Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-05-2015
Ran by leszek (administrator) on JOLA-KOMPUTER on 02-06-2015 19:50:14
Running from C:\Users\leszek\Desktop\Nowy folder
Loaded Profiles: JOLA & leszek (Available Profiles: JOLA & leszek)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(mst software GmbH, Germany) C:\Program Files\Ashampoo\Ashampoo WinOptimizer 10\DfSdkS.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Reputation\fsorsp.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [NSU_agent] => "C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
HKLM\...\Run: [NBAgent] => "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
HKLM\...\Run: [USBToolTip] => C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [332288 2010-12-17] ()
HKLM\...\Run: [F-Secure Manager] => C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSM32.EXE [310208 2013-08-14] (F-Secure Corporation)
HKLM\...\Run: [F-Secure Hoster (46267)] => C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
HKU\S-1-5-21-3924117992-576461840-467304932-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3924117992-576461840-467304932-1001\...\MountPoints2: {0c42d862-0d78-11e2-85f7-00235a82dc21} - F:\autorun.bat
HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\Run: [MyCuteBuddy] => "C:\Program Files\My Cute Buddy\myCuteBuddy.exe" "file:///C:/Program Files/My Cute Buddy/Content/Cute Kitty/piticho.buddy" /m /u
HKU\S-1-5-21-3924117992-576461840-467304932-1003\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1565504 2015-02-24] (Samsung)
Startup: C:\Users\leszek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Torpedo.lnk [2014-11-11]
ShortcutTarget: Torpedo.lnk -> C:\Users\leszek\AppData\Local\Torpedo\Torpedo.exe (No File)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll [2013-01-17] (GG Network S.A.)
CHR HKU\S-1-5-21-3924117992-576461840-467304932-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3924117992-576461840-467304932-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://pl.yhs4.search.yahoo.com/?hspart=avast&hsimp=yhs-001&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3924117992-576461840-467304932-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKU\S-1-5-21-3924117992-576461840-467304932-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
HKU\S-1-5-21-3924117992-576461840-467304932-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = http://pl.yhs4.search.yahoo.com/?hspart=avast&hsimp=yhs-001&type=avastbcl
HKU\S-1-5-21-3924117992-576461840-467304932-1003\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/
URLSearchHook: HKU\S-1-5-21-3924117992-576461840-467304932-1001 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} -  No File
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=mlv&from=mlv&uid=3219913727_67194_E4491345&ts=3145797
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1001 -> DefaultScope {A78AF166-F8FF-4F40-9406-5CA1838123CF} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1001 -> {A78AF166-F8FF-4F40-9406-5CA1838123CF} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1003 -> DefaultScope {EE787C3C-9781-4F60-9144-867CF372E02C} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1003 -> {083B013B-BC06-4A46-8F86-5C8FCC449C95} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3176921&CUI=UN26636382493222292&UM=2
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1003 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = http://pl.yhs4.search.yahoo.com/yhs/search?hspart=avast&hsimp=yhs-001&type=avastbcl&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3924117992-576461840-467304932-1003 -> {EE787C3C-9781-4F60-9144-867CF372E02C} URL = https://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} ->  No File
BHO: fassurun -> {e6efad0c-2d79-4b0d-8996-3e759a9c7914} ->  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Hosts: 127.0.0.1	localhost
Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.delta-homes.com/?utm_source=b&utm_medium=newgdp&utm_campaign=eXQ&utm_content=sc&from=newgdp&uid=3219913727_67194_E4491345&ts=1380449203

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-04-20] (Google)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-30]
CHR Extension: (YouTube) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-12]
CHR Extension: (Google Search) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-12]
CHR Extension: (BonanzaDeals) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2014-02-13]
CHR Extension: (Lightning Newtab) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo [2014-02-13]
CHR Extension: (express-files) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibmmjhgclhlahmjniokmhleigemjpbh [2014-02-24]
CHR Extension: (\x4c\x79\x72\x6d\x69\x78) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidmhllhjmmmnpbiaihafgchacpmokof [2013-10-10]
CHR Extension: (Skype Click to Call) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-13]
CHR Extension: (Helper extension) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla [2013-08-05]
CHR Extension: (Google Wallet) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-13]
CHR Extension: (Gmail) - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-12]
CHR HKLM\...\Chrome\Extension: [hjeglkhenpckoocpnajnnmcehdkcemnm] - C:\Program Files\fassurun\hjeglkhenpckoocpnajnnmcehdkcemnm.crx [Not Found]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\leszek\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx [2013-08-25]
CHR HKLM\...\Chrome\Extension: [iibmmjhgclhlahmjniokmhleigemjpbh] - C:\Users\leszek\AppData\Local\CRE\iibmmjhgclhlahmjniokmhleigemjpbh.crx [2013-03-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKU\S-1-5-21-3924117992-576461840-467304932-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [iibmmjhgclhlahmjniokmhleigemjpbh] - C:\Users\leszek\AppData\Local\CRE\iibmmjhgclhlahmjniokmhleigemjpbh.crx [2013-03-11]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]
R2 fshoster; C:\Program Files\Pakiet Bezpieczenstwa UPC\fshoster32.exe [191424 2013-05-15] (F-Secure Corporation)
R3 FSMA; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Common\FSMA32.EXE [216000 2013-08-14] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Reputation\fsorsp.exe [60456 2015-03-09] (F-Secure Corporation)
S2 KMService; C:\Windows\system32\srvany.exe [8192 2012-10-06] () [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\DRIVERS\athr.sys [3081216 2012-11-22] (Qualcomm Atheros Communications, Inc.)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [26224 2009-02-05] ()
R3 F-Secure Gatekeeper; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [152104 2015-02-24] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\HIPS\drivers\fshs.sys [74920 2015-04-14] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [43560 2015-05-26] ()
R3 fsni; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\CCF_Scanning\bin\fsni32.sys [75168 2015-04-15] (F-Secure Corporation)
R1 fsvista; C:\Program Files\Pakiet Bezpieczenstwa UPC\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12736 2013-08-14] ()
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2014-04-01] (Duplex Secure Ltd.)
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2011-03-14] (Samsung Electronics) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 NVHDA; system32\drivers\nvhda32v.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-02 19:47 - 2015-06-02 19:50 - 00000000 ____D () C:\Users\leszek\Desktop\Nowy folder
2015-06-02 18:45 - 2015-06-02 18:45 - 00000000 ____D () C:\Users\leszek\AppData\Local\GWX
2015-06-02 18:31 - 2015-06-02 18:31 - 00000000 ____D () C:\Users\JOLA\AppData\Local\GWX
2015-05-15 22:26 - 2015-05-15 22:26 - 00016344 _____ () C:\Users\leszek\Desktop\informacjeosystemie.txt
2015-05-15 13:14 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-15 12:53 - 2015-05-15 22:06 - 00000000 ____D () C:\LAPTOP
2015-05-13 20:47 - 2015-05-13 20:47 - 00000000 ____D () C:\f0ab3d4fa844646307
2015-05-13 20:03 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 20:03 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 20:03 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 20:02 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 20:02 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-13 20:02 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 20:02 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 20:02 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 20:02 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 20:02 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 20:02 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 20:02 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 20:02 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 20:02 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 20:02 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 20:02 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 20:02 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 20:02 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 20:02 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 20:02 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 20:02 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 20:02 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 20:02 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 20:02 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 20:02 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 20:02 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 20:02 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 20:01 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 20:01 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 20:01 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 20:01 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 20:01 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 20:01 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 20:01 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 20:01 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 20:01 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 20:01 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 20:01 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 20:01 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 20:01 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 20:01 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 20:01 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 20:01 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 20:01 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 20:01 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 20:01 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 20:01 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 20:01 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 20:01 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 20:01 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 20:01 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 20:01 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 20:01 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 20:01 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 20:01 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 20:01 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 20:01 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 20:01 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 20:01 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 20:01 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 20:01 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 20:01 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 20:01 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 20:01 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 20:01 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 20:01 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-04 21:42 - 2015-05-04 21:42 - 00000000 ____D () C:\Users\JOLA\Tracing

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-02 19:50 - 2013-10-21 18:17 - 00000000 ____D () C:\FRST
2015-06-02 19:47 - 2009-07-14 06:34 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-02 19:47 - 2009-07-14 06:34 - 00023376 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-02 19:33 - 2013-05-12 12:33 - 00000282 _____ () C:\Windows\Tasks\DSite.job
2015-06-02 19:33 - 2013-02-11 16:29 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-02 19:04 - 2012-07-02 21:19 - 02092072 _____ () C:\Windows\WindowsUpdate.log
2015-06-02 19:01 - 2015-03-15 02:00 - 00009368 _____ () C:\Windows\setupact.log
2015-06-02 19:01 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-06-02 18:35 - 2014-08-15 10:00 - 00000000 ____D () C:\Users\JOLA\AppData\Local\Adobe
2015-06-01 23:11 - 2012-11-04 20:16 - 00000000 ____D () C:\Users\JOLA\AppData\Roaming\Skype
2015-05-31 22:37 - 2014-05-30 21:56 - 00000000 ____D () C:\Users\leszek\AppData\Roaming\GG
2015-05-27 21:53 - 2012-11-04 20:16 - 00000000 ___RD () C:\Program Files\Skype
2015-05-26 23:30 - 2014-10-11 19:07 - 00000000 ____D () C:\Users\JOLA\Desktop\gokarty
2015-05-26 22:51 - 2012-07-02 21:28 - 01670518 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-26 22:51 - 2009-07-14 10:07 - 00740672 _____ () C:\Windows\system32\perfh015.dat
2015-05-26 22:51 - 2009-07-14 10:07 - 00156214 _____ () C:\Windows\system32\perfc015.dat
2015-05-26 16:36 - 2014-11-11 16:09 - 00043560 _____ () C:\Windows\system32\Drivers\fsbts.sys
2015-05-22 14:28 - 2015-04-04 23:58 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-19 19:26 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-17 19:14 - 2012-07-03 20:34 - 00000000 ____D () C:\Users\leszek\AppData\Local\Adobe
2015-05-17 19:13 - 2012-07-02 21:28 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-17 19:13 - 2012-07-02 21:28 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-15 21:48 - 2012-07-10 20:56 - 00000000 ____D () C:\Users\leszek\Documents\DPS
2015-05-15 20:02 - 2009-07-14 10:28 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-15 14:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-05-15 13:52 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-15 13:43 - 2009-07-14 06:33 - 03910648 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-15 13:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2015-05-15 13:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-15 13:13 - 2013-08-15 11:39 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-15 13:05 - 2012-07-03 00:19 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-04 21:42 - 2012-07-02 21:26 - 00000000 ____D () C:\Users\JOLA
2015-05-04 21:41 - 2012-11-04 20:15 - 00000000 ____D () C:\ProgramData\Skype

==================== Files in the root of some directories =======

2013-05-15 12:36 - 2013-05-15 12:36 - 0019822 _____ () C:\Program Files\AutoMapa EU.md5
2012-12-08 21:23 - 2012-12-08 21:23 - 0000288 _____ () C:\Users\leszek\AppData\Roaming\.backup.dm
2012-10-11 15:36 - 2015-01-31 01:20 - 0014177 _____ () C:\Users\leszek\AppData\Roaming\JOLA-KOMPUTER.MTBF.txt
2012-10-27 22:30 - 2012-12-14 23:13 - 0000132 _____ () C:\Users\leszek\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF
2013-05-27 21:49 - 2013-05-27 21:49 - 0000132 _____ () C:\Users\leszek\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
2014-02-13 16:14 - 2015-01-31 01:22 - 0001020 _____ () C:\Users\leszek\AppData\Roaming\__AvidCloudManager.log
2014-02-13 16:14 - 2015-01-31 01:02 - 0001130 _____ () C:\Users\leszek\AppData\Roaming\__AvidCloudManagerPrevious.log
2012-10-11 17:49 - 2014-12-25 13:38 - 0013312 _____ () C:\Users\leszek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-22 22:02 - 2014-12-07 15:49 - 0007605 _____ () C:\Users\leszek\AppData\Local\resmon.resmoncfg
2015-02-02 12:54 - 2015-02-02 12:54 - 0003216 _____ () C:\Users\leszek\AppData\Local\unins000.dat
2015-02-02 12:54 - 2015-02-02 12:54 - 0707744 _____ () C:\Users\leszek\AppData\Local\unins000.exe
2015-02-02 12:54 - 2015-02-02 12:54 - 0011761 _____ () C:\Users\leszek\AppData\Local\unins000.msg
2012-10-11 20:19 - 2012-10-11 20:19 - 0000067 _____ () C:\ProgramData\__FileUploader.log

Some files in TEMP:
====================
C:\Users\JOLA\AppData\Local\temp\i4jdel0.exe
C:\Users\JOLA\AppData\Local\temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\JOLA\AppData\Local\temp\install_flashplayer11x32ax_gtbp_chra_aih.exe
C:\Users\JOLA\AppData\Local\temp\install_flashplayer11x32ax_gtbp_chra_aih_1.exe
C:\Users\JOLA\AppData\Local\temp\jre-7u55-windows-i586-iftw.exe
C:\Users\JOLA\AppData\Local\temp\jre-7u71-windows-i586-iftw.exe
C:\Users\JOLA\AppData\Local\temp\NEventMessages.dll
C:\Users\JOLA\AppData\Local\temp\NOSEventMessages.dll
C:\Users\JOLA\AppData\Local\temp\SkypeSetup.exe
C:\Users\leszek\AppData\Local\temp\ggdrive-menu.exe
C:\Users\leszek\AppData\Local\temp\ggdrive-overlay.exe
C:\Users\leszek\AppData\Local\temp\i4jdel0.exe
C:\Users\leszek\AppData\Local\temp\installstats.exe
C:\Users\leszek\AppData\Local\temp\install_flashplayer17x32axau_gtbd_chrd_dn_aaa_aih.exe
C:\Users\leszek\AppData\Local\temp\ose00003.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-27 17:16

==================== End of log ============================