Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:23-08-2015
Ran by Zbig (administrator) on CZEREPKOAGULA (24-08-2015 09:33:11)
Running from C:\Users\Zbig\Downloads
Loaded Profiles: Zbig (Available Profiles: Zbig & varicopostgres & Gość)
Platform: Windows 8.1 (X64) Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7510232 2014-01-18] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1374936 2014-01-14] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe [285272 2013-12-31] (Waves Audio Ltd.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-01-15] (Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-30] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-07-10] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-05-01] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\13e47b98-0868-44e3-bf40-59f668f032ae.exe [183232 2015-08-23] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [133760 2014-01-08] (Atheros Communications)
HKU\S-1-5-21-89024625-531801101-2480016220-1001\...\Run: [ALLUpdate] => "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep"
HKU\S-1-5-21-89024625-531801101-2480016220-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-89024625-531801101-2480016220-1001\...\Run: [ASYSTENT Gofin] => C:\Program Files (x86)\GOFIN\ASYSTENT Gofin\ASYSTENTGofin.exe [809360 2015-02-04] (Wydawnictwo Podatkowe GOFIN sp. z o.o.)
HKU\S-1-5-21-89024625-531801101-2480016220-1001\...\Run: [GoogleChromeAutoLaunch_10DEA957400A554CAF8586793159A008] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-08-18] (Google Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-04-09] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-11-04]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-10] (Avast Software s.r.o.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp120150209
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-89024625-531801101-2480016220-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKLM -> OldSearch URL = hxxp://www.key-find.com/web/?type=dspp&ts=1423498106&from=cor&uid=SanDiskXSDSSDHP128G_143209405140&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-89024625-531801101-2480016220-1001 -> OldSearch URL = hxxp://www.key-find.com/web/?type=dspp&ts=1423498106&from=cor&uid=SanDiskXSDSSDHP128G_143209405140&q={searchTerms}
SearchScopes: HKU\S-1-5-21-89024625-531801101-2480016220-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-89024625-531801101-2480016220-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-10] (Avast Software s.r.o.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2015-07-28] (Sun Microsystems, Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-10] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2015-07-28] (Sun Microsystems, Inc.)
Tcpip\Parameters: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{2F286808-EF74-4E17-AD93-CC67D7E2338F}: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{DB16C82A-CB44-44B2-9AC2-8E5A74CAED29}: [DhcpNameServer] 8.8.8.8 8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Zbig\AppData\Roaming\Mozilla\Firefox\Profiles\2v1y3d2u.default
FF NewTab: hxxp://search.yahoo.com/?fr=hp-ddc-bd-tab&type=bg_616_bl-is-17__alt__ddc_dsssyctab_bd_com
FF SelectedSearchEngine: key-find
FF Homepage: hxxp://google.pl/
FF Keyword.URL: hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-17__alt__ddc_dss_bd_com&p={searchTerms}
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 -> C:\WINDOWS\SysWOW64\npdeployJava1.dll [2015-07-28] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2015-07-28] (Sun Microsystems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Extension: ALLYouTubeDownloader - C:\Users\Zbig\AppData\Roaming\Mozilla\Firefox\Profiles\2v1y3d2u.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi [2015-03-25]
FF Extension: Strong Signal - C:\Users\Zbig\AppData\Roaming\Mozilla\Firefox\Profiles\2v1y3d2u.default\Extensions\{9d204d90-67ed-4674-ad22-ac0bd52d6ba6}.xpi [2015-02-09]
FF Extension: Adblock Plus - C:\Users\Zbig\AppData\Roaming\Mozilla\Firefox\Profiles\2v1y3d2u.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-03-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-10]

Chrome: 
=======
CHR Profile: C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-10]
CHR Extension: (Google Drive) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-10]
CHR Extension: (YouTube) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-10]
CHR Extension: (Google Search) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-10]
CHR Extension: (Avast SafePrice) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-05-17]
CHR Extension: (AdBlock) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-10]
CHR Extension: (Avast Online Security) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-10]
CHR Extension: (Gmail) - C:\Users\Zbig\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-10]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-05-10]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-10]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [318592 2014-01-08] (Windows (R) Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-10] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-10] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
S2 varicopostgres2; C:\Varico\VaricoPostgres2\bin\pg_ctl.exe [95232 2014-03-18] (PostgreSQL Global Development Group) [File not signed]
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2015-05-01] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [306552 2015-05-01] (Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-10] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-10] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-10] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-10] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-10] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-29] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-10] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-10] ()
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-08] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2013-01-24] (OSR Open Systems Resources, Inc.)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [41200 2014-01-15] (Synaptics Incorporated)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-10] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-24 09:32 - 2015-08-24 09:32 - 00030056 _____ C:\Users\Zbig\Downloads\Addition.txt
2015-08-24 09:31 - 2015-08-24 09:33 - 00018816 _____ C:\Users\Zbig\Downloads\FRST.txt
2015-08-24 09:31 - 2015-08-24 09:33 - 00000000 ____D C:\FRST
2015-08-24 09:31 - 2015-08-24 09:31 - 00380416 _____ C:\Users\Zbig\Downloads\c4hqwr4m.exe
2015-08-24 09:30 - 2015-08-24 09:30 - 02173952 _____ (Farbar) C:\Users\Zbig\Downloads\FRST64.exe
2015-08-24 09:20 - 2015-08-24 09:22 - 00000000 ____D C:\AdwCleaner
2015-08-23 22:14 - 2015-08-23 22:14 - 00000000 ___RD C:\Users\Zbig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-08-18 22:58 - 2015-07-30 16:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-18 22:58 - 2015-07-30 15:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-17 19:58 - 2015-08-17 19:58 - 00011720 _____ C:\Users\Zbig\Desktop\29-Ile-zarabia-doradca-kredytowy.xlsx
2015-08-17 19:57 - 2015-08-17 19:57 - 00056296 _____ C:\Users\Zbig\Downloads\29-Ile-zarabia-doradca-kredytowy.xlsx
2015-08-14 09:35 - 2015-08-18 22:56 - 00000000 ____D C:\0ccad090c3804ff2fc49ca4176
2015-08-13 18:46 - 2015-08-13 19:34 - 00015375 _____ C:\Users\Zbig\Desktop\stany zobowiązań.xlsx
2015-08-13 16:38 - 2015-08-13 16:38 - 00000000 ___RD C:\Users\Gość\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-08-11 20:59 - 2015-07-19 03:58 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-08-11 20:59 - 2015-07-18 20:51 - 03704320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-11 20:59 - 2015-07-18 20:31 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-08-11 20:59 - 2015-07-18 20:31 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-08-11 20:59 - 2015-07-18 20:31 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-08-11 20:59 - 2015-07-18 20:29 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-08-11 20:59 - 2015-07-18 20:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-08-11 20:59 - 2015-07-18 20:29 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-08-11 20:59 - 2015-07-18 20:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-08-11 20:59 - 2015-07-18 20:12 - 02228736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-08-11 20:59 - 2015-07-18 20:10 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-11 20:59 - 2015-07-18 20:09 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-08-11 20:58 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-11 20:58 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-08-11 20:58 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-08-11 20:58 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-11 20:58 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-11 20:58 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-08-11 20:58 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-08-11 20:58 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-08-11 20:58 - 2015-07-16 21:53 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-08-11 20:58 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-08-11 20:58 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-08-11 20:58 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-08-11 20:58 - 2015-07-16 21:45 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-08-11 20:58 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-08-11 20:58 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-08-11 20:58 - 2015-07-16 21:38 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-08-11 20:58 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-08-11 20:58 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-11 20:58 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-08-11 20:58 - 2015-07-16 21:14 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-11 20:58 - 2015-07-16 21:13 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-08-11 20:58 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-08-11 20:58 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-11 20:58 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-08-11 20:58 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-08-11 20:58 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-11 20:58 - 2015-07-16 20:52 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-08-11 20:58 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-08-11 20:58 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-08-11 20:58 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-08-11 20:58 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-08-11 20:58 - 2015-06-09 20:27 - 00411133 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-08-11 20:57 - 2015-07-29 16:37 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-11 20:57 - 2015-07-29 16:30 - 01381888 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-11 20:57 - 2015-07-29 16:23 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2015-08-11 20:57 - 2015-07-29 01:24 - 00025776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-08-11 20:57 - 2015-07-28 16:24 - 01148416 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-08-11 20:57 - 2015-07-28 16:24 - 01116160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-08-11 20:57 - 2015-07-28 16:24 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-08-11 20:57 - 2015-07-28 16:24 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-08-11 20:57 - 2015-07-28 16:24 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-08-11 20:57 - 2015-07-28 16:24 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-08-11 20:57 - 2015-07-24 20:57 - 04177408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-08-11 20:57 - 2015-07-24 20:57 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-11 20:57 - 2015-07-24 20:52 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-11 20:57 - 2015-07-24 19:27 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-08-11 20:57 - 2015-07-24 19:23 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-08-11 20:57 - 2015-07-16 02:29 - 07458648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-11 20:57 - 2015-07-16 02:29 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-11 20:57 - 2015-07-16 02:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-11 20:57 - 2015-07-16 02:28 - 01499920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-08-11 20:57 - 2015-07-14 23:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-11 20:57 - 2015-07-14 23:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2015-08-11 20:57 - 2015-07-14 23:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2015-08-11 20:57 - 2015-07-14 05:22 - 02529880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-08-11 20:57 - 2015-07-14 05:21 - 01901776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-08-11 20:57 - 2015-07-13 21:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-08-11 20:57 - 2015-07-13 21:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2015-08-11 20:57 - 2015-07-10 20:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2015-08-11 20:57 - 2015-07-10 19:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-11 20:57 - 2015-07-10 19:42 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-08-11 20:57 - 2015-07-10 19:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2015-08-11 20:57 - 2015-07-10 19:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-08-11 20:57 - 2015-07-10 18:47 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-08-11 20:57 - 2015-07-10 18:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2015-08-11 20:57 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-11 20:57 - 2015-07-09 19:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-11 20:57 - 2015-07-09 18:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
2015-08-11 20:57 - 2015-07-07 11:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-08-11 20:57 - 2015-07-07 11:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-08-11 20:57 - 2015-07-07 11:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-08-11 20:57 - 2015-07-02 00:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2015-08-11 20:57 - 2015-07-02 00:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2015-08-11 20:57 - 2015-07-01 23:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2015-08-11 20:57 - 2015-07-01 23:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2015-08-11 20:57 - 2015-06-12 19:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-11 20:57 - 2015-06-12 18:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-08-11 20:57 - 2015-06-11 22:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-08-11 20:57 - 2015-06-11 22:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-08-11 20:40 - 2015-08-11 20:40 - 00000000 ____D C:\Users\Gość\Documents\Moje skanowanie
2015-08-07 14:16 - 2015-08-07 14:16 - 00023265 _____ C:\Users\Zbig\Downloads\150807_CzerepkoK_Maersk_cv (1).odt
2015-08-07 14:15 - 2015-08-07 14:15 - 00010506 _____ C:\Users\Zbig\Downloads\Krzysztof Czerepko.odt
2015-08-07 14:14 - 2015-08-07 14:14 - 00023265 _____ C:\Users\Zbig\Downloads\150807_CzerepkoK_Maersk_cv.odt
2015-08-06 15:09 - 2015-08-06 15:09 - 00010506 _____ C:\Users\Zbig\Desktop\Krzysztof Czerepko.odt
2015-08-06 14:21 - 2015-08-06 14:21 - 00023216 _____ C:\Users\Zbig\Downloads\Bez tytułu 1.odt
2015-08-05 23:16 - 2015-08-05 23:17 - 00000000 ____D C:\Users\Zbig\Desktop\KPIR
2015-08-04 21:55 - 2015-08-04 21:57 - 00005504 _____ C:\Users\Zbig\ksw32.lc
2015-08-04 21:50 - 2015-08-05 19:41 - 00005504 _____ C:\Users\Zbig\maw32.lc
2015-08-04 21:48 - 2015-08-05 19:41 - 00000000 ____D C:\MalaKsiegowosc
2015-08-04 21:48 - 2015-08-04 21:48 - 00001481 _____ C:\Users\Public\Desktop\Mała Księgowość.lnk
2015-08-04 21:48 - 2015-08-04 21:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mała Księgowość
2015-08-04 21:47 - 2015-08-04 21:57 - 00000000 ____D C:\Ksiega
2015-08-04 21:47 - 2015-08-04 21:47 - 00001416 _____ C:\Users\Public\Desktop\Księga.lnk
2015-08-04 21:47 - 2015-08-04 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Księga
2015-08-04 21:45 - 2015-08-04 21:46 - 16315952 _____ (Fineco Software) C:\Users\Zbig\Downloads\mala-ksiegowosc.exe
2015-08-04 21:45 - 2015-08-04 21:46 - 10130656 _____ (Fineco Software) C:\Users\Zbig\Downloads\ksiega.exe
2015-07-28 20:52 - 2015-08-05 20:59 - 00000000 ____D C:\Users\Zbig\Documents\efile-backup
2015-07-28 20:49 - 2015-07-28 20:52 - 00001166 _____ C:\Users\Zbig\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Varico Przyjazne Formularze, druki, deklaracje, umowy.lnk
2015-07-28 20:49 - 2015-07-28 20:52 - 00001136 _____ C:\Users\Zbig\Desktop\Varico Przyjazne Formularze.lnk
2015-07-28 20:49 - 2015-07-28 20:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Varico Przyjazne Formularze
2015-07-28 20:49 - 2015-07-28 20:52 - 00000000 ____D C:\Program Files (x86)\Varico Przyjazne Formularze
2015-07-28 20:49 - 2015-07-28 20:49 - 00000000 ____D C:\Users\Zbig\Documents\efile
2015-07-28 20:49 - 2015-07-28 20:49 - 00000000 ____D C:\Users\Zbig\AppData\Roaming\fillUp
2015-07-28 20:49 - 2015-07-28 20:49 - 00000000 ____D C:\Users\Zbig\AppData\Roaming\com.efile.fillup
2015-07-28 20:48 - 2015-07-28 20:48 - 00477168 _____ (Sun Microsystems, Inc.) C:\WINDOWS\SysWOW64\npdeployJava1.dll
2015-07-28 20:48 - 2015-07-28 20:48 - 00473072 _____ (Sun Microsystems, Inc.) C:\WINDOWS\SysWOW64\deployJava1.dll
2015-07-28 20:48 - 2015-07-28 20:48 - 00157680 _____ (Sun Microsystems, Inc.) C:\WINDOWS\SysWOW64\javaws.exe
2015-07-28 20:48 - 2015-07-28 20:48 - 00149488 _____ (Sun Microsystems, Inc.) C:\WINDOWS\SysWOW64\javaw.exe
2015-07-28 20:48 - 2015-07-28 20:48 - 00149488 _____ (Sun Microsystems, Inc.) C:\WINDOWS\SysWOW64\java.exe
2015-07-28 20:48 - 2015-07-28 20:48 - 00000000 ____D C:\ProgramData\Sun
2015-07-28 20:48 - 2015-07-28 20:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Varico
2015-07-28 20:48 - 2015-07-28 20:48 - 00000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 SDK
2015-07-28 20:48 - 2015-07-28 20:48 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-28 20:47 - 2015-07-28 20:48 - 00000000 ____D C:\Varico
2015-07-28 20:47 - 2015-07-28 20:47 - 00000020 ___SH C:\Users\varicopostgres\ntuser.ini
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Ustawienia lokalne
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Szablony
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Moje dokumenty
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Menu Start
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Documents\Moje wideo
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Documents\Moje obrazy
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Documents\Moja muzyka
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\Dane aplikacji
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\AppData\Local\Historia
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 _SHDL C:\Users\varicopostgres\AppData\Local\Dane aplikacji
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 ____D C:\Users\varicopostgres
2015-07-28 20:47 - 2015-07-28 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 9.1 (x86)
2015-07-28 20:47 - 2015-03-20 01:26 - 00000000 ___RD C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-07-28 20:47 - 2015-03-20 01:26 - 00000000 ___RD C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-07-28 20:47 - 2015-03-20 01:26 - 00000000 ___RD C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-07-28 20:47 - 2014-10-29 23:17 - 00000000 ____D C:\Users\varicopostgres\AppData\Local\Microsoft Help
2015-07-28 20:47 - 2014-09-24 17:10 - 00000369 _____ C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-07-28 20:47 - 2014-09-24 17:10 - 00000369 _____ C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-07-28 20:47 - 2013-08-22 17:36 - 00000000 ____D C:\Users\varicopostgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-07-28 20:44 - 2015-07-28 20:45 - 172649528 _____ (Varico® w biznesie warto na nas liczyć ) C:\Users\Zbig\Downloads\KPiR(varico).exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-24 09:28 - 2015-07-13 11:54 - 01725583 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-24 09:27 - 2014-10-10 01:36 - 00003592 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-89024625-531801101-2480016220-1001
2015-08-24 09:22 - 2015-02-09 18:41 - 00000000 ____D C:\Users\Zbig\AppData\Local\CrashDumps
2015-08-24 09:22 - 2014-10-30 19:21 - 00008192 _____ C:\WINDOWS\SysWOW64\WDPABKP.dat
2015-08-24 09:20 - 2014-09-24 17:08 - 01828496 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-24 09:20 - 2014-09-24 16:35 - 00808198 _____ C:\WINDOWS\system32\perfh015.dat
2015-08-24 09:20 - 2014-09-24 16:35 - 00164014 _____ C:\WINDOWS\system32\perfc015.dat
2015-08-24 09:18 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-23 23:44 - 2015-06-20 00:20 - 00000000 ____D C:\Users\Zbig\AppData\Roaming\ASYSTENTGofin
2015-08-23 23:39 - 2014-10-29 21:51 - 00000930 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-23 23:18 - 2014-10-10 10:47 - 00001084 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-23 22:13 - 2015-07-16 13:53 - 00011544 _____ C:\WINDOWS\PFRO.log
2015-08-23 22:13 - 2015-07-16 13:53 - 00002259 _____ C:\WINDOWS\setupact.log
2015-08-23 22:13 - 2014-10-28 20:59 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-23 22:13 - 2014-10-28 20:59 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-08-23 22:13 - 2014-10-25 16:02 - 00000000 ____D C:\Users\Zbig\OneDrive
2015-08-23 22:13 - 2014-10-10 10:47 - 00001080 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-23 22:13 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-23 22:13 - 2013-08-22 16:44 - 00484344 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-23 22:13 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-08-23 22:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 22:12 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-23 22:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2015-08-23 22:12 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-08-21 00:39 - 2015-05-20 20:20 - 00000000 ____D C:\Users\Zbig\Desktop\DCIM
2015-08-21 00:38 - 2015-05-03 20:31 - 00000000 ____D C:\Users\Zbig\Desktop\Bartnicza
2015-08-19 18:07 - 2014-10-18 18:20 - 00433664 ___SH C:\Users\Zbig\Desktop\Thumbs.db
2015-08-19 17:33 - 2015-06-30 23:42 - 00000000 ____D C:\Users\Zbig\Desktop\Projekty remonowe
2015-08-19 13:53 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-19 13:46 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-18 22:59 - 2014-10-10 12:42 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-18 22:58 - 2014-10-28 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-14 09:35 - 2014-10-10 09:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-08-14 09:35 - 2014-10-10 09:32 - 132483416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-14 09:33 - 2014-12-11 14:58 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-14 09:33 - 2014-09-24 18:37 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-08-14 09:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 09:32 - 2013-08-22 17:36 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-14 03:50 - 2014-09-24 18:40 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-08-14 03:50 - 2014-09-24 18:40 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-08-13 16:39 - 2014-10-10 11:46 - 00000000 ____D C:\Users\Zbig\Documents\Bluetooth Folder
2015-08-11 20:53 - 2014-10-10 11:31 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-11 20:39 - 2014-10-29 21:51 - 00003818 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-08-11 20:13 - 2015-07-22 14:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-11 20:13 - 2014-10-27 21:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-05 23:21 - 2015-05-31 20:21 - 00000000 ____D C:\Users\Zbig\Desktop\Biuro Rachunkowe INFO
2015-08-05 23:16 - 2014-10-10 01:31 - 00000000 ____D C:\Users\Zbig\AppData\Local\VirtualStore
2015-08-04 21:55 - 2014-10-10 11:33 - 00000000 ____D C:\Users\Zbig
2015-08-04 12:45 - 2014-10-10 12:30 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-04 12:41 - 2015-07-10 19:05 - 00000000 ___HD C:\$Windows.~BT
2015-07-28 17:02 - 2015-04-20 00:26 - 00000000 ___SD C:\WINDOWS\system32\GWX

==================== Files in the root of some directories =======

2015-07-12 18:24 - 2015-07-12 18:24 - 0003183 _____ () C:\Users\Zbig\AppData\Local\unins000.dat
2015-07-12 18:24 - 2015-07-12 18:24 - 0707744 _____ () C:\Users\Zbig\AppData\Local\unins000.exe
2015-07-12 18:24 - 2015-07-12 18:24 - 0011761 _____ () C:\Users\Zbig\AppData\Local\unins000.msg
2014-10-10 11:30 - 2014-10-10 11:30 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-04 21:03 - 2015-03-27 00:24 - 0001377 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
C:\Users\Zbig\AppData\Local\Temp\ehxsbyh5.dll
C:\Users\Zbig\AppData\Local\Temp\fhlsodbm.dll
C:\Users\Zbig\AppData\Local\Temp\gt_dcteq.dll
C:\Users\Zbig\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-08-23 23:21

==================== End of log ============================