Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-05-2015
Ran by Mirek (administrator) on MIREK-KOMPUTER on 04-05-2015 11:02:10
Running from C:\Users\Mirek\Desktop
Loaded Profiles: Mirek (Available profiles: Mirek)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Autodesk Inc.) C:\Program Files\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Akamai Technologies, Inc.) C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
(Akamai Technologies, Inc.) C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe
(Autodesk Inc.) C:\Users\Mirek\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.7.0.11\nis.exe
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\21.7.0.11\nis.exe
(AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Blizzard Entertainment) D:\Program Files\Battle.net\Battle.net.5669\Battle.net.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(Valve Corporation) D:\Program Files\Steam\Steam.exe
(Valve Corporation) D:\Program Files\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe
() D:\Program Files\Hearthstone\Hearthstone.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [LifeCam] => C:\Program Files\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM\...\Run: [NeroCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-04-03] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM\...\Run: [ADSK DLMSession] => C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1627032 2014-02-05] (Autodesk, Inc.)
HKLM\...\Run: [ADSKAppManager] => C:\Program Files\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
HKU\S-1-5-21-3906198643-2151299363-1251718266-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\S-1-5-21-3906198643-2151299363-1251718266-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3906198643-2151299363-1251718266-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3906198643-2151299363-1251718266-1000\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1059720 2014-05-01] (Autodesk, Inc.)
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1059720 2014-05-01] (Autodesk, Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-04-27] (Microsoft Corporation)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-04-04]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk [2014-04-07]
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk -> C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Mirek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk [2014-04-07]
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
URLSearchHook: HKLM - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = 
SearchScopes: HKU\S-1-5-21-3906198643-2151299363-1251718266-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3906198643-2151299363-1251718266-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3906198643-2151299363-1251718266-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = 
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
BHO: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL [2015-03-05] (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_40\bin\ssv.dll [2015-03-20] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-20] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.7.0.11\coIEPlg.dll [2015-03-05] (Symantec Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\g3yqmpp8.default-1425574685874
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-sw-18__alt__ddc_dsssyctab_bd_com
FF SelectedSearchEngine: Yahoo! Search
FF Homepage: about:home
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-sw-18__alt__ddc_dss_bd_com&p={searchTerms}
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3906198643-2151299363-1251718266-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mirek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
FF Extension: Adblock Plus - C:\Users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\g3yqmpp8.default-1425574685874\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-05]
FF Extension: Roll Around - C:\Users\Mirek\AppData\Roaming\Mozilla\Firefox\Profiles\g3yqmpp8.default-1425574685874\Extensions\{e3d880ce-aecd-4f8f-a17a-897f59eafe08}.xpi [2015-03-05]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.4.0.13\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.4.0.13\coFFPlgn [2015-05-04]
FF HKU\S-1-5-21-3906198643-2151299363-1251718266-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - http://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files\Norton Internet Security\Engine\21.7.0.11\Exts\Chrome.crx [2015-03-24]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdAppMgrSvc; C:\Program Files\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
S3 BITCOMET_HELPER_SERVICE; D:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe [1087792 2015-01-22] (Flexera Software LLC)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 NIS; C:\Program Files\Norton Internet Security\Engine\21.7.0.11\NIS.exe [276336 2015-03-07] (Symantec Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2166584 2014-10-17] (AVG Technologies)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 BHDrvx86; C:\Program Files\Norton Internet Security\NortonData\21.4.0.13\Definitions\BASHDefs\20141003.001\BHDrvx86.sys [1138392 2014-10-03] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NIS\1507000.00B\ccSetx86.sys [127064 2014-02-21] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [378672 2014-09-09] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [111408 2014-09-09] (Symantec Corporation)
R1 IDSVix86; C:\Program Files\Norton Internet Security\NortonData\21.4.0.13\Definitions\IPSDefs\20141003.001\IDSvix86.sys [476888 2014-08-27] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
S3 NAVENG; C:\Program Files\Norton Internet Security\NortonData\21.4.0.13\Definitions\VirusDefs\20141005.001\NAVENG.SYS [95704 2014-10-03] (Symantec Corporation)
S3 NAVEX15; C:\Program Files\Norton Internet Security\NortonData\21.4.0.13\Definitions\VirusDefs\20141005.001\NAVEX15.SYS [1636696 2014-10-03] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NIS\1507000.00B\SRTSP.SYS [664792 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NIS\1507000.00B\SRTSPX.SYS [32984 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NIS\1507000.00B\SYMDS.SYS [367704 2013-10-30] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NIS\1507000.00B\SYMEFA.SYS [936152 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2014-07-25] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NIS\1507000.00B\Ironx86.SYS [209624 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NIS\1507000.00B\SYMNETS.SYS [447704 2014-02-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2014-09-09] (TuneUp Software)
S3 usb_rndis; C:\Windows\System32\DRIVERS\usb8023.sys [15872 2013-02-12] (Microsoft Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-04 11:02 - 2015-05-04 11:02 - 00016823 _____ () C:\Users\Mirek\Desktop\FRST.txt
2015-05-04 10:09 - 2015-05-04 10:09 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-04 10:09 - 2015-05-04 10:09 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-04 10:09 - 2015-05-04 10:09 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-04 10:09 - 2015-05-04 10:09 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-03 16:41 - 2015-05-03 16:41 - 00002201 _____ () C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk
2015-05-03 16:41 - 2015-05-03 16:41 - 00002171 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-05-03 16:41 - 2015-05-03 16:41 - 00000000 ____D () C:\Users\Mirek\AppData\Roaming\AVG
2015-05-03 16:41 - 2015-05-03 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
2015-05-03 16:41 - 2014-10-17 12:34 - 00036152 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe
2015-05-03 16:41 - 2014-10-17 12:34 - 00025400 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll
2015-05-03 16:40 - 2015-05-03 16:40 - 00000000 ____D () C:\Users\Mirek\AppData\Local\Avg
2015-05-03 16:40 - 2015-05-03 16:40 - 00000000 ____D () C:\Program Files\AVG
2015-05-03 16:39 - 2015-05-03 16:45 - 00000000 ____D () C:\ProgramData\AVG
2015-05-03 16:39 - 2015-05-03 16:39 - 00002276 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-05-03 16:39 - 2015-05-03 16:39 - 00001203 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2015-05-03 16:39 - 2015-05-03 16:39 - 00000000 ____D () C:\Users\Mirek\AppData\Roaming\RPEng
2015-05-03 16:39 - 2015-05-03 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-05-03 16:39 - 2015-05-03 16:39 - 00000000 ____D () C:\Program Files\Free Codec Pack
2015-05-03 16:39 - 2015-05-03 16:39 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2015-05-03 16:39 - 2015-05-03 16:39 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2015-05-03 16:37 - 2015-05-03 16:38 - 36124056 _____ (DVDVideoSoft Ltd. ) C:\Users\Mirek\Downloads\FreeYouTubeToMP3Converter(1).exe
2015-05-03 14:36 - 2015-05-03 14:37 - 00047557 _____ () C:\Users\Mirek\Downloads\Shortcut.txt
2015-05-03 14:35 - 2015-05-03 14:36 - 00037136 _____ () C:\Users\Mirek\Downloads\Addition.txt
2015-05-03 14:35 - 2015-05-03 14:36 - 00024674 _____ () C:\Users\Mirek\Downloads\FRST.txt
2015-05-03 14:34 - 2015-05-04 11:02 - 00000000 ____D () C:\FRST
2015-05-03 14:34 - 2015-05-03 14:34 - 01140736 _____ (Farbar) C:\Users\Mirek\Desktop\FRST.exe
2015-05-03 12:31 - 2015-05-03 12:47 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-03 12:30 - 2015-05-03 12:46 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-03 12:30 - 2015-05-03 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-03 12:30 - 2015-05-03 12:46 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-05-03 12:30 - 2015-05-03 12:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-03 12:30 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-03 12:30 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-03 12:30 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-03 12:27 - 2015-05-03 12:27 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Mirek\Downloads\mbam-setup-2.1.4.1018.exe
2015-05-01 18:36 - 2015-05-01 18:36 - 00000000 ____D () C:\Users\Mirek\Tracing
2015-04-28 18:42 - 2015-04-28 18:42 - 00000213 _____ () C:\Users\Mirek\Desktop\Counter-Strike Source.url
2015-04-28 18:16 - 2015-04-28 18:16 - 00000000 ____D () C:\Users\Mirek\AppData\Local\Steam
2015-04-28 15:45 - 2015-04-28 15:46 - 00000000 ____D () C:\Users\Mirek\Downloads\Pokemon FireRed PL
2015-04-28 15:44 - 2015-04-28 15:44 - 05530394 _____ () C:\Users\Mirek\Downloads\Pokemon FireRed PL.rar
2015-04-21 22:15 - 2015-04-21 22:15 - 02656396 _____ () C:\Users\Mirek\Downloads\Model Ochrony Zdrowia.pptx
2015-04-20 20:05 - 2015-04-20 20:05 - 00000000 ____D () C:\Users\Mirek\AppData\Roaming\Design Science
2015-04-20 20:05 - 2015-04-20 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MathType 6
2015-04-20 20:05 - 2015-04-20 20:05 - 00000000 ____D () C:\Program Files\MathType
2015-04-20 20:04 - 2015-04-20 20:04 - 10299352 _____ (Design Science, Inc.) C:\Users\Mirek\Downloads\installmtw6.9.exe
2015-04-20 09:12 - 2015-04-20 10:05 - 00928734 _____ () C:\Users\Mirek\Desktop\Model Ochrony Zdrowia.pptx
2015-04-08 20:24 - 2015-04-08 20:25 - 05317127 _____ () C:\Users\Mirek\Downloads\pokemonfire_red_version.zip
2015-04-08 20:14 - 2015-04-08 20:15 - 05324444 _____ () C:\Users\Mirek\Downloads\1695 - Pokemon Fire Red (U)(Independent).zip
2015-04-08 20:10 - 2015-04-08 20:25 - 00000000 ____D () C:\Users\Mirek\Downloads\VisualBoyAdvance1.8.0_www.INSTALKI.pl
2015-04-08 20:09 - 2015-04-08 20:09 - 00659797 _____ () C:\Users\Mirek\Downloads\VisualBoyAdvance1.8.0_www.INSTALKI.pl.zip
2015-04-07 11:06 - 2015-04-07 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-04-07 11:06 - 2015-04-07 11:06 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2015-04-04 11:06 - 2015-04-07 11:06 - 00002012 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-04-04 11:06 - 2015-04-07 11:06 - 00000000 ____D () C:\ProgramData\McAfee Security Scan

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-04 11:01 - 2014-04-06 21:20 - 00000000 ____D () C:\Users\Mirek\AppData\Local\Battle.net
2015-05-04 10:21 - 2014-04-06 18:07 - 00000000 ____D () C:\Users\Mirek\AppData\Roaming\Skype
2015-05-04 10:10 - 2014-04-06 15:30 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-04 09:27 - 2014-04-06 13:55 - 01431197 _____ () C:\Windows\WindowsUpdate.log
2015-05-04 09:20 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-04 09:20 - 2009-07-14 06:39 - 00084156 _____ () C:\Windows\setupact.log
2015-05-03 19:31 - 2014-04-06 17:39 - 00088986 _____ () C:\Windows\PFRO.log
2015-05-03 17:26 - 2009-07-14 06:34 - 00010128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-03 17:26 - 2009-07-14 06:34 - 00010128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-03 16:40 - 2014-04-08 12:11 - 00000000 ____D () C:\Users\Mirek\AppData\Roaming\DVDVideoSoft
2015-05-03 16:20 - 2014-09-14 21:22 - 00000224 _____ () C:\Users\Mirek\BullseyeCoverageError.txt
2015-05-01 18:36 - 2014-10-05 17:08 - 00000000 ___RD () C:\Program Files\Skype
2015-05-01 18:36 - 2014-04-06 18:07 - 00000000 ____D () C:\ProgramData\Skype
2015-05-01 18:36 - 2014-04-06 14:00 - 00000000 ____D () C:\Users\Mirek
2015-04-28 18:35 - 2014-12-20 20:23 - 00000000 ____D () C:\Program Files\Common Files\Steam
2015-04-26 23:02 - 2014-12-10 20:11 - 00000000 ____D () C:\Users\Mirek\Desktop\BO
2015-04-25 21:54 - 2014-04-06 18:16 - 00000000 ____D () C:\Users\Mirek\AppData\Local\CrashDumps
2015-04-22 20:54 - 2014-04-07 08:17 - 00000000 ___RD () C:\Users\Mirek\Desktop\Pliki Mamy
2015-04-21 22:18 - 2014-04-06 14:03 - 04181056 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-21 22:18 - 2009-09-04 07:55 - 00715790 _____ () C:\Windows\system32\perfh019.dat
2015-04-21 22:18 - 2009-09-04 07:55 - 00150096 _____ () C:\Windows\system32\perfc019.dat
2015-04-21 22:18 - 2009-09-04 07:44 - 00739694 _____ () C:\Windows\system32\perfh015.dat
2015-04-21 22:18 - 2009-09-04 07:44 - 00155268 _____ () C:\Windows\system32\perfc015.dat
2015-04-21 08:08 - 2009-07-14 06:33 - 00397904 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-20 20:05 - 2014-04-06 14:54 - 00105592 _____ () C:\Users\Mirek\AppData\Local\GDIPFONTCACHEV1.DAT
2015-04-15 19:11 - 2014-04-06 15:30 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-15 19:11 - 2014-04-06 15:30 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-04 11:07 - 2014-04-07 17:35 - 00000000 ____D () C:\Users\Mirek\AppData\Local\Adobe

==================== Files in the root of some directories =======

2014-04-06 18:00 - 2014-04-06 18:00 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-01-21 17:24 - 2015-01-21 17:24 - 0000147 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some content of TEMP:
====================
C:\Users\Mirek\AppData\Local\Temp\AcDeltree.exe
C:\Users\Mirek\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\Mirek\AppData\Local\Temp\DLMGuardian.exe
C:\Users\Mirek\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Mirek\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Mirek\AppData\Local\Temp\ose00000.exe
C:\Users\Mirek\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mirek\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Mirek\AppData\Local\Temp\tmd_34011708.exe
C:\Users\Mirek\AppData\Local\Temp\tmd_34014520.exe
C:\Users\Mirek\AppData\Local\Temp\tmd_34015316.exe
C:\Users\Mirek\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-24 13:40

==================== End Of Log ============================