\AppData\Local\PUTTY.RND
2011-05-27 21:04 - 2013-02-10 01:01 - 0007597 _____ () C:\Users\WOLEK\AppData\Local\Resmon.ResmonCfg
2010-11-21 19:33 - 2010-11-21 19:33 - 0005077 _____ () C:\ProgramData\bltofzsb.qlf
2011-06-12 17:25 - 2011-06-12 20:35 - 0009536 ___SH () C:\ProgramData\dbm44e48s8
2014-04-07 18:56 - 2014-04-07 18:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-04-30 17:19 - 2014-04-30 17:19 - 0005037 _____ () C:\ProgramData\flwjycbm.bab

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-18 09:07

==================== End Of Log ============================