Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by Użytkownik (administrator) on UŻYTKOWNIK-PC on 02-06-2015 22:12:12
Running from C:\Users\Użytkownik\Desktop
Loaded Profiles: Użytkownik (Available Profiles: Użytkownik)
Platform: Windows 7 Home Premium (X64) OS Language: Polski (Polska)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Windows\DAODx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(BitTorrent, Inc.) C:\Program Files (x86)\uTorrent\uTorrent.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [gmsd_pl_118] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [963984 2012-10-21] (BitTorrent, Inc.)
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\Run: [Google Update] => C:\Users\Użytkownik\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-06-20] (Google Inc.)
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {0e793c9c-55af-11e2-b430-bcaec54cf903} - K:\Startme.exe
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {221860a3-b4f4-11e4-9070-bcaec54cf903} - L:\AutoRun.exe
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {836eab7b-a8f2-11e2-8038-bcaec54cf903} - K:\iLinker.exe
HKU\S-1-5-21-3529014019-469410967-791373992-1000\...\MountPoints2: {f1cb6da0-b153-11e4-8fbf-bcaec54cf903} - K:\AutoRun.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds&ts=1432736239&z=1b2fff27370853c373676a1g2z7c6o3m8c7q3odcew&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds&ts=1432736239&z=1b2fff27370853c373676a1g2z7c6o3m8c7q3odcew&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
HKU\S-1-5-21-3529014019-469410967-791373992-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080
URLSearchHook: HKLM-x32 - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=dspp&ts=1432671597&z=7feb3c9bd38cdaf0c5628f5g9z7c0o1q9m2g9wft1g&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3529014019-469410967-791373992-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.oursurfing.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=SAMSUNGXHD103SJ_S246J9CB303080&ts=1432736324&type=default&q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-01] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-01] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2011-04-22] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2011-04-22] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2011-04-22] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2011-04-22] (Microsoft Corporation)
Winsock: Catalog9 01 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 02 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 03 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 04 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 05 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 06 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 07 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 08 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 09 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 10 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Winsock: Catalog9 21 C:\Program Files (x86)\YouTube Accelerator\ytalsp.dll [176584 2015-05-27] (GOOBZO)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1432671581&z=97b0e6b54f76478069f22f7gdz7cbodq5mcg6wcm5w&from=squadm&uid=SAMSUNGXHD103SJ_S246J9CB303080

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-21] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-21] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-01] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll No File
FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @talk.google.com/O1DPlugin -> C:\Users\Użytkownik\AppData\Roaming\Mozilla\plugins\npo1d.dll No File
FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Użytkownik\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Użytkownik\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin HKU\S-1-5-21-3529014019-469410967-791373992-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Użytkownik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-11-11] (Unity Technologies ApS)

Chrome: 
=======
CHR Profile: C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-23]
CHR Extension: (Google Drive) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-23]
CHR Extension: (YouTube) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-23]
CHR Extension: (Google Search) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-23]
CHR Extension: (HTTPS Everywhere) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2014-04-15]
CHR Extension: (AdBlock) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-23]
CHR Extension: (Bookmark Manager) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]
CHR Extension: (Glossy Blue) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nheaocaplknjkpcnbadlgfpdfjaabiml [2014-02-23]
CHR Extension: (Google Wallet) - C:\Users\Użytkownik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-25]
CHR HKU\S-1-5-21-3529014019-469410967-791373992-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kfecnpmgnlnbmipaogfhoacoioifjgko] - http://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.05\AsSysCtrlService.exe [109056 2010-06-24] () [File not signed]
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-01] (EasyAntiCheat Ltd)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
S2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [2572072 2013-10-23] (O&O Software GmbH)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910640 2015-03-11] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-04-27] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 YouTubeAcceleratorService; C:\PROGRA~2\YOUTUB~1\YouTubeAcceleratorService.exe -start -scm [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-04-22] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-22] (DT Soft Ltd)
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-02-19] (Sony Mobile Communications)
S3 ghsdiagMDM; C:\Windows\System32\DRIVERS\ghsdiagMDM.sys [122496 2011-11-28] (HS Incorporated)
S3 ghsmdm; C:\Windows\System32\DRIVERS\ghsmdm.sys [122496 2011-11-28] (HS Incorporated)
S3 ghsnmea; C:\Windows\System32\DRIVERS\ghsnmea.sys [122496 2011-11-28] (HS Incorporated)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-03] (Duplex Secure Ltd.)
S3 ssm_bus; C:\Windows\System32\DRIVERS\ssm_bus.sys [136192 2010-04-27] (MCCI Corporation)
S3 ssm_mdfl; C:\Windows\System32\DRIVERS\ssm_mdfl.sys [18944 2010-04-27] (MCCI Corporation)
S3 ssm_mdm; C:\Windows\System32\DRIVERS\ssm_mdm.sys [172032 2010-04-27] (MCCI Corporation)
S3 VASDeviceDrm; C:\Windows\System32\drivers\vasdDev.sys [1454896 2012-03-19] (ShiningMorning Inc.)
U3 aa9q8ink; C:\Windows\System32\Drivers\aa9q8ink.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 innfd_1_10_0_14; system32\drivers\innfd_1_10_0_14.sys [X]
S3 massfilter_hs; system32\drivers\massfilter_hs.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-02 22:12 - 2015-06-02 22:12 - 00019697 _____ () C:\Users\Użytkownik\Desktop\FRST.txt
2015-06-02 22:11 - 2015-06-02 22:12 - 00000000 ____D () C:\FRST
2015-06-02 15:38 - 2015-06-02 15:38 - 00380416 _____ () C:\Users\Użytkownik\Desktop\yfwjq57i.exe
2015-06-02 15:10 - 2015-06-02 15:10 - 02108928 _____ (Farbar) C:\Users\Użytkownik\Desktop\FRST64.exe
2015-06-02 14:34 - 2015-06-02 14:34 - 00000000 ____D () C:\AdwCleaner
2015-06-02 14:33 - 2015-06-02 14:33 - 02231296 _____ () C:\Users\Użytkownik\Desktop\adwcleaner_4.206.exe
2015-06-01 20:28 - 2015-06-01 20:28 - 00003008 _____ () C:\Windows\System32\Tasks\{7617F943-DBE4-41BF-BBCE-A5275E57BA2C}
2015-06-01 20:28 - 2015-06-01 20:28 - 00002677 _____ () C:\Users\Użytkownik\Desktop\Microsoft Office PowerPoint 2007.lnk
2015-06-01 14:25 - 2015-06-01 14:25 - 470363623 _____ () C:\Windows\MEMORY.DMP
2015-06-01 14:25 - 2015-06-01 14:25 - 00291896 _____ () C:\Windows\Minidump\060115-28142-01.dmp
2015-05-31 12:13 - 2015-05-31 12:13 - 00109680 _____ () C:\Users\Użytkownik\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-31 12:13 - 2015-05-31 12:13 - 00001451 _____ () C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-31 12:12 - 2015-06-02 22:06 - 00000448 _____ () C:\Windows\setupact.log
2015-05-31 12:12 - 2015-05-31 12:12 - 00411680 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-31 12:12 - 2015-05-31 12:12 - 00013348 _____ () C:\Windows\PFRO.log
2015-05-31 12:12 - 2015-05-31 12:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-05-31 10:08 - 2015-06-02 17:31 - 00000494 _____ () C:\Users\Użytkownik\Desktop\sraki.txt
2015-05-27 16:23 - 2015-06-02 22:06 - 00003454 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-1-6.job
2015-05-27 16:23 - 2015-06-02 22:06 - 00002776 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5.job
2015-05-27 16:23 - 2015-06-02 22:06 - 00002770 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5.job
2015-05-27 16:23 - 2015-05-27 16:23 - 00006828 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-1-7
2015-05-27 16:23 - 2015-05-27 16:23 - 00006482 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-1-6
2015-05-27 16:23 - 2015-05-27 16:23 - 00005806 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5
2015-05-27 16:23 - 2015-05-27 16:23 - 00005800 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5
2015-05-27 16:23 - 2015-05-27 16:23 - 00002776 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-5_user.job
2015-05-27 16:23 - 2015-05-27 16:23 - 00002770 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-5_user.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00006192 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-6.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00006186 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-6.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00005848 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-7.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00005842 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-7.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00005506 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-11.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00005500 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-11.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00003804 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-1-7.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00003798 _____ () C:\Windows\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-1-7.job
2015-05-27 16:22 - 2015-06-02 22:06 - 00003460 _____ () C:\Windows\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-1-6.job
2015-05-27 16:22 - 2015-05-27 16:23 - 00006488 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-1-6
2015-05-27 16:22 - 2015-05-27 16:22 - 00009220 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-6
2015-05-27 16:22 - 2015-05-27 16:22 - 00009214 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-6
2015-05-27 16:22 - 2015-05-27 16:22 - 00008878 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-7
2015-05-27 16:22 - 2015-05-27 16:22 - 00008872 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-7
2015-05-27 16:22 - 2015-05-27 16:22 - 00008536 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-11
2015-05-27 16:22 - 2015-05-27 16:22 - 00008530 _____ () C:\Windows\System32\Tasks\58cb26fc-88fc-4b84-8509-df3bde2bf29f-11
2015-05-27 16:22 - 2015-05-27 16:22 - 00006834 _____ () C:\Windows\System32\Tasks\e35df7b0-d0c6-4490-9e34-4abcdddce94d-1-7
2015-05-27 16:21 - 2015-05-27 16:21 - 00003290 _____ () C:\Windows\System32\Tasks\YTAUpdate_logon
2015-05-27 16:21 - 2015-05-27 16:21 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-05-27 16:20 - 2015-05-31 10:42 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2015-05-27 16:20 - 2015-05-27 16:20 - 00003476 _____ () C:\Windows\System32\Tasks\YTAUpdate
2015-05-27 16:20 - 2015-05-27 16:20 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2015-05-27 16:19 - 2015-05-27 16:19 - 00003540 _____ () C:\Windows\System32\Tasks\Inst_Rep
2015-05-27 16:14 - 2015-06-02 14:36 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\CrashDumps
2015-05-27 16:13 - 2015-05-27 16:13 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\WorldofTanks
2015-05-27 16:04 - 2015-05-27 16:04 - 00003016 _____ () C:\Windows\System32\Tasks\RegClean Prosch
2015-05-27 16:04 - 2015-05-27 16:04 - 00000260 _____ () C:\Windows\Tasks\RegClean Prosch.job
2015-05-27 15:56 - 2015-05-30 15:46 - 00001360 _____ () C:\Windows\SysWOW64\SetupComponents.exe
2015-05-26 22:37 - 2015-05-27 17:06 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
2015-05-26 22:37 - 2015-05-27 16:42 - 00000378 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2015-05-26 22:37 - 2015-05-27 16:30 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP3.job
2015-05-26 22:37 - 2015-05-27 16:30 - 00000376 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2015-05-26 22:37 - 2015-05-27 16:19 - 00002838 _____ () C:\Windows\System32\Tasks\APSnotifierPP1
2015-05-26 22:37 - 2015-05-27 16:19 - 00002836 _____ () C:\Windows\System32\Tasks\APSnotifierPP3
2015-05-26 22:37 - 2015-05-27 16:19 - 00002836 _____ () C:\Windows\System32\Tasks\APSnotifierPP2
2015-05-26 22:36 - 2015-05-26 22:36 - 00000000 ____D () C:\Windows\SysWOW64\Flash
2015-05-26 22:35 - 2015-05-26 22:35 - 00005486 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5
2015-05-26 22:35 - 2015-05-26 22:35 - 00002456 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5_user.job
2015-05-26 22:35 - 2015-05-26 22:35 - 00001020 _____ () C:\Windows\Tasks\clcs6qWQW9KWBy.job
2015-05-26 22:35 - 2015-05-26 22:35 - 00000000 __SHD () C:\Users\Użytkownik\AppData\Roaming\AnyProtectEx
2015-05-26 22:34 - 2015-06-02 22:06 - 00005528 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-7.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00005528 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-6.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00005194 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-11.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00004504 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-3.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00003484 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-1-7.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00003148 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-1-6.job
2015-05-26 22:34 - 2015-06-02 22:06 - 00002456 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-5.job
2015-05-26 22:34 - 2015-05-26 22:34 - 00008558 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-7
2015-05-26 22:34 - 2015-05-26 22:34 - 00008556 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-6
2015-05-26 22:34 - 2015-05-26 22:34 - 00008224 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-11
2015-05-26 22:34 - 2015-05-26 22:34 - 00007534 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-3
2015-05-26 22:34 - 2015-05-26 22:34 - 00006514 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-1-7
2015-05-26 22:34 - 2015-05-26 22:34 - 00006176 _____ () C:\Windows\System32\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-1-6
2015-05-26 22:34 - 2015-05-26 22:34 - 00002122 _____ () C:\Windows\Tasks\5c370db1-28ed-417f-affb-b64adc56545d-10_user.job
2015-05-26 22:34 - 2015-05-26 22:34 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\Windesk_Winsearch
2015-05-26 22:33 - 2015-05-26 22:33 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
2015-05-26 22:32 - 2015-05-27 16:14 - 00004064 _____ () C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task
2015-05-26 22:23 - 2015-06-02 22:06 - 00003114 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-1-6.job
2015-05-26 22:23 - 2015-06-02 22:06 - 00002422 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5.job
2015-05-26 22:23 - 2015-05-26 22:23 - 00006144 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-1-7
2015-05-26 22:23 - 2015-05-26 22:23 - 00006142 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-1-6
2015-05-26 22:23 - 2015-05-26 22:23 - 00005452 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5
2015-05-26 22:23 - 2015-05-26 22:23 - 00002422 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-5_user.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00005494 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-6.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00005160 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-11.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00005158 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-7.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00004134 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-3.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00003114 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-1-7.job
2015-05-26 22:22 - 2015-06-02 22:06 - 00000914 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-05-26 22:22 - 2015-06-02 16:27 - 00000918 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-05-26 22:22 - 2015-05-27 16:22 - 00003916 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-05-26 22:22 - 2015-05-27 16:22 - 00003662 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-05-26 22:22 - 2015-05-26 22:22 - 00008522 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-6
2015-05-26 22:22 - 2015-05-26 22:22 - 00008190 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-11
2015-05-26 22:22 - 2015-05-26 22:22 - 00008188 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-7
2015-05-26 22:22 - 2015-05-26 22:22 - 00007164 _____ () C:\Windows\System32\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-3
2015-05-26 22:22 - 2015-05-26 22:22 - 00002088 _____ () C:\Windows\Tasks\0433f2c7-2c8d-4753-9ad7-cf457723abaa-10_user.job
2015-05-26 22:22 - 2015-05-26 22:22 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\globalUpdate
2015-05-26 22:21 - 2015-06-02 15:01 - 00000268 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2015-05-26 22:21 - 2015-05-27 17:02 - 00003090 _____ () C:\Windows\System32\Tasks\RegClean Pro
2015-05-26 22:21 - 2015-05-27 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
2015-05-26 22:21 - 2015-05-27 15:56 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2015-05-26 22:21 - 2015-05-26 22:21 - 00003038 _____ () C:\Windows\System32\Tasks\RegClean Pro_UPDATES
2015-05-26 22:21 - 2015-05-26 22:21 - 00002882 _____ () C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
2015-05-26 22:21 - 2015-02-19 13:09 - 00020248 _____ () C:\Windows\system32\roboot64.exe
2015-05-26 22:18 - 2015-05-27 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digital Photo Software
2015-05-26 22:18 - 2015-05-26 22:33 - 00000000 ____D () C:\Users\Użytkownik\Documents\FotoMix Data
2015-05-26 22:03 - 2015-05-26 22:03 - 00003882 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1432670597
2015-05-26 22:03 - 2015-05-26 22:03 - 00003274 _____ () C:\Windows\System32\Tasks\Opera N Sunday
2015-05-26 22:03 - 2015-05-26 22:03 - 00003274 _____ () C:\Windows\System32\Tasks\Opera N Saturday
2015-05-26 22:03 - 2015-05-26 22:03 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\Opera Software
2015-05-25 21:41 - 2015-05-25 21:41 - 00012455 _____ () C:\Users\Użytkownik\Desktop\Bednarek - Sailing ucięta wersja.aup
2015-05-20 17:11 - 2015-05-20 17:14 - 549465600 _____ () C:\Users\Użytkownik\Desktop\DLAOLKIFASOLKIYOLO.avi
2015-05-19 22:42 - 2015-05-19 22:42 - 00400208 _____ () C:\Users\Użytkownik\Desktop\Untitled.camproj
2015-05-19 21:04 - 2015-05-19 21:05 - 00000000 ____D () C:\Users\Użytkownik\Desktop\Łambinowice
2015-05-19 16:41 - 2015-05-19 16:41 - 00000000 ____D () C:\Users\Użytkownik\Documents\Camtasia Studio
2015-05-19 16:41 - 2015-05-19 16:41 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\TechSmith
2015-05-19 16:41 - 2015-05-19 16:41 - 00000000 ____D () C:\Users\Użytkownik\AppData\Local\TechSmith
2015-05-19 16:27 - 2015-05-27 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-05-19 16:27 - 2015-05-19 16:27 - 00000000 ____D () C:\ProgramData\TechSmith
2015-05-19 16:27 - 2015-05-19 16:27 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2015-05-19 16:27 - 2015-05-19 16:27 - 00000000 ____D () C:\Program Files (x86)\QuickTime

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-02 22:13 - 2011-03-30 21:27 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\uTorrent
2015-06-02 22:10 - 2009-07-14 19:55 - 00808594 _____ () C:\Windows\system32\perfh015.dat
2015-06-02 22:10 - 2009-07-14 19:55 - 00181710 _____ () C:\Windows\system32\perfc015.dat
2015-06-02 22:10 - 2009-07-14 07:13 - 01862842 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-06-02 22:09 - 2014-06-20 21:42 - 00001078 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000UA.job
2015-06-02 22:09 - 2011-03-29 22:42 - 01629323 _____ () C:\Windows\WindowsUpdate.log
2015-06-02 22:06 - 2014-01-25 23:43 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf1a166e075df9.job
2015-06-02 22:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-06-02 17:50 - 2014-01-25 23:43 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf1a166e9fb60a.job
2015-06-02 17:44 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-02 17:44 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-02 17:25 - 2012-01-13 17:54 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\Skype
2015-06-02 14:36 - 2014-09-30 01:31 - 09044480 ___SH () C:\Users\Użytkownik\Desktop\Thumbs.db
2015-06-01 20:09 - 2014-06-20 21:42 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000Core.job
2015-06-01 14:25 - 2014-01-25 23:23 - 00000000 ____D () C:\Windows\Minidump
2015-06-01 10:06 - 2013-10-18 16:03 - 00000000 ____D () C:\ProgramData\Oracle
2015-06-01 10:06 - 2012-03-31 12:15 - 00000000 ____D () C:\Program Files (x86)\Java
2015-06-01 10:05 - 2014-10-19 01:46 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-05-31 14:10 - 2014-11-30 18:34 - 00000000 ____D () C:\Users\Użytkownik\Desktop\karo
2015-05-31 12:21 - 2012-01-13 17:54 - 00000000 ____D () C:\ProgramData\Skype
2015-05-31 12:13 - 2015-03-09 14:49 - 00001417 _____ () C:\Users\Użytkownik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-05-31 12:12 - 2012-03-02 15:17 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-05-31 11:58 - 2013-08-23 21:48 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\Media Player Classic
2015-05-31 11:58 - 2011-05-05 12:37 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\DAEMON Tools Lite
2015-05-31 11:53 - 2011-03-29 23:38 - 00000000 ____D () C:\Windows\Panther
2015-05-31 10:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-05-31 10:42 - 2011-05-10 23:24 - 00000000 ____D () C:\ProgramData\TEMP
2015-05-31 10:16 - 2012-03-03 13:21 - 00000000 ____D () C:\Program Files\Revo Uninstaller Pro
2015-05-30 15:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-27 17:06 - 2012-05-29 14:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Any Video Converter
2015-05-27 17:06 - 2012-05-29 14:51 - 00000000 ____D () C:\Program Files (x86)\Any Video Converter
2015-05-27 16:58 - 2011-03-29 16:47 - 00000000 ____D () C:\Users\Użytkownik
2015-05-26 22:33 - 2014-01-25 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-25 21:41 - 2011-04-25 20:13 - 00000000 ____D () C:\Users\Użytkownik\AppData\Roaming\Audacity
2015-05-19 20:04 - 2014-06-20 21:42 - 00004062 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000UA
2015-05-19 20:04 - 2014-06-20 21:42 - 00003666 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3529014019-469410967-791373992-1000Core
2015-05-16 21:45 - 2014-01-25 23:43 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf1a166e9fb60a
2015-05-16 21:45 - 2014-01-25 23:43 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cf1a166e075df9

==================== Files in the root of some directories =======

2012-02-18 14:17 - 2012-05-01 15:44 - 0001363 _____ () C:\Users\Użytkownik\AppData\Roaming\MPQEditor.ini
2013-12-26 00:15 - 2013-12-20 00:39 - 0000021 _____ () C:\Users\Użytkownik\AppData\Roaming\tbi32.dll
2012-03-03 18:26 - 2014-03-18 14:50 - 0096256 _____ () C:\Users\Użytkownik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-03-29 19:04 - 2015-03-12 03:29 - 0007596 _____ () C:\Users\Użytkownik\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Użytkownik\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Użytkownik\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Użytkownik\AppData\Local\Temp\Quarantine.exe
C:\Users\Użytkownik\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-24 18:54

==================== End of log ============================