Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2015
Ran by dawid (administrator) on DAWID-LAPTOP on 14-04-2015 15:07:46
Running from C:\Users\Wojciech\Desktop
Loaded Profiles: dawid (Available profiles: dawid)
Platform: Windows 8.1 Pro N (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Validity Sensors, Inc.) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\Wojciech\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Wojciech\AppData\Roaming\Spotify\Spotify.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Spotify Ltd) C:\Users\Wojciech\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Wojciech\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Wojciech\AppData\Roaming\Spotify\Spotify.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-07-24] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3723728 2015-03-25] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4225948802-2122742746-3075298040-1001\...\Run: [uTorrent] => C:\Users\Wojciech\AppData\Roaming\uTorrent\uTorrent.exe [1377872 2015-01-22] (BitTorrent Inc.)
HKU\S-1-5-21-4225948802-2122742746-3075298040-1001\...\Run: [Spotify Web Helper] => C:\Users\Wojciech\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-04-11] (Spotify Ltd)
HKU\S-1-5-21-4225948802-2122742746-3075298040-1001\...\Run: [Spotify] => C:\Users\Wojciech\AppData\Roaming\Spotify\Spotify.exe [7112248 2015-04-11] (Spotify Ltd)
Startup: C:\Users\Wojciech\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Download O.S.T.R - Podrż Zwana Życiem _2015_ [mp3@320kbps] Torrent - KickassTorrents.lnk
ShortcutTarget: Download O.S.T.R - Podrż Zwana Życiem _2015_ [mp3@320kbps] Torrent - KickassTorrents.lnk -> C:\ProgramData\{25d3b77b-69e6-e5db-25d3-3b77b69edded}\Download O.S.T.R - Podrż Zwana Życiem _2015_ [mp3@320kbps] Torrent - KickassTorrents.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 87.204.204.204 62.233.233.233

FireFox:
========
FF Plugin: @cuminas.jp/DjVuPlugin -> C:\Program Files\Cuminas\Document Express DjVu Plug-in\npdjvu.dll [2015-02-17] (Cuminas Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @cuminas.jp/DjVuPlugin -> C:\Program Files (x86)\Cuminas\Document Express DjVu Plug-in\npdjvu.dll [2015-02-17] (Cuminas Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)
FF Plugin-x32: @wolfram.com/Mathematica -> C:\Program Files (x86)\Common Files\Wolfram Research\Browser\10.0.1.5157423\npmathplugin.dll [2014-09-09] (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin HKU\S-1-5-21-4225948802-2122742746-3075298040-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Wojciech\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3416016 2015-03-25] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [309232 2015-03-25] (AVG Technologies CZ, s.r.o.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-12] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-12-12] ()
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [35328 2013-10-30] (Validity Sensors, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [281056 2015-03-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [203544 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [341472 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [133088 2015-02-05] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [289248 2015-03-19] (AVG Technologies CZ, s.r.o.)
S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [249856 2010-03-24] (Huawei Technologies Co., Ltd.)
S3 intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [8982208 2012-07-25] (Intel Corporation) [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-14] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 14:58 - 2015-04-14 14:58 - 00000000 ____D () C:\Users\Wojciech\Desktop\FRST-OlderVersion
2015-04-14 14:50 - 2015-04-14 14:50 - 00005326 _____ () C:\Users\Wojciech\Desktop\naprawa.txt
2015-04-13 14:16 - 2015-04-13 14:16 - 01906601 _____ () C:\Users\Wojciech\Desktop\Strategia-Limanowa.odp
2015-04-13 10:39 - 2015-04-13 10:39 - 01278001 _____ () C:\Users\Wojciech\Desktop\Strategia-rozwoju (1).pptx
2015-04-12 22:15 - 2015-04-12 22:15 - 00392336 _____ () C:\Windows\Minidump\041215-245531-01.dmp
2015-04-12 12:04 - 2015-04-12 12:04 - 00056966 _____ () C:\Users\Wojciech\Desktop\Shortcut.txt
2015-04-12 12:02 - 2015-04-12 12:04 - 00027716 _____ () C:\Users\Wojciech\Desktop\Addition.txt
2015-04-12 12:01 - 2015-04-14 15:07 - 00011960 _____ () C:\Users\Wojciech\Desktop\FRST.txt
2015-04-12 12:00 - 2015-04-14 15:07 - 00000000 ____D () C:\FRST
2015-04-12 10:51 - 2015-04-14 15:05 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-12 10:51 - 2015-04-12 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-04-12 10:51 - 2015-04-12 10:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-04-12 10:51 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-12 10:51 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-12 10:49 - 2015-04-12 10:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2015-04-12 10:49 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-12 10:48 - 2015-04-12 10:48 - 00380416 _____ () C:\Users\Wojciech\Desktop\ix28dvmh.exe
2015-04-12 10:46 - 2015-04-12 10:47 - 10284816 _____ (Malwarebytes Corporation ) C:\Users\Wojciech\Desktop\mbam-setup-1.75.0.1300.exe
2015-04-12 10:45 - 2015-04-14 14:58 - 02096640 _____ (Farbar) C:\Users\Wojciech\Desktop\FRST64.exe
2015-04-12 10:45 - 2015-04-12 10:45 - 02217984 _____ () C:\Users\Wojciech\Desktop\adwcleaner_4.201.exe
2015-04-11 20:18 - 2015-04-11 20:18 - 00000000 ____D () C:\Program Files (x86)\Hp
2015-04-11 19:08 - 2015-04-12 10:52 - 00000000 ____D () C:\AdwCleaner
2015-04-04 20:12 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-04-04 20:12 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-04-04 20:12 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2015-04-04 20:12 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2015-04-04 20:12 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2015-04-04 20:12 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2015-04-04 20:12 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2015-04-04 20:12 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2015-04-04 20:12 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2015-04-04 20:12 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2015-04-04 20:12 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-04-04 20:12 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-04-04 20:12 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2015-04-04 20:12 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2015-04-04 20:12 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2015-04-03 15:34 - 2015-04-03 15:42 - 00021897 _____ () C:\Users\Wojciech\Documents\zad.log
2015-04-03 15:34 - 2015-04-03 15:42 - 00001748 _____ () C:\Users\Wojciech\Documents\zad.synctex.gz
2015-04-03 15:34 - 2015-04-03 15:42 - 00000407 _____ () C:\Users\Wojciech\Documents\zad.tex
2015-04-03 15:34 - 2015-04-03 15:42 - 00000009 _____ () C:\Users\Wojciech\Documents\zad.aux
2015-04-03 13:54 - 2015-04-03 13:54 - 00000000 ____D () C:\Users\Wojciech\AppData\Local\My Games
2015-04-02 12:44 - 2015-04-02 13:42 - 00000000 ____D () C:\Users\Wojciech\AppData\Roaming\Room Arranger
2015-04-02 12:44 - 2015-04-02 13:42 - 00000000 ____D () C:\Users\Wojciech\AppData\Local\Room Arranger
2015-04-02 12:42 - 2015-04-02 13:10 - 00000000 ____D () C:\Users\Wojciech\Documents\Room Arranger
2015-04-02 12:42 - 2015-04-02 12:42 - 00000000 ____D () C:\ProgramData\Room Arranger
2015-04-02 12:42 - 2015-04-02 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Room Arranger
2015-04-02 12:42 - 2015-04-02 12:42 - 00000000 ____D () C:\Program Files\Room Arranger
2015-03-31 15:08 - 2015-03-31 15:08 - 02310511 _____ () C:\Users\Wojciech\Documents\Strategia-rozwojuolesko.pptx
2015-03-30 10:41 - 2015-04-13 10:43 - 02311728 _____ () C:\Users\Wojciech\Desktop\Strategia-rozwoju.pptx
2015-03-28 00:20 - 2015-03-28 01:44 - 00000000 ____D () C:\Users\Wojciech\Desktop\205
2015-03-27 12:46 - 2015-03-27 12:46 - 00153600 _____ () C:\Users\Wojciech\Desktop\Inf_1S_3.xls
2015-03-26 00:10 - 2015-03-26 00:10 - 00010387 _____ () C:\Users\Wojciech\Desktop\sklepy.xlsx
2015-03-25 11:21 - 2015-03-25 11:21 - 00281056 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-03-23 13:17 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-23 13:17 - 2015-01-28 17:41 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-23 13:17 - 2015-01-28 17:41 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-03-23 13:17 - 2015-01-28 17:41 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-03-23 13:17 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-23 13:17 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-23 13:17 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-23 13:17 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2015-03-23 13:17 - 2014-10-29 04:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-03-23 13:17 - 2014-10-29 04:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-03-23 13:17 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-03-23 13:17 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-03-23 13:17 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-03-23 13:17 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-03-23 13:17 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-03-23 13:17 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-03-23 13:14 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-23 13:14 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-23 13:14 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-23 13:14 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-03-23 13:14 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-23 13:14 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-23 13:14 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-23 13:14 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-23 13:14 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-23 13:14 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-23 13:14 - 2015-02-20 04:35 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-23 13:14 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-23 13:14 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-23 13:14 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-23 13:14 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-03-23 13:14 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-23 13:14 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-23 13:14 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-23 13:14 - 2015-02-20 03:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-03-23 13:14 - 2015-02-20 03:56 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-03-23 13:14 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-03-23 13:14 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-23 13:14 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-23 13:14 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-23 13:14 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-23 13:14 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-23 13:14 - 2015-02-20 03:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-03-23 13:14 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-03-23 13:14 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-23 13:14 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-03-23 13:14 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-23 13:14 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-23 13:14 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-23 13:14 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-23 13:14 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-23 13:14 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-23 13:14 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-23 13:14 - 2015-02-13 03:38 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-23 13:14 - 2015-02-13 03:15 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-23 13:14 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-23 13:14 - 2015-01-12 03:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-23 13:14 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-23 13:14 - 2015-01-12 03:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-23 13:13 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-23 13:13 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-23 13:13 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-23 13:13 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-23 13:13 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-23 13:13 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-23 13:13 - 2015-01-21 07:54 - 01384712 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-23 13:13 - 2015-01-21 07:15 - 01123848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-23 10:27 - 2015-03-23 17:54 - 01358785 _____ () C:\Users\Wojciech\Documents\naped.pptx
2015-03-20 13:51 - 2015-03-20 13:52 - 00000000 ____D () C:\Users\Wojciech\Desktop\pot
2015-03-19 16:05 - 2015-03-19 16:05 - 00289248 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgwfpa.sys
2015-03-17 22:28 - 2015-03-17 22:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cuminas
2015-03-17 22:28 - 2015-03-17 22:28 - 00000000 ____D () C:\Program Files\Cuminas
2015-03-17 22:28 - 2015-03-17 22:28 - 00000000 ____D () C:\Program Files (x86)\Cuminas

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-14 15:06 - 2014-09-14 10:09 - 00000000 ____D () C:\Users\Wojciech\AppData\Roaming\Spotify
2015-04-14 15:05 - 2015-03-04 13:06 - 00000000 __RDO () C:\Users\Wojciech\SkyDrive
2015-04-14 15:05 - 2014-09-14 10:12 - 00000000 ____D () C:\Users\Wojciech\AppData\Local\Spotify
2015-04-14 15:05 - 2014-01-20 11:02 - 00859648 ___SH () C:\Users\Wojciech\Desktop\Thumbs.db
2015-04-14 15:04 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-14 15:03 - 2014-12-14 14:52 - 00148058 _____ () C:\Windows\PFRO.log
2015-04-14 15:03 - 2014-12-06 21:46 - 00014490 _____ () C:\Windows\setupact.log
2015-04-14 15:01 - 2014-11-09 20:44 - 01978007 _____ () C:\Windows\WindowsUpdate.log
2015-04-14 15:01 - 2013-12-22 16:44 - 00000000 ____D () C:\Users\Wojciech
2015-04-14 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-14 14:59 - 2013-12-22 16:46 - 00001634 _____ () C:\Users\Wojciech\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-14 14:55 - 2014-01-06 00:36 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-14 14:34 - 2014-02-16 01:43 - 00000000 ____D () C:\ProgramData\MFAData
2015-04-14 14:34 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-04-14 09:30 - 2013-12-22 16:43 - 01825074 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-14 09:30 - 2013-08-23 01:12 - 00807160 _____ () C:\Windows\system32\perfh015.dat
2015-04-14 09:30 - 2013-08-23 01:12 - 00163478 _____ () C:\Windows\system32\perfc015.dat
2015-04-13 16:26 - 2014-09-14 14:43 - 00000000 ____D () C:\Users\Wojciech\.gimp-2.8
2015-04-13 15:54 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-13 13:11 - 2014-01-05 16:22 - 00096776 _____ () C:\Users\Wojciech\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-13 10:35 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-12 22:15 - 2014-02-12 16:26 - 00000000 ____D () C:\Windows\Minidump
2015-04-12 11:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\schemas
2015-04-12 10:55 - 2013-08-22 16:44 - 05120128 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-12 10:51 - 2014-02-16 01:06 - 00000000 ____D () C:\Users\Wojciech\AppData\Roaming\Malwarebytes
2015-04-12 10:51 - 2014-02-16 01:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-11 20:18 - 2013-12-22 17:00 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2015-04-11 18:56 - 2014-09-14 10:12 - 00001856 _____ () C:\Users\Wojciech\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-04-11 10:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2015-04-11 10:28 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-11 10:27 - 2014-01-04 16:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-11 10:27 - 2013-12-24 12:45 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-11 10:04 - 2014-10-24 08:10 - 00000000 ____D () C:\ProgramData\AVG2015
2015-04-11 01:41 - 2013-12-22 18:17 - 00000000 ____D () C:\Users\Wojciech\AppData\Roaming\uTorrent
2015-04-10 00:03 - 2014-01-11 15:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-07 11:06 - 2013-12-29 11:48 - 00000000 ____D () C:\Users\Wojciech\AppData\Roaming\foobar2000
2015-04-04 20:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-03 13:54 - 2014-02-16 12:48 - 00000000 ____D () C:\Users\Wojciech\Documents\my games
2015-04-03 13:53 - 2014-12-12 17:57 - 00053841 _____ () C:\Windows\DirectX.log
2015-03-31 13:54 - 2014-03-31 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-03-26 14:16 - 2014-10-24 08:02 - 00000000 ____D () C:\Users\Wojciech\AppData\Local\Avg2015
2015-03-23 18:58 - 2014-12-14 20:11 - 00046592 ___SH () C:\Users\Wojciech\Documents\Thumbs.db
2015-03-19 15:20 - 2014-11-24 12:51 - 00000000 ___RD () C:\Users\Wojciech\Desktop\zadania 3 rok

==================== Files in the root of some directories =======

2014-02-05 15:01 - 2014-02-05 15:01 - 0000044 _____ () C:\Users\Wojciech\AppData\Roaming\WB.CFG
2014-02-12 16:38 - 2014-08-14 13:59 - 0000600 _____ () C:\Users\Wojciech\AppData\Local\PUTTY.RND
2015-03-09 00:35 - 2015-03-09 00:35 - 0002367 _____ () C:\Users\Wojciech\AppData\Local\recently-used.xbel
2014-07-03 17:57 - 2015-01-20 21:23 - 0007593 _____ () C:\Users\Wojciech\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2013-12-22 16:34

==================== End Of Log ============================