Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015 Ran by maciej (administrator) on MACIEJ-KOMPUTER on 03-06-2015 19:48:21 Running from C:\Users\maciej\Downloads Loaded Profiles: maciej (Available Profiles: maciej & varicopostgres & Administrator) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 (Default browser: Opera) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ABBYY (BIT Software)) C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerSvc64.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe () C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\XSManager\WTGService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (4G Systems GmbH & Co. KG) C:\Windows\service4g.exe (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe () C:\Program Files (x86)\Opera\29.0.1795.60\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe (Opera Software) C:\Program Files (x86)\Opera\29.0.1795.60\opera.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe () C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Farbar) C:\Users\maciej\Downloads\FRST64 (2).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [900992 2011-12-09] (FileOpen Systems Inc.) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-23] (IDT, Inc.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5595848 2015-01-28] (ESET) HKLM-x32\...\Run: [HPCam_Menu] => c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.) HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [320056 2009-06-24] ( Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [WirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ISUSScheduler] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation) HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Run: [ISUSPM Startup] => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation) HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Run: [GenieoSystemTray] => C:\Users\maciej\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe [539488 2014-10-20] () HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Run: [AshSnap] => C:\Program Files (x86)\Ashampoo\Ashampoo Snap 5\ashsnap.exe [3400600 2012-08-03] (ashampoo GmbH & Co. KG) HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.) HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Policies\system: [WallpaperStyle] 2 HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: F - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: G - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: H - H:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {0c371f34-8053-11e2-9ce7-001e101f4e71} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {0e35bf11-e4c9-11e4-9466-0027133321c5} - H:\Startme.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {37dc5829-eaab-11e4-ba20-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {4ac9e4ff-1d3d-11e2-b96c-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {4d8dd3ab-04dd-11e2-adf7-00269e88f1ca} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {574438d6-8135-11e4-af1c-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {6a8d7830-034f-11e2-900b-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {6a8d783e-034f-11e2-900b-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {947c6281-5a95-11e4-8d68-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {947c6285-5a95-11e4-8d68-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {947c6287-5a95-11e4-8d68-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {9c601e38-ab57-11e3-8242-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {a0dcb7ff-802c-11e2-a616-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {a0dcb80d-802c-11e2-a616-0027133321c5} - G:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {a2dc944b-ed95-11e4-b0e5-0027133321c5} - F:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {d9b7cc2c-a4e6-11e1-a1d4-0027133321c5} - F:\autorun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {dc52645e-03ae-11e2-a174-00269e88f1ca} - H:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {dc52646c-03ae-11e2-a174-00269e88f1ca} - H:\AutoRun.exe HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\MountPoints2: {dc526479-03ae-11e2-a174-00269e88f1ca} - H:\AutoRun.exe HKU\S-1-5-18\...\Policies\system: [WallpaperStyle] 2 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2009-08-25] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2012-09-24] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2012-09-24] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2012-09-24] (Acronis) ShellIconOverlayIdentifiers: [GGDriveOverlay1] -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => No File ShellIconOverlayIdentifiers: [GGDriveOverlay2] -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => No File ShellIconOverlayIdentifiers: [GGDriveOverlay3] -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => No File ShellIconOverlayIdentifiers: [GGDriveOverlay4] -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://myhome.vi-view.com/web/?type=ds&ts=1419000513&from=cor&uid=FUJITSUXMJA2500BHXG2_K94ST9A2D4D6&q={searchTerms} SearchScopes: HKLM -> {E2958F71-2B50-4864-811E-2F39556414E9} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl SearchScopes: HKLM-x32 -> {E2958F71-2B50-4864-811E-2F39556414E9} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1602&query={searchTerms}&invocationType=tb50hpcnnbie7-pl-pl SearchScopes: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> {A422045F-8070-438E-8CB5-3BB93177AD7F} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frg01_14_49_ch&cd=2XzuyEtN2Y1L1QzutD0C0E0E0EyC0C0ByD0DtB0EyC0B0BtDtN0D0Tzu0SzyyEyBtN1L2XzutAtFtDtFtCtFtAtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0C0AyEtCzztDzztG0B0F0BzztG0DtByE0CtGtBtAyEyCtGyB0BtC0CyEtCtD0D0E0BtCzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0EzyyD0ByB0BtB0EtGtB0DtDtBtGyEtBtB0EtGzytByEtBtGtB0F0A0E0FyB0A0FtD0EyDtD2Q&cr=652916539&ir= SearchScopes: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> {E2958F71-2B50-4864-811E-2F39556414E9} URL = SearchScopes: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> {szukaj.gazeta.pl} URL = http://szukaj.gazeta.pl/internet/0,0.html?slowo={searchTerms} BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.) BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-07-27] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: AOL Toolbar BHO -> {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} -> C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll [2008-07-02] (AOL LLC) BHO-x32: Pomocnik logowania za pomocą konta Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.) Toolbar: HKLM-x32 - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\Pasek narzędzi AOL 5.0\aoltb.dll [2008-07-02] (AOL LLC) Toolbar: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> No Name - {DE9C389F-3316-41A7-809B-AA305ED9D922} - No File Toolbar: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Toolbar: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKU\S-1-5-21-2619840493-2819106915-3540068395-1001 -> No Name - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - No File DPF: HKLM-x32 {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} http://biz.lgservice.com/DjvuViewer/DjVuControl-6.1.4.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {76B8A0E5-2705-46E2-8793-7BF7B2E3BDA2} https://epuap.gov.pl/epuap-styles/others/signing_plugin_25/EpuapSign.cab DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) Tcpip\..\Interfaces\{2ECD3C70-E3F7-421E-B903-4D2528B03B6B}: [NameServer] 193.189.244.206 193.189.244.225 Tcpip\..\Interfaces\{BF1B22E2-B06D-4AE8-9E84-1E18C4E1FEF6}: [NameServer] 193.189.244.206 193.189.244.225 Tcpip\..\Interfaces\{CBCF5ACF-1582-460D-B674-AE6A2B670B16}: [NameServer] 193.189.244.225 193.189.244.206 FireFox: ======== FF ProfilePath: C:\Users\maciej\AppData\Roaming\Mozilla\Firefox\Profiles\cc79kyac.default FF Homepage: www.wp.pl/?src01=dp220141121 FF Homepage: hxxp://www.gazeta.pl/0,0.html?p=156 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-04-02] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-04-02] (Foxit Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-09-04] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2619840493-2819106915-3540068395-1001: @citrixonline.com/appdetectorplugin -> C:\Users\maciej\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-06-26] (Citrix Online) FF user.js: detected! => C:\Users\maciej\AppData\Roaming\Mozilla\Firefox\Profiles\cc79kyac.default\user.js [2013-04-22] FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-05-08] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-03-09] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\maciej\AppData\Roaming\mozilla\plugins\npPxPlay.dll [2012-01-06] ( ) FF SearchPlugin: C:\Users\maciej\AppData\Roaming\Mozilla\Firefox\Profiles\cc79kyac.default\searchplugins\szukaj-gazeta-pl.xml [2014-12-19] FF Extension: DownloadHelper - C:\Users\maciej\AppData\Roaming\Mozilla\Firefox\Profiles\cc79kyac.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-10] FF Extension: Adblock Plus - C:\Users\maciej\AppData\Roaming\Mozilla\Firefox\Profiles\cc79kyac.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-26] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-10-30] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-30] FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Protector by IB\Firefox FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF HKLM-x32\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-04-26] FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2013-12-31] FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found] Chrome: ======= CHR Profile: C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21] CHR Extension: (Adblock Plus) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-23] CHR Extension: (AdBlock) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-23] CHR Extension: (Bookmark Manager) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-22] CHR Extension: (Skype Click to Call) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-03-03] CHR Extension: (MailTrack for Gmail) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndnaehgpjlnokgebbaldlmgkapkpjkkb [2015-04-18] CHR Extension: (Google Wallet) - C:\Users\maciej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21] CHR HKU\S-1-5-21-2619840493-2819106915-3540068395-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\maciej\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-06-20] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01] CHR HKLM-x32\...\Chrome\Extension: [mhdfklgebmkhdelndmnpmmmealijpcoa] - C:\ProgramData\Bcool\mhdfklgebmkhdelndmnpmmmealijpcoa.crx [Not Found] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [660768 2007-12-06] (ABBYY (BIT Software)) R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1349576 2015-01-28] (ESET) R2 FileOpenManagerSvc; C:\Program Files\FileOpen\Services\FileOpenManagerSvc64.exe [334720 2011-12-09] (FileOpen Systems Inc.) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed] R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed] S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [239968 2013-02-26] () S2 MSSQL$CDN_OPTIMA; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29178224 2007-02-10] (Microsoft Corporation) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed] S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed] R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [65536 2009-10-28] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [File not signed] R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] () S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [628736 2010-12-08] (Nokia) [File not signed] R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [247808 2010-03-23] (IDT, Inc.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5491984 2015-05-20] (TeamViewer GmbH) R2 vfsFPService; C:\Windows\system32\vfsFPService.exe [721712 2009-06-03] (Validity Sensors, Inc.) R2 vfsFPService; C:\Windows\SysWOW64\vfsFPService.exe [599344 2009-06-03] (Validity Sensors, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WTGService; C:\Program Files (x86)\XSManager\WTGService.exe [329168 2010-04-12] () R2 XS Stick Service; C:\Windows\service4g.exe [145064 2010-04-30] (4G Systems GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2013-02-26] (Mobile Connector) R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-02-23] (ESET) U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241880 2015-02-23] (ESET) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169792 2015-02-23] (ESET) R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [159480 2015-02-23] (ESET) U0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-06-03] (Duplex Secure Ltd.) R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-07-06] (Acronis) R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-07-06] (Acronis) S3 VNUSB; C:\Windows\System32\Drivers\VNUSB.sys [22528 2009-09-29] (OLYMPUS IMAGING CORP.) S3 ALSysIO; \??\C:\Users\ADMINI~1\AppData\Local\Temp\ALSysIO64.sys [X] S3 massfilter; system32\drivers\massfilter.sys [X] S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X] S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X] S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X] S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-03 19:47 - 2015-06-03 19:47 - 00130349 _____ () C:\Users\maciej\Downloads\Shortcut.txt 2015-06-03 19:44 - 2015-06-03 19:47 - 00068295 _____ () C:\Users\maciej\Downloads\Addition.txt 2015-06-03 19:43 - 2015-06-03 19:48 - 00029196 _____ () C:\Users\maciej\Downloads\FRST.txt 2015-06-03 19:42 - 2015-06-03 19:48 - 00000000 ____D () C:\FRST 2015-06-03 19:37 - 2015-06-03 19:37 - 02108928 _____ (Farbar) C:\Users\maciej\Downloads\FRST64 (2).exe 2015-06-03 18:33 - 2015-06-03 18:33 - 00381608 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys 2015-06-03 18:32 - 2015-06-03 18:32 - 00619688 _____ (Duplex Secure Ltd) C:\Users\maciej\Downloads\SPTDinst-v187-x64.exe 2015-06-03 18:23 - 2015-06-03 18:23 - 03822364 _____ () C:\Users\maciej\Downloads\HDDScan-3.3.zip 2015-06-03 17:18 - 2015-06-03 17:18 - 00000000 ____D () C:\Windows\ERUNT 2015-06-03 17:17 - 2015-06-03 17:17 - 00781312 _____ () C:\Users\maciej\Downloads\delfix_1.010.exe 2015-06-03 17:16 - 2015-06-03 17:19 - 00000844 _____ () C:\DelFix.txt 2015-06-03 16:53 - 2015-06-03 16:53 - 00128104 _____ () C:\Users\maciej\AppData\Local\GDIPFONTCACHEV1.DAT 2015-06-03 16:52 - 2015-06-03 16:52 - 00001595 _____ () C:\Users\maciej\Documents\fixlist.txt 2015-06-03 15:42 - 2015-06-03 19:39 - 00000672 _____ () C:\Windows\setupact.log 2015-06-03 15:42 - 2015-06-03 15:42 - 00000000 _____ () C:\Windows\setuperr.log 2015-06-03 15:02 - 2015-06-03 16:43 - 00000000 ____D () C:\3590F75ABA9E485486C100C1A9D4FF06ZZZ.ZZZ.Z.ZZZ..Z 2015-06-03 14:36 - 2015-06-03 14:36 - 00001936 _____ () C:\Users\maciej\Documents\cc_20150603_143627.reg 2015-06-03 14:34 - 2015-06-03 14:35 - 00116176 _____ () C:\Users\maciej\Documents\cc_20150603_143451.reg 2015-06-02 21:45 - 2015-06-02 21:49 - 556053606 _____ () C:\Users\maciej\Documents\clip0073.avi 2015-06-02 09:43 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-06-02 09:43 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-06-02 09:37 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-06-02 09:37 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-06-02 09:37 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-06-02 09:37 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-06-02 09:37 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-06-02 09:37 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-06-02 09:37 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2015-06-02 09:20 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-06-02 09:20 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-06-02 09:20 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-06-02 09:20 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-06-02 09:20 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2015-06-02 09:20 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2015-06-02 09:20 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2015-06-02 02:05 - 2015-06-02 02:07 - 320103010 _____ () C:\Users\maciej\Documents\clip0072.avi 2015-06-02 01:57 - 2015-06-02 01:58 - 273234590 _____ () C:\Users\maciej\Documents\clip0071.avi 2015-06-01 13:38 - 2015-06-01 13:47 - 1532410124 _____ () C:\Users\maciej\Documents\clip0070.avi 2015-06-01 00:01 - 2015-06-01 00:01 - 00063464 _____ () C:\Users\maciej\Downloads\m2m.pptx 2015-05-31 14:33 - 2015-05-31 14:53 - 3203702702 _____ () C:\Users\maciej\Documents\clip0069.avi 2015-05-31 12:40 - 2015-05-31 12:40 - 00003076 _____ () C:\Windows\System32\Tasks\{F6A71607-2CC9-436B-9100-5E1FDA6DE469} 2015-05-31 01:25 - 2015-05-31 01:25 - 00001598 _____ () C:\Users\maciej\AppData\Local\recently-used.xbel 2015-05-31 01:25 - 2015-05-31 01:25 - 00000000 ____D () C:\Users\maciej\AppData\Local\gtk-2.0 2015-05-31 01:17 - 2015-05-31 01:17 - 00000894 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk 2015-05-31 01:13 - 2015-05-31 01:16 - 00000000 ____D () C:\Program Files\GIMP 2 2015-05-31 01:03 - 2015-05-31 01:07 - 91670064 _____ (The GIMP Team ) C:\Users\maciej\Downloads\gimp-2.8.14-setup.exe 2015-05-30 20:14 - 2015-05-30 20:18 - 728112666 _____ () C:\Users\maciej\Documents\clip0068.avi 2015-05-30 18:41 - 2015-05-30 18:48 - 1093494628 _____ () C:\Users\maciej\Documents\clip0067.avi 2015-05-30 18:23 - 2015-05-30 18:25 - 252901856 _____ () C:\Users\maciej\Documents\clip0066.avi 2015-05-30 18:21 - 2015-05-30 18:23 - 387616452 _____ () C:\Users\maciej\Documents\clip0065.avi 2015-05-30 17:45 - 2015-05-30 17:56 - 1789894772 _____ () C:\Users\maciej\Documents\clip0064.avi 2015-05-30 15:25 - 2015-05-30 16:00 - 1907215524 _____ () C:\Users\maciej\Documents\clip0059.avi 2015-05-28 09:58 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-28 09:58 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-05-28 09:58 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-05-28 09:58 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-05-28 09:58 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-05-28 09:58 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-28 09:58 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-05-28 09:58 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-28 09:58 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-05-28 09:58 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-05-28 09:58 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-05-28 09:58 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-05-28 09:58 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-05-28 09:58 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-05-28 09:58 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-05-28 09:58 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-05-28 09:58 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-05-28 09:58 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-05-28 09:58 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-28 09:58 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-05-28 09:58 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-05-28 09:58 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-05-28 09:58 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-05-28 09:58 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-05-28 09:58 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-05-28 09:58 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-05-28 09:58 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-28 09:58 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-28 09:58 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-05-28 09:58 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-28 09:58 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-05-28 09:58 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-05-28 09:58 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-05-28 09:58 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-05-28 09:58 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-05-28 09:58 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-05-28 09:58 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-05-28 09:58 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-05-28 09:58 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-28 09:58 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-28 09:58 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-05-28 09:58 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-05-28 09:57 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-28 09:57 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-05-28 09:57 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-28 09:57 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-28 09:57 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-05-28 09:57 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-05-28 09:57 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-28 09:57 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-28 09:57 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-05-28 09:57 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-05-28 09:57 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-28 09:57 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-05-28 09:57 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-05-28 09:57 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-05-28 09:57 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-28 09:57 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-05-28 09:57 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-05-28 09:57 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-05-28 09:57 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-28 09:57 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-05-28 09:57 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-28 09:57 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-28 09:57 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-05-28 09:57 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-28 09:57 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-28 09:57 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-05-28 09:57 - 2015-04-04 05:29 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-05-28 09:57 - 2015-04-04 05:29 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-05-28 09:57 - 2015-04-04 05:22 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-05-28 09:57 - 2015-04-04 05:22 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-05-28 09:57 - 2015-04-04 05:20 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-05-28 09:57 - 2015-04-04 05:20 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-05-28 09:57 - 2015-04-04 05:17 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-05-28 09:57 - 2015-04-04 05:17 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-05-28 09:57 - 2015-04-04 05:15 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-05-28 09:57 - 2015-04-04 05:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-05-28 09:57 - 2015-04-04 05:04 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-05-28 09:57 - 2015-04-04 05:04 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-05-28 09:57 - 2015-04-04 05:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-05-28 09:57 - 2015-04-04 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-05-28 09:57 - 2015-04-04 04:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-05-27 23:10 - 2015-05-27 23:10 - 00265485 _____ () C:\Users\maciej\Downloads\umowa-darowizny-pojazdu.gofin 2015-05-27 23:10 - 2015-05-27 23:10 - 00265485 _____ () C:\Users\maciej\Downloads\umowa-darowizny-pojazdu (1).gofin 2015-05-22 20:44 - 2015-05-22 20:44 - 00000063 _____ () C:\Users\maciej\Downloads\listen (3).pls 2015-05-22 20:44 - 2015-05-22 20:44 - 00000063 _____ () C:\Users\maciej\Downloads\listen (2).pls 2015-05-22 20:29 - 2015-05-22 20:29 - 00000063 _____ () C:\Users\maciej\Downloads\listen (1).pls 2015-05-19 21:11 - 2015-05-19 22:19 - 256148434 _____ () C:\Users\maciej\Documents\clip0056.avi 2015-05-15 19:04 - 2015-05-15 20:17 - 1062411558 _____ () C:\Users\maciej\Documents\clip0053.avi 2015-05-14 15:37 - 2015-05-14 15:43 - 23801875 _____ () C:\Users\maciej\Downloads\download (10).zip 2015-05-13 20:07 - 2015-05-13 20:07 - 00036864 _____ () C:\Users\maciej\Downloads\historia_polaczen_20150510-20150513.xls 2015-05-11 20:00 - 2015-05-11 21:20 - 3906117760 _____ () C:\Users\maciej\Documents\clip0052.avi 2015-05-06 20:33 - 2015-05-06 21:01 - 664193774 _____ () C:\Users\maciej\Documents\clip0043.avi 2015-05-06 19:22 - 2015-05-06 19:59 - 743537018 _____ () C:\Users\maciej\Documents\clip0040.avi 2015-05-06 13:11 - 2015-05-06 13:11 - 00003068 _____ () C:\Windows\System32\Tasks\{8C585785-2F8E-40A9-A8FA-53EF1B5D8DFE} 2015-05-05 11:19 - 2015-05-05 11:20 - 06196576 _____ (Tim Kosse) C:\Users\maciej\Downloads\FileZilla_3.10.3_win32-setup.exe ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-03 19:44 - 2011-06-23 12:44 - 00000000 ____D () C:\Users\maciej\AppData\Roaming\Skype 2015-06-03 19:28 - 2014-06-20 18:54 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8ca83f5277aa.job 2015-06-03 19:25 - 2014-11-21 12:05 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-06-03 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing 2015-06-03 17:43 - 2009-07-14 06:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-06-03 17:43 - 2009-07-14 06:45 - 00026192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-06-03 15:02 - 2012-09-23 08:17 - 01094874 _____ () C:\Windows\WindowsUpdate.log 2015-06-03 14:41 - 2009-09-18 07:29 - 00791358 _____ () C:\Windows\system32\perfh015.dat 2015-06-03 14:41 - 2009-09-18 07:29 - 00175742 _____ () C:\Windows\system32\perfc015.dat 2015-06-03 14:41 - 2009-07-14 07:13 - 01813212 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-06-03 13:43 - 2011-11-30 16:59 - 00003998 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{60A35EB5-2D93-4862-A553-7F60748C133B} 2015-06-03 13:28 - 2013-01-15 23:34 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-06-03 12:26 - 2014-07-30 16:07 - 00000000 ____D () C:\Grafika 2015-06-03 10:48 - 2014-07-13 09:55 - 00000000 ____D () C:\WellU 2015-06-03 10:24 - 2011-12-25 00:45 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2015-06-03 10:24 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-06-03 09:02 - 2015-01-07 18:36 - 00000000 ____D () C:\AIOP 2015-06-02 18:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2015-06-02 17:07 - 2014-06-25 18:44 - 00000000 ____D () C:\Dokumenty 2015-06-02 12:39 - 2013-07-05 16:16 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2015-06-02 12:31 - 2015-04-17 08:11 - 00000000 ___SD () C:\Windows\SysWOW64\GWX 2015-06-02 12:31 - 2015-04-17 08:11 - 00000000 ___SD () C:\Windows\system32\GWX 2015-06-02 12:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-06-02 10:24 - 2009-12-22 03:19 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-06-02 10:20 - 2013-07-12 02:46 - 00000000 ____D () C:\Windows\system32\MRT 2015-06-02 10:09 - 2011-12-04 17:57 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-06-02 09:59 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2015-06-01 12:31 - 2014-09-16 08:10 - 00000000 ___RD () C:\Program Files (x86)\Skype 2015-05-31 01:26 - 2013-06-12 21:05 - 00000000 ____D () C:\Users\maciej\.gimp-2.8 2015-05-30 09:36 - 2012-02-17 20:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2015-05-30 09:36 - 2012-02-17 20:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2015-05-29 21:31 - 2012-02-17 20:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-05-29 12:31 - 2014-12-17 16:45 - 00000931 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2015-05-27 23:25 - 2014-11-21 12:05 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-05-27 23:25 - 2012-11-01 20:07 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-05-27 23:25 - 2011-09-05 20:22 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-05-26 21:31 - 2014-11-21 12:18 - 00002149 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-05-20 12:21 - 2014-11-06 10:16 - 00003886 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1415261786 2015-05-20 12:21 - 2014-11-06 10:16 - 00000000 ____D () C:\Program Files (x86)\Opera 2015-05-17 13:23 - 2014-06-20 18:54 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf8ca83f5277aa 2015-05-17 13:23 - 2013-01-15 23:34 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-05-13 11:22 - 2014-08-12 17:31 - 00000000 ____D () C:\Waldek-MTW 2015-05-10 07:25 - 2013-02-24 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-05-06 13:11 - 2011-06-23 12:43 - 00000000 ____D () C:\ProgramData\Skype 2015-05-05 13:06 - 2014-08-04 17:20 - 00000000 ____D () C:\Users\maciej\AppData\Roaming\FileZilla ==================== Files in the root of some directories ======= 2010-03-07 14:45 - 2006-06-26 03:49 - 1867776 _____ () C:\Program Files (x86)\python24.dll 2010-03-07 14:45 - 2009-02-17 15:19 - 0002082 _____ () C:\Program Files (x86)\readme.txt 2013-07-23 13:57 - 2013-10-09 13:11 - 0000838 _____ () C:\Users\maciej\AppData\Roaming\ex_log.txt 2013-08-07 17:58 - 2014-10-27 21:20 - 0000158 _____ () C:\Users\maciej\AppData\Roaming\WB.CFG 2014-05-10 19:56 - 2014-05-10 19:56 - 0000000 _____ () C:\Users\maciej\AppData\Roaming\wklnhst.dat 2009-12-22 03:51 - 2009-12-22 03:51 - 0000000 _____ () C:\Users\maciej\AppData\Local\AtStart.txt 2013-04-13 23:01 - 2015-02-15 14:06 - 0011776 _____ () C:\Users\maciej\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-06-19 22:05 - 2013-06-19 22:05 - 0000058 _____ () C:\Users\maciej\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2009-12-22 03:51 - 2009-12-22 03:51 - 0000000 _____ () C:\Users\maciej\AppData\Local\DSwitch.txt 2009-12-22 03:51 - 2009-12-22 03:51 - 0000000 _____ () C:\Users\maciej\AppData\Local\QSwitch.txt 2015-05-31 01:25 - 2015-05-31 01:25 - 0001598 _____ () C:\Users\maciej\AppData\Local\recently-used.xbel 2013-12-31 22:47 - 2013-12-31 22:51 - 0007603 _____ () C:\Users\maciej\AppData\Local\resmon.resmoncfg 2011-11-06 14:55 - 2011-11-06 14:55 - 0537740 _____ () C:\Users\maciej\AppData\Local\tmpIMG_20110821_094914.0 2011-11-06 14:55 - 2011-11-06 14:55 - 0314109 _____ () C:\Users\maciej\AppData\Local\tmpIMG_20110821_094914.JPG 2012-03-10 12:41 - 2015-03-19 00:16 - 0011202 _____ () C:\Users\maciej\AppData\Local\unins000.dat 2012-03-10 12:41 - 2015-03-19 00:16 - 0011761 _____ () C:\Users\maciej\AppData\Local\unins000.msg 2015-01-30 14:17 - 2015-01-30 14:17 - 0000000 _____ () C:\Users\maciej\AppData\Local\{08C8082E-7DE2-4FBF-8C52-884D69A84C53} 2014-11-05 18:56 - 2015-06-03 10:25 - 0000176 _____ () C:\ProgramData\HPWALog.txt 2011-04-26 18:57 - 2011-12-04 22:54 - 0008838 _____ () C:\ProgramData\hpzinstall.log 2009-08-25 02:12 - 2009-08-25 02:12 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log 2009-09-17 22:35 - 2009-09-17 22:36 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2009-08-25 02:11 - 2009-08-25 02:11 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log 2009-09-17 22:29 - 2009-09-17 22:31 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2009-08-25 02:10 - 2009-08-25 02:10 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log 2009-08-25 02:11 - 2009-08-25 02:11 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log 2009-09-17 22:28 - 2009-09-17 22:29 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 2009-09-17 22:31 - 2009-09-17 22:35 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2009-08-25 02:12 - 2009-08-25 02:12 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log Files to move or delete: ==================== C:\Users\maciej\fcpack412_setup.exe C:\Users\maciej\RealPlayerSPGold.exe C:\Users\Public\fcpack412_setup.exe Some files in TEMP: ==================== C:\Users\maciej\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\maciej\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-03 19:23 ==================== End of log ============================