Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-11-2013 01
Ran by Marta (administrator) on KOMPUTER on 22-11-2013 22:04:54
Running from C:\Users\Marta\Desktop\Nowy folder (2)
Windows 7 Professional Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(FirebirdSQL Project) d:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
(Aladdin Knowledge Systems Ltd.) C:\Windows\system32\hasplms.exe
( ) C:\Windows\system32\lxczcoms.exe
(Malwarebytes Corporation) d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(FirebirdSQL Project) d:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [Autodesk Sync] - C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)
HKCU\...\Run: [ALLUpdate] - D:\Program Files (x86)\ALLPlayer\ALLUpdate.exe [2995712 2013-01-23] (ALLPlayer Group Ltd.)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [911040 2013-04-22] (Microsoft Corporation)
HKCU\...\Policies\Explorer: [] 
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://forum.videoediting.ru/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - D:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.20.1 192.168.1.1

Chrome: 
=======
CHR HomePage: https://www.google.pl/
CHR RestoreOnStartup: "hxxp://www.google.pl/", "hxxp://home.sweetim.com/?crg=3.1010000&st=10&barid={2C5ACA6A-580F-4CBF-B9C4-1F9CBEE5C544}", "hxxp://www.google.com"
CHR DefaultSearchURL: (SweetIM Search) - http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=10&q={searchTerms}&barid={2C5ACA6A-580F-4CBF-B9C4-1F9CBEE5C544}
CHR DefaultSuggestURL: (SweetIM Search) -       "suggest_url": "",
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Unity Player) - C:\Users\Marta\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - D:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Extension: (Google Docs) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (InfoBird Pro) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\icanoneicgaahjbilcgdmnhoocddknbl\3.0.0.0_1
CHR Extension: (Google Wallet) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [icanoneicgaahjbilcgdmnhoocddknbl] - C:\Users\Marta\AppData\Local\InfoBirdPro.crx
CHR HKLM-x32\...\Chrome\Extension: [icanoneicgaahjbilcgdmnhoocddknbl] - C:\Users\Marta\AppData\Local\InfoBirdPro.crx

==================== Services (Whitelisted) =================

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 FirebirdGuardianDefaultInstance; d:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe [81920 2008-04-23] (FirebirdSQL Project)
R3 FirebirdServerDefaultInstance; d:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe [2015232 2008-04-23] (FirebirdSQL Project)
S2 KMService; C:\Windows\SysWow64\srvany.exe [8192 2012-10-30] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
R2 lxcz_device; C:\Windows\SysWow64\lxczcoms.exe [537520 2007-04-19] ( )
R2 MBAMScheduler; d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; d:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [x]

==================== Drivers (Whitelisted) ====================

R3 AtcL001; C:\Windows\System32\DRIVERS\l160x64.sys [58368 2009-06-25] (Atheros Communications, Inc.)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R2 hardlock; C:\Windows\SysWow64\drivers\hardlock.sys [26048 2006-02-17] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 rstescu; C:\Windows\system32\drivers\rstescu.sys [607256 2011-03-25] (Intel Corporation)
S3 rstescu1; C:\Windows\system32\drivers\rstescu1.sys [607256 2011-03-25] (Intel Corporation)
R0 rstfltr; C:\Windows\System32\drivers\rstfltr.sys [22552 2011-03-25] (Intel Corporation)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S3 UBNRedir; C:\Windows\SysWow64\DRIVERS\ubnredir.sys [6784 2012-02-09] (UniversalBox)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S4 pccsmcfd; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-22 22:03 - 2013-11-22 22:04 - 00000000 ____D C:\Users\Marta\Desktop\Nowy folder (2)
2013-11-22 21:31 - 2013-11-22 21:32 - 00027023 _____ C:\Users\Marta\Desktop\Addition.txt
2013-11-22 21:30 - 2013-11-22 21:32 - 00040060 _____ C:\Users\Marta\Desktop\FRST.txt
2013-11-22 21:30 - 2013-11-22 21:30 - 00000000 ___DC C:\FRST
2013-11-22 21:29 - 2013-11-22 21:33 - 00118330 _____ C:\Users\Marta\Desktop\Extras.Txt
2013-11-22 21:28 - 2013-11-22 21:30 - 00112614 _____ C:\Users\Marta\Desktop\OTL.Txt
2013-11-22 21:12 - 2013-11-22 21:14 - 00000000 ___DC C:\AdwCleaner
2013-11-22 21:12 - 2013-11-22 21:12 - 00004697 ____C C:\UsbFix [Listing 2 ] KOMPUTER.txt
2013-11-22 21:12 - 2013-11-22 21:12 - 00004697 _____ C:\Users\Marta\Desktop\UsbFix [Listing 2 ] KOMPUTER.txt
2013-11-22 21:09 - 2013-11-22 21:10 - 00004623 ____C C:\UsbFix [Listing 1 ] KOMPUTER.txt
2013-11-22 21:08 - 2013-11-22 21:08 - 00602112 _____ (OldTimer Tools) C:\Users\Marta\Desktop\OTL.exe
2013-11-22 21:06 - 2013-11-22 21:06 - 01085542 _____ C:\Users\Marta\Desktop\adwcleaner.exe
2013-11-22 21:05 - 2013-11-22 21:05 - 01204601 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\Marta\Desktop\UsbFix.exe
2013-11-22 20:13 - 2013-11-22 20:13 - 00027753 ____C C:\ComboFix.txt
2013-11-22 19:50 - 2013-11-22 19:51 - 05147802 ____R (Swearware) C:\Users\Marta\Desktop\ComboFix.exe
2013-11-22 19:44 - 2013-11-22 19:49 - 00000114 _____ C:\Users\Marta\Desktop\Nowy dokument tekstowy.txt
2013-11-22 18:32 - 2013-11-22 18:32 - 00003194 _____ C:\Windows\System32\Tasks\{188B069C-8CEF-44DC-992E-810B3420273A}
2013-11-22 18:32 - 2013-11-22 18:32 - 00000227 _____ C:\Windows\SysWOW64\HDD32.LOG
2013-11-22 00:06 - 2013-11-22 00:14 - 290185988 _____ C:\Users\Marta\Desktop\Prerequisites for Bentley Desktop Applications v8.11.05.05.rar
2013-11-21 22:59 - 2013-11-21 22:59 - 00001802 _____ C:\Users\Public\Desktop\Inventor Fusion 2013.lnk
2013-11-21 22:55 - 2013-11-21 22:55 - 00000000 ____D C:\Users\Marta\Documents\Inventor Server SDK ACAD 2013
2013-11-21 22:51 - 2013-11-21 22:51 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2013-11-21 22:50 - 2013-11-21 23:54 - 00000000 ____D C:\Users\Marta\AppData\Local\Autodesk
2013-11-21 22:50 - 2013-11-21 22:55 - 00001871 _____ C:\Users\Public\Desktop\AutoCAD 2013 – Polski (Polish).lnk
2013-11-21 22:43 - 2013-11-21 22:58 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2013-11-21 22:43 - 2013-11-21 22:56 - 00000000 ____D C:\Program Files\Autodesk
2013-11-21 22:41 - 2013-11-21 22:41 - 00000000 ____D C:\Program Files (x86)\Autodesk
2013-11-21 21:10 - 2013-11-21 21:10 - 00000793 _____ C:\Users\Public\Desktop\EWMAPA FB.lnk
2013-11-21 20:02 - 2013-11-22 21:12 - 00000000 ___DC C:\UsbFix
2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Marta\.android
2013-11-21 19:43 - 2013-11-21 19:43 - 00000786 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-21 19:43 - 2013-11-21 19:43 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Malwarebytes
2013-11-21 19:43 - 2013-11-21 19:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-21 19:43 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-11-21 19:31 - 2013-11-21 19:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marta\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-21 18:20 - 2013-11-22 00:26 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Autodesk
2013-11-21 18:20 - 2013-11-22 00:26 - 00000000 ____D C:\ProgramData\Autodesk
2013-11-21 18:19 - 2013-11-21 18:19 - 00003182 _____ C:\Windows\System32\Tasks\{C352C6F4-A9BB-461A-AC39-1BCA5FCB30A4}
2013-11-21 15:07 - 2013-11-21 15:07 - 00001972 _____ C:\Users\Marta\Desktop\Drakensang Online.lnk
2013-11-21 15:07 - 2013-11-21 15:07 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2013-11-21 15:07 - 2013-11-21 15:07 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2013-11-19 00:23 - 2009-08-26 07:48 - 00071040 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\Drivers\aksdf.sys
2013-11-19 00:22 - 2009-03-13 11:55 - 00318464 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\Drivers\hardlock.sys
2013-11-18 23:07 - 2013-11-18 23:07 - 00003136 _____ C:\Windows\System32\Tasks\{ADF51223-C63C-4243-B24E-28DEFE610360}
2013-11-18 23:06 - 2013-11-18 23:06 - 00943835 _____ C:\Users\Marta\Downloads\winzip70 (2).exe
2013-11-18 23:02 - 2013-11-18 23:02 - 00943835 _____ C:\Users\Marta\Downloads\winzip70.exe
2013-11-18 23:02 - 2013-11-18 23:02 - 00943835 _____ C:\Users\Marta\Downloads\winzip70 (1).exe
2013-11-18 22:54 - 2013-11-18 22:54 - 46393856 _____ C:\Users\Marta\Downloads\winzip180-64.msi
2013-11-18 22:51 - 2013-11-18 22:52 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-18 22:51 - 2013-11-18 22:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-18 22:50 - 2013-11-18 22:51 - 13695672 _____ (Microsoft Corporation) C:\Users\Marta\Downloads\mseinstall.exe
2013-11-18 22:18 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-18 22:18 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-18 22:18 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-18 22:18 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-18 22:18 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-18 22:18 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-18 22:18 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-18 22:18 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-18 21:37 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-18 21:37 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-18 21:37 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-18 21:37 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-18 21:37 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-18 21:11 - 2013-11-18 21:11 - 00000000 ____D C:\Users\Marta\AppData\Roaming\GetRightToGo
2013-11-18 21:10 - 2013-11-18 21:10 - 00368256 _____ (RegNow.com) C:\Users\Marta\Downloads\Download_MaxSDDMnew.exe
2013-11-18 21:05 - 2013-11-22 20:14 - 00000000 ___DC C:\Qoobox
2013-11-18 21:05 - 2013-11-18 22:43 - 00000000 ____D C:\Windows\erdnt
2013-11-18 20:30 - 2013-11-18 20:34 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Skype
2013-11-18 20:30 - 2013-11-18 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-18 20:30 - 2013-11-18 20:30 - 00000000 ____D C:\ProgramData\Skype
2013-11-18 20:28 - 2013-11-18 20:28 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Marta\Downloads\SkypeSetup.exe
2013-11-18 20:24 - 2013-11-22 20:29 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001UA.job
2013-11-18 20:24 - 2013-11-22 20:29 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001Core.job
2013-11-18 20:24 - 2013-11-18 20:25 - 00000000 ____D C:\Users\Marta\AppData\Local\Facebook
2013-11-18 20:24 - 2013-11-18 20:24 - 00501248 _____ (Facebook Inc.) C:\Users\Marta\Downloads\FacebookVideoCallSetup_v122050.exe
2013-11-18 20:24 - 2013-11-18 20:24 - 00003904 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001UA
2013-11-18 20:24 - 2013-11-18 20:24 - 00003536 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001Core
2013-11-14 16:19 - 2013-11-14 16:19 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64
2013-11-14 16:19 - 2013-11-14 16:19 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan
2013-11-12 20:21 - 2013-11-12 20:21 - 00016885 _____ C:\Users\Marta\Downloads\METODA GAUSSA ćw1 PnO.xlsx
2013-11-06 21:08 - 2013-11-06 21:08 - 00000045 _____ C:\Windows\literat.ini
2013-11-06 21:07 - 2013-11-06 21:07 - 02563613 _____ (Literat                                                     ) C:\Users\Marta\Downloads\LiteratInst.exe
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Real
2013-10-28 22:46 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-10-28 22:46 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-10-28 22:46 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2013-10-28 22:46 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-10-28 22:46 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-10-28 22:46 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-10-28 22:46 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-28 22:46 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-28 22:46 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-10-28 22:46 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-10-28 22:46 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-10-28 22:46 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-10-28 22:46 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-28 22:46 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-10-28 22:46 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-10-28 22:46 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-10-28 22:46 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-10-28 22:46 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2013-10-28 22:46 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-10-28 22:46 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-10-28 22:46 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-10-28 22:46 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-10-28 22:46 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-10-28 22:46 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-10-28 22:46 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-10-28 22:40 - 2012-08-24 19:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-10-28 22:40 - 2012-08-24 19:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-10-28 22:40 - 2012-08-24 19:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-10-28 22:40 - 2012-08-24 19:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-10-28 22:40 - 2012-08-24 17:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-10-28 22:40 - 2012-08-24 17:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-10-28 22:40 - 2012-08-24 17:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-10-28 22:40 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-10-28 22:40 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-10-26 16:00 - 2013-10-26 16:01 - 00000000 ____D C:\Users\Marta\Desktop\Nowy folder
2013-10-24 21:49 - 2013-11-18 21:36 - 00000000 ___DC C:\Autodesk
2013-10-24 21:39 - 2013-10-24 21:40 - 11014920 _____ C:\Users\Marta\Downloads\AutoCAD_2014_Polish_Win_32-64bit_wi_pl-PL_Setup.exe
2013-10-23 19:43 - 2013-10-23 19:43 - 00024998 _____ C:\Users\Marta\Downloads\HASP_DUMP.rar
2013-10-23 19:28 - 2013-10-23 19:28 - 00003368 _____ C:\Windows\System32\Tasks\{1E528444-0700-4B2D-AF4A-4B6707B0C399}

==================== One Month Modified Files and Folders =======

2013-11-22 22:04 - 2013-11-22 22:03 - 00000000 ____D C:\Users\Marta\Desktop\Nowy folder (2)
2013-11-22 22:03 - 2012-01-31 00:56 - 00000000 ____D C:\Users\Marta
2013-11-22 21:34 - 2013-04-04 09:17 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-22 21:33 - 2013-11-22 21:29 - 00118330 _____ C:\Users\Marta\Desktop\Extras.Txt
2013-11-22 21:32 - 2013-11-22 21:31 - 00027023 _____ C:\Users\Marta\Desktop\Addition.txt
2013-11-22 21:32 - 2013-11-22 21:30 - 00040060 _____ C:\Users\Marta\Desktop\FRST.txt
2013-11-22 21:30 - 2013-11-22 21:30 - 00000000 ___DC C:\FRST
2013-11-22 21:30 - 2013-11-22 21:28 - 00112614 _____ C:\Users\Marta\Desktop\OTL.Txt
2013-11-22 21:23 - 2009-07-14 05:45 - 00025904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-22 21:23 - 2009-07-14 05:45 - 00025904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-22 21:20 - 2012-01-31 00:49 - 01497556 _____ C:\Windows\WindowsUpdate.log
2013-11-22 21:16 - 2012-12-27 13:43 - 00000437 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-11-22 21:16 - 2012-01-31 14:06 - 00001042 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-22 21:15 - 2012-01-31 02:49 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-22 21:15 - 2010-11-21 04:47 - 00431018 _____ C:\Windows\PFRO.log
2013-11-22 21:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-22 21:15 - 2009-07-14 05:51 - 00018582 _____ C:\Windows\setupact.log
2013-11-22 21:14 - 2013-11-22 21:12 - 00000000 ___DC C:\AdwCleaner
2013-11-22 21:14 - 2012-08-17 14:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-22 21:12 - 2013-11-22 21:12 - 00004697 ____C C:\UsbFix [Listing 2 ] KOMPUTER.txt
2013-11-22 21:12 - 2013-11-22 21:12 - 00004697 _____ C:\Users\Marta\Desktop\UsbFix [Listing 2 ] KOMPUTER.txt
2013-11-22 21:12 - 2013-11-21 20:02 - 00000000 ___DC C:\UsbFix
2013-11-22 21:11 - 2012-01-31 14:06 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-22 21:10 - 2013-11-22 21:09 - 00004623 ____C C:\UsbFix [Listing 1 ] KOMPUTER.txt
2013-11-22 21:08 - 2013-11-22 21:08 - 00602112 _____ (OldTimer Tools) C:\Users\Marta\Desktop\OTL.exe
2013-11-22 21:06 - 2013-11-22 21:06 - 01085542 _____ C:\Users\Marta\Desktop\adwcleaner.exe
2013-11-22 21:05 - 2013-11-22 21:05 - 01204601 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\Marta\Desktop\UsbFix.exe
2013-11-22 20:29 - 2013-11-18 20:24 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001UA.job
2013-11-22 20:29 - 2013-11-18 20:24 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001Core.job
2013-11-22 20:14 - 2013-11-18 21:05 - 00000000 ___DC C:\Qoobox
2013-11-22 20:13 - 2013-11-22 20:13 - 00027753 ____C C:\ComboFix.txt
2013-11-22 20:06 - 2009-07-14 03:34 - 00000215 ____C C:\Windows\system.ini
2013-11-22 19:51 - 2013-11-22 19:50 - 05147802 ____R (Swearware) C:\Users\Marta\Desktop\ComboFix.exe
2013-11-22 19:49 - 2013-11-22 19:44 - 00000114 _____ C:\Users\Marta\Desktop\Nowy dokument tekstowy.txt
2013-11-22 18:32 - 2013-11-22 18:32 - 00003194 _____ C:\Windows\System32\Tasks\{188B069C-8CEF-44DC-992E-810B3420273A}
2013-11-22 18:32 - 2013-11-22 18:32 - 00000227 _____ C:\Windows\SysWOW64\HDD32.LOG
2013-11-22 06:07 - 2012-02-09 02:32 - 00000000 ____D C:\Users\Marta\AppData\Local\CrashDumps
2013-11-22 06:00 - 2009-07-14 05:45 - 00533848 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-22 00:26 - 2013-11-21 18:20 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Autodesk
2013-11-22 00:26 - 2013-11-21 18:20 - 00000000 ____D C:\ProgramData\Autodesk
2013-11-22 00:26 - 2012-01-31 01:12 - 00428799 _____ C:\Windows\DirectX.log
2013-11-22 00:14 - 2013-11-22 00:06 - 290185988 _____ C:\Users\Marta\Desktop\Prerequisites for Bentley Desktop Applications v8.11.05.05.rar
2013-11-21 23:54 - 2013-11-21 22:50 - 00000000 ____D C:\Users\Marta\AppData\Local\Autodesk
2013-11-21 23:37 - 2013-08-29 17:32 - 00000000 ____D C:\ProgramData\FLEXnet
2013-11-21 23:09 - 2013-03-14 22:03 - 00000000 ____D C:\Program Files (x86)\FLVPlayer
2013-11-21 23:09 - 2012-01-31 01:34 - 00156848 _____ C:\Users\Marta\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-21 22:59 - 2013-11-21 22:59 - 00001802 _____ C:\Users\Public\Desktop\Inventor Fusion 2013.lnk
2013-11-21 22:58 - 2013-11-21 22:43 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2013-11-21 22:56 - 2013-11-21 22:43 - 00000000 ____D C:\Program Files\Autodesk
2013-11-21 22:55 - 2013-11-21 22:55 - 00000000 ____D C:\Users\Marta\Documents\Inventor Server SDK ACAD 2013
2013-11-21 22:55 - 2013-11-21 22:50 - 00001871 _____ C:\Users\Public\Desktop\AutoCAD 2013 – Polski (Polish).lnk
2013-11-21 22:51 - 2013-11-21 22:51 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2013-11-21 22:41 - 2013-11-21 22:41 - 00000000 ____D C:\Program Files (x86)\Autodesk
2013-11-21 22:38 - 2012-06-09 17:05 - 01638686 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-21 22:38 - 2012-01-31 09:45 - 00737958 _____ C:\Windows\system32\perfh015.dat
2013-11-21 22:38 - 2012-01-31 09:45 - 00154646 _____ C:\Windows\system32\perfc015.dat
2013-11-21 22:37 - 2009-07-14 06:13 - 01638686 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-21 21:11 - 2012-05-09 19:46 - 00015817 _____ C:\Windows\aksdrvsetup.log
2013-11-21 21:11 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2013-11-21 21:10 - 2013-11-21 21:10 - 00000793 _____ C:\Users\Public\Desktop\EWMAPA FB.lnk
2013-11-21 20:58 - 2012-02-27 22:17 - 00000000 ____D C:\Users\Marta\Documents\Pliki programu Outlook
2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Marta\.android
2013-11-21 19:43 - 2013-11-21 19:43 - 00000786 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-21 19:43 - 2013-11-21 19:43 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Malwarebytes
2013-11-21 19:43 - 2013-11-21 19:43 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-21 19:31 - 2013-11-21 19:31 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Marta\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-21 18:19 - 2013-11-21 18:19 - 00003182 _____ C:\Windows\System32\Tasks\{C352C6F4-A9BB-461A-AC39-1BCA5FCB30A4}
2013-11-21 15:07 - 2013-11-21 15:07 - 00001972 _____ C:\Users\Marta\Desktop\Drakensang Online.lnk
2013-11-21 15:07 - 2013-11-21 15:07 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2013-11-21 15:07 - 2013-11-21 15:07 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2013-11-19 11:21 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-19 00:40 - 2013-08-14 18:50 - 00000000 ____D C:\Windows\system32\MRT
2013-11-19 00:34 - 2012-03-02 08:20 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-18 23:07 - 2013-11-18 23:07 - 00003136 _____ C:\Windows\System32\Tasks\{ADF51223-C63C-4243-B24E-28DEFE610360}
2013-11-18 23:06 - 2013-11-18 23:06 - 00943835 _____ C:\Users\Marta\Downloads\winzip70 (2).exe
2013-11-18 23:02 - 2013-11-18 23:02 - 00943835 _____ C:\Users\Marta\Downloads\winzip70.exe
2013-11-18 23:02 - 2013-11-18 23:02 - 00943835 _____ C:\Users\Marta\Downloads\winzip70 (1).exe
2013-11-18 23:01 - 2012-01-31 01:27 - 00000000 ____D C:\ProgramData\WinZip
2013-11-18 22:54 - 2013-11-18 22:54 - 46393856 _____ C:\Users\Marta\Downloads\winzip180-64.msi
2013-11-18 22:52 - 2013-11-18 22:51 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-18 22:52 - 2012-06-09 17:05 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-18 22:51 - 2013-11-18 22:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-18 22:51 - 2013-11-18 22:50 - 13695672 _____ (Microsoft Corporation) C:\Users\Marta\Downloads\mseinstall.exe
2013-11-18 22:43 - 2013-11-18 21:05 - 00000000 ____D C:\Windows\erdnt
2013-11-18 21:36 - 2013-10-24 21:49 - 00000000 ___DC C:\Autodesk
2013-11-18 21:11 - 2013-11-18 21:11 - 00000000 ____D C:\Users\Marta\AppData\Roaming\GetRightToGo
2013-11-18 21:10 - 2013-11-18 21:10 - 00368256 _____ (RegNow.com) C:\Users\Marta\Downloads\Download_MaxSDDMnew.exe
2013-11-18 20:34 - 2013-11-18 20:30 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Skype
2013-11-18 20:30 - 2013-11-18 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-18 20:30 - 2013-11-18 20:30 - 00000000 ____D C:\ProgramData\Skype
2013-11-18 20:28 - 2013-11-18 20:28 - 01550496 _____ (Skype Technologies S.A.) C:\Users\Marta\Downloads\SkypeSetup.exe
2013-11-18 20:25 - 2013-11-18 20:24 - 00000000 ____D C:\Users\Marta\AppData\Local\Facebook
2013-11-18 20:24 - 2013-11-18 20:24 - 00501248 _____ (Facebook Inc.) C:\Users\Marta\Downloads\FacebookVideoCallSetup_v122050.exe
2013-11-18 20:24 - 2013-11-18 20:24 - 00003904 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001UA
2013-11-18 20:24 - 2013-11-18 20:24 - 00003536 _____ C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1579733871-2595365751-2819343600-1001Core
2013-11-14 16:22 - 2013-02-18 15:27 - 00000452 ____H C:\Windows\Tasks\Norton Security Scan for Marta.job
2013-11-14 16:19 - 2013-11-14 16:19 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64
2013-11-14 16:19 - 2013-11-14 16:19 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan
2013-11-14 16:19 - 2013-02-18 15:27 - 00003610 _____ C:\Windows\System32\Tasks\Norton Security Scan for Marta
2013-11-14 16:19 - 2013-02-18 15:27 - 00001457 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK
2013-11-14 16:19 - 2012-01-31 01:29 - 00000000 ____D C:\ProgramData\Norton
2013-11-12 20:21 - 2013-11-12 20:21 - 00016885 _____ C:\Users\Marta\Downloads\METODA GAUSSA ćw1 PnO.xlsx
2013-11-11 14:14 - 2009-07-14 06:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-09 17:12 - 2012-08-18 11:55 - 00000000 ____D C:\Windows\rescache
2013-11-06 21:08 - 2013-11-06 21:08 - 00000045 _____ C:\Windows\literat.ini
2013-11-06 21:07 - 2013-11-06 21:07 - 02563613 _____ (Literat                                                     ) C:\Users\Marta\Downloads\LiteratInst.exe
2013-11-03 00:18 - 2013-06-22 19:23 - 00000000 ____D C:\Users\Marta\AppData\Roaming\GG
2013-11-01 13:54 - 2012-06-09 15:13 - 00007599 _____ C:\Users\Marta\AppData\Local\Resmon.ResmonCfg
2013-10-31 21:15 - 2012-01-31 14:02 - 00000000 ____D C:\Program Files (x86)\NapiProjekt
2013-10-31 21:13 - 2012-01-31 01:20 - 00000000 ____D C:\ProgramData\Nero
2013-10-31 21:11 - 2013-10-31 21:11 - 00000000 ____D C:\Users\Marta\AppData\Roaming\Real
2013-10-28 23:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-10-27 00:15 - 2012-09-11 20:47 - 00000173 _____ C:\Windows\Lexstat.ini
2013-10-26 16:16 - 2012-10-06 12:58 - 00131072 _____ C:\Windows\system32\Ikeext.etl
2013-10-26 16:01 - 2013-10-26 16:00 - 00000000 ____D C:\Users\Marta\Desktop\Nowy folder
2013-10-25 11:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-24 21:40 - 2013-10-24 21:39 - 11014920 _____ C:\Users\Marta\Downloads\AutoCAD_2014_Polish_Win_32-64bit_wi_pl-PL_Setup.exe
2013-10-23 19:43 - 2013-10-23 19:43 - 00024998 _____ C:\Users\Marta\Downloads\HASP_DUMP.rar
2013-10-23 19:28 - 2013-10-23 19:28 - 00003368 _____ C:\Windows\System32\Tasks\{1E528444-0700-4B2D-AF4A-4B6707B0C399}
2013-10-23 18:07 - 2012-02-14 14:10 - 00003990 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{5EFB4843-9F3D-486E-B553-B5DF911A117C}

Some content of TEMP:
====================
C:\Users\Marta\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-14 16:20

==================== End Of Log ============================