Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-06-2015 01
Ran by Justyna (administrator) on LENOVO on 24-06-2015 20:20:53
Running from C:\Users\Justyna\Downloads
Loaded Profiles: Justyna (Available Profiles: UpdatusUser & Justyna)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Gemius) C:\Program Files\NetPanel\NetPanel.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Farbar) C:\Users\Justyna\Downloads\FRST64 (1).exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2872720 2012-10-03] (ELAN Microelectronics Corp.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-14] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2013-04-09] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2013-04-09] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [SmartVpnClient] => C:\Program Files (x86)\DrayTek\Smart VPN Client\SmartVPNClient.exe AUTORUN
HKLM-x32\...\Run: [NetPanel] => C:\Program Files\NetPanel\Starter.exe [217600 2015-06-22] (Gemius)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [948672 2009-12-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iPlusManager] => D:\iPlus\iPlusChecker.exe [446464 2010-01-04] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\Run: [GoogleChromeAutoLaunch_1DC881944C2E4A1FEAC09390FE60B235] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-20] (Google Inc.)
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\Run: [OneDrive] => C:\Users\Justyna\AppData\Local\Microsoft\OneDrive\OneDrive.exe [382664 2015-05-22] (Microsoft Corporation)
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: F - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1326f80f-a52e-11e4-bef7-2cd05ac7bdf0} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1ea07600-c0d5-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1ea07626-c0d5-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1ea0764d-c0d5-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1ea07661-c0d5-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {1ea0777c-c0d5-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {5029d486-38b4-11e4-bebc-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {a569c0bc-082f-11e5-bf06-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {a569c0d2-082f-11e5-bf06-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {b787106e-c2b4-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {b787218b-c2b4-11e4-befd-001e101f4bf6} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {c5742bb9-08c0-11e4-beb0-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {c5742c7d-08c0-11e4-beb0-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d45d06f5-8790-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d45d0719-8790-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d45d0c5d-8790-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d8944640-95a5-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d894467b-95a5-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {d894475a-95a5-11e4-bef5-2089848d6b16} - "F:\AutoRun.exe" 
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\...\MountPoints2: {f0f63a28-0db7-11e5-bf06-2089848d6b16} - "F:\AutoRun.exe" 
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-12-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-12-21]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Justyna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wysyłanie do programu OneNote.lnk [2013-10-19]
ShortcutTarget: Wysyłanie do programu OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.pl/
HKU\S-1-5-21-745078335-3284917955-1969653430-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-05-19] (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-05-28] (Microsoft Corporation)
BHO: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll [2013-04-12] (IvoSoft)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: Internet Panel -> {CE7C3CF0-4B15-11D1-ABED-709549C10000} -> C:\Program Files\NetPanel\IEHelper.dll [2015-01-02] (Gemius)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2013-04-12] (IvoSoft)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-10-09] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-21] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-09]
CHR Extension: (Google Drive) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-09]
CHR Extension: (YouTube) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-09]
CHR Extension: (Google Search) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-09]
CHR Extension: (Transferuj.pl) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmbhnokcfchfkdgechgkhcfekdfpdjld [2014-10-21]
CHR Extension: (Netpanel study) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\kegdldmohomdaelnepdpbkdhfemobdgl [2014-04-01]
CHR Extension: (FromDocToPDF) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\lplgmijfnicgfhoccpjcbkidkkcaiapo [2014-09-22]
CHR Extension: (HomeworkSimplified) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\niljpgchbakifofpdbooagpeodjdppeh [2015-01-04]
CHR Extension: (Google Wallet) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-09]
CHR Extension: (Gmail) - C:\Users\Justyna\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-09]
CHR HKU\S-1-5-21-745078335-3284917955-1969653430-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kegdldmohomdaelnepdpbkdhfemobdgl] - https://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Badanie Megapanel PBI/Gemius) - C:\Users\Justyna\AppData\Roaming\Opera Software\Opera Stable\Extensions\ojedjnlojkfjbmjlpknfclknchaenlpm [2015-01-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-04-12] (IvoSoft) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2739888 2015-05-19] (Microsoft Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1662424 2014-02-19] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-24] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-24] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [133632 2008-09-26] (Huawei Technologies Co., Ltd.)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-04-15] (LogMeIn Inc.)
S3 hwusbdev; C:\Windows\system32\DRIVERS\ewusbdev.sys [114304 2010-01-04] (Huawei Technologies Co., Ltd.)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8228240 2012-09-19] (Realtek Semiconductor Corp.)
S3 VPPP; C:\Windows\system32\DRIVERS\VPPP.sys [41640 2012-12-19] (DrayTek, Corp.)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S1 MpKsl70eb2d18; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{62BE00B2-B5BC-437A-89D7-60B3A1E94EDA}\MpKsl70eb2d18.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-24 20:20 - 2015-06-24 20:23 - 165943552 _____ (Emsisoft Ltd. ) C:\Users\Justyna\Downloads\Niepotwierdzony 989632.crdownload
2015-06-24 20:20 - 2015-06-24 20:22 - 00025307 _____ C:\Users\Justyna\Downloads\FRST.txt
2015-06-24 20:18 - 2015-06-24 20:21 - 00000000 ____D C:\FRST
2015-06-24 20:17 - 2015-06-24 20:17 - 02109952 _____ (Farbar) C:\Users\Justyna\Downloads\FRST64 (1).exe
2015-06-24 20:07 - 2015-06-24 20:07 - 00002215 _____ C:\Users\Justyna\Desktop\Google Chrome.lnk
2015-06-24 19:42 - 2015-06-24 19:43 - 00001370 _____ C:\Users\Justyna\Desktop\Rkill.txt
2015-06-24 19:25 - 2015-06-24 19:28 - 00000000 ____D C:\AdwCleaner
2015-06-24 19:16 - 2015-06-24 19:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-23 18:01 - 2015-06-23 18:01 - 00046080 _____ C:\Users\Justyna\Downloads\sprawozdanie_finansowe_mikro (5).xls
2015-06-23 12:22 - 2015-06-23 12:36 - 00000000 ____D C:\Users\Justyna\Desktop\czerwiec
2015-06-23 11:36 - 2015-06-23 11:45 - 00000000 ____D C:\Users\Justyna\Desktop\maj
2015-06-23 10:47 - 2015-06-23 11:07 - 00000000 ____D C:\Users\Justyna\Desktop\kwiecień
2015-06-22 16:21 - 2015-06-22 17:12 - 00000000 ____D C:\Users\Justyna\Desktop\marzec
2015-06-22 16:17 - 2015-06-22 16:26 - 00000000 ____D C:\Users\Justyna\Desktop\luty
2015-06-22 15:57 - 2015-06-22 16:22 - 00000000 ____D C:\Users\Justyna\Desktop\listy obecności
2015-06-20 13:20 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-06-20 13:20 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-06-20 13:20 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-06-19 10:22 - 2010-05-14 15:04 - 00138752 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\hpf3l02t.dll
2015-06-19 10:20 - 2015-06-19 10:27 - 00222478 _____ C:\WINDOWS\hpwins24.dat
2015-06-19 10:20 - 2012-10-15 17:07 - 00001537 ____N C:\WINDOWS\hpwmdl24.dat
2015-06-19 10:20 - 2010-04-26 10:52 - 00644456 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpzids40.dll
2015-06-19 10:16 - 2015-06-19 10:16 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-06-19 10:15 - 2015-06-19 10:17 - 144239160 _____ C:\Users\Justyna\Downloads\OJ_SF_6000_E609_Full_Win_WW_140_408-4.exe
2015-06-19 10:14 - 2015-06-19 10:14 - 05197824 _____ C:\Users\Justyna\Downloads\HPSupportSolutionsFramework-11.51.0049.msi
2015-06-19 09:42 - 2015-06-19 09:42 - 00000000 ___RD C:\Users\Justyna\AppData\Roaming\Microsoft\Windows\Start Menu\HP
2015-06-16 22:00 - 2015-06-16 22:00 - 00001772 _____ C:\Users\Public\Desktop\Picexa.lnk
2015-06-16 21:59 - 2015-06-24 11:56 - 00000000 ____D C:\Users\Justyna\AppData\Everything
2015-06-16 09:43 - 2015-06-16 09:43 - 00415529 _____ C:\Users\Justyna\Downloads\PEFS_FRNiP_14.rar
2015-06-15 09:04 - 2015-06-15 09:04 - 00000000 ____D C:\Users\Justyna\AppData\Local\GWX
2015-06-14 19:09 - 2015-06-21 20:51 - 00000000 ____D C:\Users\Justyna\Desktop\gaz bezpiecznie
2015-06-14 11:51 - 2015-06-14 11:52 - 107270015 _____ C:\Users\Justyna\Downloads\akademia-pana-kleksa.zip
2015-06-14 11:50 - 2015-06-14 17:36 - 00000000 ____D C:\Users\Justyna\Desktop\miś
2015-06-14 11:44 - 2015-06-14 11:48 - 172127508 _____ C:\Users\Justyna\Downloads\mis-zwany-paddington.zip
2015-06-14 11:32 - 2015-06-14 11:37 - 26951237 _____ C:\Users\Justyna\Downloads\opowiesci-z-narnii-lew-czarownica-i-stara-szafa.zip
2015-06-14 09:08 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-06-14 09:08 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2015-06-14 09:08 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2015-06-14 09:08 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-06-14 09:08 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2015-06-14 09:08 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2015-06-14 09:08 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-06-14 09:08 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-06-14 09:08 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-06-14 09:08 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2015-06-14 09:08 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2015-06-14 09:07 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-06-14 09:07 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-06-14 09:07 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-06-14 09:07 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2015-06-14 09:07 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2015-06-14 09:07 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-06-14 09:07 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-06-14 09:07 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll
2015-06-14 09:07 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-06-14 09:07 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-06-14 09:07 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2015-06-14 09:07 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2015-06-14 09:07 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2015-06-14 09:07 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-06-14 09:07 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2015-06-14 09:07 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2015-06-14 09:07 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2015-06-14 09:07 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2015-06-14 09:07 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2015-06-11 20:05 - 2015-06-11 20:05 - 00015332 _____ C:\Users\Justyna\Downloads\SZABLON_Kosztorys.xlsx
2015-06-10 09:00 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2015-06-10 09:00 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2015-06-10 08:59 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-06-10 08:59 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-06-10 08:59 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-06-10 08:59 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-06-10 08:59 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-06-10 08:59 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-06-10 08:59 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2015-06-10 08:59 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-06-10 08:59 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-06-10 08:59 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-06-10 08:59 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-06-10 08:59 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-06-10 08:59 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-06-10 08:59 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-06-10 08:59 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-06-10 08:59 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-06-10 08:59 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-06-10 08:59 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-06-10 08:59 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-06-10 08:59 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-06-10 08:59 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-06-10 08:59 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-06-10 08:59 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-06-10 08:59 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-06-10 08:59 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-06-10 08:59 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-06-10 08:59 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-06-10 08:58 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-06-10 08:58 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-06-10 08:58 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-06-10 08:58 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-06-10 08:58 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-06-10 08:58 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-06-10 08:58 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-06-10 08:58 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-06-10 08:58 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-06-10 08:58 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-06-10 08:58 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-06-10 08:58 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-06-10 08:58 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-06-10 08:57 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-06-09 19:15 - 2015-06-09 19:15 - 00000517 _____ C:\Users\Justyna\Downloads\2.download
2015-06-09 09:24 - 2015-06-09 09:25 - 01145344 _____ C:\Users\Justyna\Downloads\Szczęście-jest-podróżą (1).pps
2015-06-09 09:20 - 2015-06-09 09:21 - 01145344 _____ C:\Users\Justyna\Downloads\Szczęście-jest-podróżą.pps
2015-06-08 09:28 - 2015-06-08 09:28 - 01136128 _____ C:\Users\Justyna\Downloads\PEFS WP3-km.xls
2015-06-04 20:49 - 2015-06-04 20:49 - 00000000 ____D C:\Program Files (x86)\PlayReady
2015-06-04 20:41 - 2015-06-24 19:55 - 00000000 ____D C:\Users\Justyna\AppData\Roaming\ipla
2015-06-04 20:41 - 2015-06-04 20:41 - 00000000 ____D C:\ProgramData\RDRM
2015-06-04 20:40 - 2015-06-24 20:03 - 00000000 ____D C:\Program Files (x86)\ipla
2015-06-04 20:28 - 2015-06-04 20:35 - 39138904 _____ C:\Users\Justyna\Downloads\iplasetup.exe
2015-06-02 09:40 - 2015-06-21 15:29 - 00000000 ____D C:\Users\Justyna\Desktop\gcpr
2015-06-01 10:37 - 2015-06-16 10:39 - 00064000 _____ C:\Users\Justyna\Desktop\stażowe maj  2015.xls
2015-05-27 11:59 - 2015-05-24 13:26 - 01709792 _____ (Disc Soft Ltd.) C:\Users\Justyna\Desktop\DTLiteInstaller.exe
2015-05-27 11:56 - 2015-05-22 22:06 - 4194009088 _____ C:\Users\Justyna\Desktop\DRP_14.9.iso
2015-05-27 10:18 - 2015-06-11 09:51 - 00000000 ____D C:\Users\Justyna\Documents\kaufland
2015-05-26 12:26 - 2015-05-26 12:26 - 00046080 _____ C:\Users\Justyna\Downloads\sprawozdanie_finansowe_mikro (4).xls
2015-05-26 12:26 - 2015-05-26 12:26 - 00046080 _____ C:\Users\Justyna\Downloads\sprawozdanie_finansowe_mikro (3).xls
2015-05-26 12:26 - 2015-05-26 12:26 - 00046080 _____ C:\Users\Justyna\Downloads\sprawozdanie_finansowe_mikro (2).xls
2015-05-26 12:26 - 2015-05-26 12:26 - 00046080 _____ C:\Users\Justyna\Downloads\sprawozdanie_finansowe_mikro (1).xls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-24 20:16 - 2013-10-09 12:02 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-06-24 20:14 - 2014-04-27 20:12 - 00000000 ____D C:\ProgramData\NetPanel00
2015-06-24 20:09 - 2014-05-17 17:35 - 01128621 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-24 20:09 - 2013-10-09 12:48 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-745078335-3284917955-1969653430-1002
2015-06-24 20:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-24 19:57 - 2013-10-09 15:16 - 00005104 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for LENOVO-Justyna Lenovo
2015-06-24 19:57 - 2013-04-09 10:01 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-06-24 19:56 - 2013-10-09 12:07 - 00000000 ___DO C:\Users\Justyna\OneDrive
2015-06-24 19:54 - 2013-12-26 18:04 - 00000000 ____D C:\Program Files\NetPanel
2015-06-24 19:53 - 2014-11-16 12:39 - 00001066 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d00189a1048def.job
2015-06-24 19:53 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-24 19:52 - 2013-08-22 16:46 - 00375711 _____ C:\WINDOWS\setupact.log
2015-06-24 19:51 - 2013-08-22 15:25 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2015-06-24 19:40 - 2013-10-09 12:46 - 00001070 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-24 19:30 - 2014-03-18 03:46 - 00037392 _____ C:\WINDOWS\PFRO.log
2015-06-24 19:28 - 2014-05-17 17:42 - 00000000 ____D C:\Users\Justyna
2015-06-24 19:17 - 2014-03-26 20:01 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2015-06-24 19:17 - 2013-04-09 09:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-24 19:14 - 2014-02-03 01:14 - 00000000 ____D C:\Program Files (x86)\Counter-Strike
2015-06-24 18:50 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-06-24 18:48 - 2014-05-30 11:26 - 00003984 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9D50BEAD-83D2-4739-992C-B0802B47C0F6}
2015-06-24 11:56 - 2014-05-17 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2015-06-24 11:56 - 2014-05-17 17:36 - 00000000 ____D C:\WINDOWS\system32\NV
2015-06-24 11:47 - 2013-10-09 11:40 - 00000000 ____D C:\Users\Justyna\AppData\Local\Packages
2015-06-24 09:31 - 2014-03-18 11:57 - 00863634 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-24 09:31 - 2014-03-18 11:28 - 00013484 _____ C:\WINDOWS\system32\perfh015.dat
2015-06-24 09:31 - 2014-03-18 11:28 - 00004226 _____ C:\WINDOWS\system32\perfc015.dat
2015-06-24 09:25 - 2014-05-17 17:36 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-23 00:18 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-06-21 21:44 - 2014-12-27 21:20 - 00000000 ____D C:\Users\Justyna\Desktop\konkursy 2015
2015-06-21 21:36 - 2014-04-13 11:16 - 00000000 ____D C:\Users\Justyna\Desktop\Fundacja Rozwoju Nauko
2015-06-21 20:28 - 2013-10-12 16:30 - 00000000 ____D C:\Users\Justyna\Documents\kultura 2011
2015-06-21 20:26 - 2013-10-12 16:22 - 00000000 ____D C:\Users\Justyna\Pulpit
2015-06-21 20:15 - 2014-05-16 12:23 - 00000000 ____D C:\Users\Justyna\Documents\budowa
2015-06-20 17:06 - 2013-08-22 16:44 - 00382840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-06-20 17:03 - 2014-12-13 10:39 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-06-20 17:03 - 2014-07-11 11:35 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-06-19 10:33 - 2014-12-06 13:48 - 00000000 __SHD C:\Users\Justyna\AppData\Local\EmieBrowserModeList
2015-06-19 10:33 - 2014-05-30 11:26 - 00000000 __SHD C:\Users\Justyna\AppData\Local\EmieUserList
2015-06-19 10:33 - 2014-05-30 11:26 - 00000000 __SHD C:\Users\Justyna\AppData\Local\EmieSiteList
2015-06-19 10:27 - 2013-11-26 14:14 - 00006512 _____ C:\ProgramData\hpzinstall.log
2015-06-19 10:26 - 2013-11-26 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-06-17 15:29 - 2013-10-12 16:32 - 00000000 ____D C:\Users\Justyna\Documents\dorota, Lidia
2015-06-17 15:24 - 2014-08-05 21:24 - 00000000 ____D C:\Users\Justyna\Documents\Metalowiec
2015-06-14 22:29 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-06-14 11:30 - 2013-10-15 08:02 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-06-14 09:44 - 2013-10-15 08:02 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-14 09:37 - 2015-04-06 18:42 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-06-14 09:37 - 2015-04-06 18:42 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-06-11 21:02 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-06-10 17:28 - 2015-01-25 14:08 - 00003868 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1422187665
2015-06-10 17:28 - 2015-01-25 14:07 - 00001034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-06-10 17:28 - 2015-01-25 14:06 - 00000000 ____D C:\Program Files (x86)\Opera
2015-06-10 10:36 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-06-09 19:33 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-06-09 14:41 - 2013-10-12 16:26 - 00000000 ____D C:\Users\Justyna\Documents\szkoła do rodziców
2015-06-09 14:41 - 2013-10-12 16:26 - 00000000 ____D C:\Users\Justyna\Documents\sp 15
2015-06-09 11:17 - 2013-10-12 16:32 - 00000000 ____D C:\Users\Justyna\Documents\Gorzów 2012
2015-06-08 11:50 - 2013-10-12 16:29 - 00000000 ____D C:\Users\Justyna\Documents\Baczyna
2015-06-03 18:18 - 2014-11-13 17:04 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-06-03 18:18 - 2014-11-13 17:04 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-02 12:03 - 2015-03-20 10:36 - 00007303 _____ C:\Users\Justyna\Downloads\List_motywacyjny (1).odt
2015-06-02 11:59 - 2013-10-12 16:30 - 00000000 ____D C:\Users\Justyna\Desktop\Zadania_przedmiotowe
2015-06-02 11:04 - 2014-09-16 20:07 - 00000000 ____D C:\Users\Justyna\Documents\Biblioteka calibre
2015-06-02 10:57 - 2013-11-17 17:01 - 00000000 ____D C:\Users\Justyna\Documents\saves
2015-06-02 10:56 - 2013-10-12 16:27 - 00000000 ____D C:\Users\Justyna\Documents\kamień mały
2015-06-02 10:56 - 2013-10-12 16:26 - 00000000 ____D C:\Users\Justyna\Documents\Notesy programu OneNote
2015-06-02 10:56 - 2013-10-12 16:26 - 00000000 ____D C:\Users\Justyna\Documents\My Games
2015-06-02 10:55 - 2013-11-17 17:01 - 00000000 ____D C:\Users\Justyna\Documents\resourcepacks
2015-06-02 10:52 - 2013-11-17 18:58 - 00000000 ____D C:\Users\Justyna\Documents\screenshots
2015-06-02 10:49 - 2013-11-17 16:59 - 00000000 ____D C:\Users\Justyna\Documents\versions
2015-05-28 10:17 - 2013-10-09 11:42 - 00000000 ____D C:\Users\Justyna\Documents\Bluetooth Folder

==================== Files in the root of some directories =======

2013-04-09 09:32 - 2013-04-09 09:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-11-26 14:14 - 2015-06-19 10:27 - 0006512 _____ () C:\ProgramData\hpzinstall.log
2013-04-09 10:04 - 2013-04-09 10:04 - 0000198 ____H () C:\ProgramData\Lenovo-28874.vbs

Files to move or delete:
====================
C:\ProgramData\Lenovo-28874.vbs


Some files in TEMP:
====================
C:\Users\Justyna\AppData\Local\Temp\AcDeltree.exe
C:\Users\Justyna\AppData\Local\Temp\AutoRun.exe
C:\Users\Justyna\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Justyna\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Justyna\AppData\Local\Temp\ginst0.dll
C:\Users\Justyna\AppData\Local\Temp\ICReinstall_EuroPlus-Angielski-dla-dzieci-Wow(12680)-dp.exe
C:\Users\Justyna\AppData\Local\Temp\InstHelper.exe
C:\Users\Justyna\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Justyna\AppData\Local\Temp\Quarantine.exe
C:\Users\Justyna\AppData\Local\Temp\ResetDevice.exe
C:\Users\Justyna\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-24 10:15

==================== End of log ============================