Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-02-2014 03
Ran by Kasia (administrator) on KOMPUTER-KASI on 02-02-2014 18:39:32
Running from C:\Users\Kasia\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ComArch S.A.) C:\Program Files\Comarch\ComarchSmartCard\CardServer.exe
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
(HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
(HP) C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
(HP) C:\Windows\System32\HPSIsvc.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\ProgramData\Internet w Cyfrowym Polsacie\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
(COMPANYVERS_NAME) C:\Program Files\Retrogamer_4w\bar\1.bin\4wbarsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Sony DADC Austria AG.) C:\Windows\System32\UAService7.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(France Telecom SA) C:\Program Files\CardDetector\ZTEMF636\CardDetector.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(France Telecom SA) C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\sdclt.exe
(Microsoft Corporation) C:\Windows\System32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [hpqSRMon] - C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM\...\Run: [SSP4AttachItems] - C:\Program Files\PWPW\Sigillum Sign 4\SigillumSign4.exe [15160 2010-04-19] (PWPW S.A.)
HKLM\...\Run: [CryptoCard Suite Cert Monitor] - C:\Program Files\CryptoTech\CryptoCard\CCMonitor.exe [233472 2009-11-06] (CryptoTech Sp. z o.o.)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [CardDetectorZTEMF636] - C:\Program Files\CardDetector\ZTEMF636\CardDetector.exe [274432 2008-10-14] (France Telecom SA)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [249064 2010-10-29] (Sun Microsystems, Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [CardDetectorHUAWEI1752_1552] - C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe [282624 2009-10-14] (France Telecom SA)
HKLM\...\Run: [BEWINTERNET-PLSessionManager] - C:\Program Files\OrangeBS\BEWInternet-PL\SessionManager\SessionManager.exe [140016 2009-10-14] (France Telecom SA)
HKLM\...\Run: [HPUsageTrackingLEDM] - C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [TkBellExe] - c:\program files\real\realplayer\Update\realsched.exe [295512 2013-09-12] (RealNetworks, Inc.)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe [761024 2013-12-13] ()
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [GAINWARD] - C:\Program Files\EXPERTool\TBPanel.exe [2174976 2009-10-05] (Gainward Co.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [Google Update] - C:\Users\Kasia\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-02] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-03-04] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\Run: [GoogleChromeAutoLaunch_42B72D3BF0A26A851EE99173FC66C2F5] - C:\Program Files\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.)
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1bdb7387-f483-11df-a770-00241d5b6c96} - H:\AutoRunCardDetector.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd74529-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd7452f-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {1dd7453e-0ca0-11df-8cad-00241d5b6c96} - H:\Launcher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {3051f0b3-4850-11df-999e-00241d5b6c96} - J:\MicroLauncher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {75fbfb42-daa1-11e2-8094-b1643609534e} - H:\AutoRun.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {75fbfb4c-daa1-11e2-8094-b1643609534e} - H:\AutoRun.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {a37bb0f5-a1bc-11e2-9749-00241d5b6c96} - H:\Startme.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {e6757892-fa4d-11df-b2cb-00241d5b6c96} - H:\MicroLauncher.exe
HKU\S-1-5-21-1662912730-1646418203-3115140772-1000\...\MountPoints2: {eed8c792-0ccf-11df-a507-00241d5b6c96} - H:\Launcher.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.sportmasters.pl/admin
http://express.kolporter.com.pl/podstrona.php?page_id=158
http://www.google.pl/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://i.search.metacrawler.com/?f=1&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
URLSearchHook: HKCU - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
URLSearchHook: HKCU - (No Name) - {4cff1016-c2e2-4fdd-9c67-e32200c25ff9} - C:\Program Files\Retrogamer_4w\bar\1.bin\4wSrcAs.dll (MindSpark)
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
SearchScopes: HKLM - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
SearchScopes: HKLM - {ef80d754-fb77-4a7f-be75-489beebb20c9} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=RGxdm257YYpl&ptnrS=RGxdm257YYpl&si=CIy7lc230bICFYZV3god_FoAAg&ptb=C26C6244-6D36-430B-9340-313D19030EE6&ind=2012092515&n=77ee1863&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {95AB6337-0505-4599-8136-7B1B4C68A0B2} URL = http://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=de34ea900000000000000026ce03f764
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {4E964D04-39A4-3BCC-806D-457A2EBA5AAE} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=971163&p={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7ADRA_pl
SearchScopes: HKCU - {95AB6337-0505-4599-8136-7B1B4C68A0B2} URL = http://i.search.metacrawler.com/results.php?f=4&q={searchTerms}&a=ironmc2&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DyD0ByC0CzyyC0E0AzytDtN0D0Tzu0CyBtByBtN1L2XzutBtFtBtFzztFtCtByEyBtN1L1Czu&cr=1681809325&ir=
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredimail.com/?search={searchTerms}&loc=IE_SB_CG_EN
SearchScopes: HKCU - {D40D9C42-055A-455E-8E2F-EE265FAC2D88} URL = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7ADRA_pl
SearchScopes: HKCU - {ef80d754-fb77-4a7f-be75-489beebb20c9} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=RGxdm257YYpl&ptnrS=RGxdm257YYpl&si=CIy7lc230bICFYZV3god_FoAAg&ptb=C26C6244-6D36-430B-9340-313D19030EE6&ind=2012092515&n=77ee1863&psa=&st=sb&searchfor={searchTerms}
BHO: Toolbar BHO - {03123bb6-a811-407e-b323-66cf0be510b1} - C:\Program Files\Retrogamer_4w\bar\1.bin\4wbar.dll (MindSpark)
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
BHO: metacrawler  Helper Object - {D4EF7D75-52C9-4BCE-B6DC-0976EFAB4B0B} - C:\Program Files\metaCrawler\1.8.19.0\bh\metacrawler.dll (Info Space)
BHO: Search Assistant BHO - {d757dbfc-1494-4647-a8b3-abd654988dd8} - C:\Program Files\Retrogamer_4w\bar\1.bin\4wSrcAs.dll (MindSpark)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM - Retrogamer - {3392cfec-56f8-41ee-bdb4-4e301efd2c93} - C:\Program Files\Retrogamer_4w\bar\1.bin\4wbar.dll (MindSpark)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {4F29DE54-5EB7-4D76-B610-A86B5CD2A234} 
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A40} https://www.r-bank.pl/cib/static/components/raiffeisen-signplugin-win-x86-ie-1.3.0.36.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{F8AAEA0D-6ACD-47DC-9300-9C87B08C2B4F}: [NameServer]212.2.96.51 212.2.96.52

FireFox:
========
FF ProfilePath: C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default
FF user.js: detected! => C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default\user.js
FF NewTab: hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=de34ea900000000000000026ce03f764
FF DefaultSearchEngine: Yahoo
FF SearchEngineOrder.1: Delta Search
FF SelectedSearchEngine: Yahoo
FF Homepage: hxxp://search.babylon.com/?affID=119370&babsrc=HP_ss_din2g&mntrId=de34ea900000000000000026ce03f764
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=971163&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @Retrogamer_4w.com/Plugin - C:\Program Files\Retrogamer_4w\bar\1.bin\NP4wStub.dll (MindSpark)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Kasia\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Kasia\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Kasia\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\Kasia\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default\searchplugins\delta.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF Extension: Delta Toolbar - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default\Extensions\ffxtlbr@delta.com [2013-03-07]
FF Extension: No Name - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\w4q2twnj.default\Extensions\staged [2013-08-12]
FF Extension: GameTap - C:\Program Files\Mozilla Firefox\extensions\GameTapPlayer@gametap.com [2013-11-16]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-02-23]
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2012-08-16]
FF HKLM\...\Firefox\Extensions: [4wffxtbr@Retrogamer_4w.com] - C:\Program Files\Retrogamer_4w\bar\1.bin
FF Extension: Retrogamer - C:\Program Files\Retrogamer_4w\bar\1.bin [2012-09-25]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-02-23]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (Delta Toolbar) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.1_0\DeltaChromeToolbar.dll No File
CHR Plugin: (Apps Enhancements Plugin(By Google)) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\1.2013.508.7_1\plugin/ace.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files\Retrogamer_4w\bar\1.bin\NP4wStub.dll (MindSpark)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
CHR Extension: (YouTube) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-01]
CHR Extension: (Szukaj w Google) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-01]
CHR Extension: (RealDownloader) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-05-01]
CHR Extension: (Google Hangouts) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2013-05-27]
CHR Extension: (Google Wallet) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-14]
CHR Extension: (Gmail) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-01]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

========================== Services (Whitelisted) =================

R2 ComarchCardServer; C:\Program Files\Comarch\ComarchSmartCard\CardServer.exe [143455 2008-01-15] (ComArch S.A.)
S3 ComarchOptimaAutomatWindykacji; C:\Program Files\Comarch ERP Optima\ComarchOptimaAutomatWindykacji.exe [51720 2013-12-06] (Comarch S.A.)
R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [90112 2009-10-14] (France Telecom SA)
R2 HP LaserJet Service; C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP)
R2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [247352 2010-05-11] (HP)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
S2 Internet w Cyfrowym Polsacie. RunOuc; C:\Program Files\Internet w Cyfrowym Polsacie\UpdateDog\ouc.exe [246112 2013-06-25] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R2 MSSQL$OPTIMA; C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\sqlservr.exe [43129288 2012-06-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
R2 Retrogamer_4wService; C:\Program Files\Retrogamer_4w\bar\1.bin\4wbarsvc.exe [42528 2012-09-25] (COMPANYVERS_NAME)
S4 SQLAgent$OPTIMA; C:\Program Files\Microsoft SQL Server\MSSQL10_50.OPTIMA\MSSQL\Binn\SQLAGENT.EXE [379848 2012-06-29] (Microsoft Corporation)
R2 UserAccess7; C:\Windows\system32\UAService7.exe [139264 2011-04-18] (Sony DADC Austria AG.)

==================== Drivers (Whitelisted) ====================

S3 adusbser; C:\Windows\System32\DRIVERS\adusbser.sys [93440 2006-10-23] (AnyDATA Corporation)
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [238208 2009-12-17] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [16384 2009-12-17] (Aladdin Knowledge Systems Ltd.)
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [89600 2009-08-10] (Gemalto)
R2 Hardlock; C:\Windows\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R2 Haspnt; C:\Windows\system32\drivers\Haspnt.sys [47616 2010-09-21] (Aladdin Knowledge Systems)
S3 HP1210FAX; C:\Windows\System32\Drivers\HPM1210FAX.sys [13824 2012-11-07] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [249288 2012-06-29] (Microsoft Corporation)
S3 sony_ssm.sys; C:\Users\Kasia\AppData\Local\Temp\sony_ssm.sys [6432 2014-01-21] (Sony DADC Austria AG.)
R2 TBPanel; C:\Windows\system32\Drivers\TBPanel.sys [12256 2007-03-16] (Windows (R) 2000 DDK provider)
S3 ZTEusbnmeaext; C:\Windows\System32\DRIVERS\ZTEusbnmeaext.sys [103936 2008-10-14] (ZTE Incorporated)
S1 aefpzrtr; \??\C:\Windows\system32\drivers\aefpzrtr.sys [x]
S1 dtgxeivo; \??\C:\Windows\system32\drivers\dtgxeivo.sys [x]
S1 gnvlosge; \??\C:\Windows\system32\drivers\gnvlosge.sys [x]
S1 gvzhwgof; \??\C:\Windows\system32\drivers\gvzhwgof.sys [x]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [x]
S1 jgkzqnvs; \??\C:\Windows\system32\drivers\jgkzqnvs.sys [x]
S1 jvyknwso; \??\C:\Windows\system32\drivers\jvyknwso.sys [x]
S1 ltkmlxkm; \??\C:\Windows\system32\drivers\ltkmlxkm.sys [x]
S1 MpKsl99b85f4d; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E406CDCD-2CAE-499D-B5B4-7FED75BB542F}\MpKsl99b85f4d.sys [x]
S3 netr28; system32\DRIVERS\netr28.sys [x]
S1 pwqharcl; \??\C:\Windows\system32\drivers\pwqharcl.sys [x]
S1 qidksioc; \??\C:\Windows\system32\drivers\qidksioc.sys [x]
S3 rt61x86; system32\DRIVERS\netr61.sys [x]
S1 urconaqt; \??\C:\Windows\system32\drivers\urconaqt.sys [x]
S1 wvbyyzlh; \??\C:\Windows\system32\drivers\wvbyyzlh.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-02 18:39 - 2014-02-02 18:39 - 00029842 _____ () C:\Users\Kasia\Downloads\FRST.txt
2014-02-02 18:32 - 2014-02-02 18:39 - 00000000 ____D () C:\FRST
2014-02-02 18:31 - 2014-02-02 18:31 - 01137152 _____ (Farbar) C:\Users\Kasia\Downloads\FRST.exe
2014-02-02 15:46 - 2014-02-02 15:47 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410 (1).exe
2014-02-02 15:46 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410.exe
2014-02-02 14:59 - 2014-02-02 14:59 - 00003528 ____N () C:\bootsqm.dat
2014-02-01 09:20 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-01 09:20 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-01 09:20 - 2012-08-23 15:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-01 09:20 - 2012-08-23 15:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-01 09:20 - 2012-08-23 15:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-01 09:20 - 2012-08-23 14:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-01 09:20 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-01 09:20 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-01 09:20 - 2012-08-23 14:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-01 09:20 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-01 09:20 - 2012-08-23 12:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-01 09:20 - 2012-08-23 12:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-01 09:20 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-02-01 09:20 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-01 09:20 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-01 09:20 - 2012-08-23 11:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-01 09:20 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-01 09:18 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-01-31 12:51 - 2014-01-31 12:51 - 00131072 _____ () C:\Windows\Minidump\013114-28376-01.dmp
2014-01-29 20:23 - 2014-01-29 20:23 - 00000000 ____D () C:\Users\Kasia\Documents\Pliki programu Outlook
2014-01-28 18:14 - 2014-01-29 09:10 - 00000000 ____D () C:\Users\Kasia\Desktop\WAKO
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February.zip
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February (1).zip
2014-01-26 17:47 - 2014-01-26 18:53 - 00017659 _____ () C:\Users\Kasia\Desktop\Schemat magazynu SPORT MASTERS.xlsx
2014-01-24 11:30 - 2014-01-24 11:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 23489.crdownload
2014-01-23 19:30 - 2014-01-23 19:31 - 06075512 _____ (TeamViewer GmbH) C:\Users\Kasia\Downloads\TeamViewer_Setup_pl.exe
2014-01-23 17:21 - 2014-01-23 17:21 - 00156160 _____ () C:\Users\Kasia\Downloads\wagi.xls
2014-01-20 19:35 - 2014-01-20 19:35 - 00056320 _____ () C:\Users\Kasia\Desktop\Kopia RKZ (1) w poziomie - za okres.xls
2014-01-16 19:55 - 2014-01-16 19:55 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 281860.crdownload
2014-01-15 19:37 - 2014-01-15 19:38 - 00000000 ____D () C:\Program Files\Comarch ERP Optima
2014-01-15 19:19 - 2014-01-15 19:38 - 00000000 __HDC () C:\ProgramData\{6D86B28B-FB6B-4CED-9F24-D53E5436F2AC}
2014-01-15 19:12 - 2014-01-15 19:12 - 00000000 ____D () C:\Users\Kasia\Desktop\Comarch ERP Optima
2014-01-15 03:58 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 03:58 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 03:58 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 03:58 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-13 21:49 - 2014-01-13 22:06 - 00018671 ____H () C:\Users\Kasia\Desktop\~WRL2023.tmp
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013.zip
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013 (1).zip
2014-01-09 11:38 - 2014-01-09 11:40 - 00387482 _____ () C:\Users\Kasia\Downloads\raiffeisen-signplugin-win-x86-gc-1.3.0.36 (2).crx
2014-01-09 11:38 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 684012.crdownload
2014-01-04 09:22 - 2014-01-04 09:22 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 7736.crdownload
2014-01-03 13:56 - 2014-01-03 13:56 - 00049340 _____ () C:\Users\Kasia\Desktop\arkusz spisu z natury.xlsx
2014-01-03 13:54 - 2014-01-03 13:55 - 00050384 _____ () C:\Users\Kasia\Downloads\arkusz spisu z natury.xlsx

==================== One Month Modified Files and Folders =======

2014-02-02 18:39 - 2014-02-02 18:39 - 00029842 _____ () C:\Users\Kasia\Downloads\FRST.txt
2014-02-02 18:39 - 2014-02-02 18:32 - 00000000 ____D () C:\FRST
2014-02-02 18:35 - 2009-07-14 05:34 - 00015008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 18:35 - 2009-07-14 05:34 - 00015008 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 18:34 - 2013-12-27 15:34 - 00000292 _____ () C:\Windows\Tasks\MetaCrawler.job
2014-02-02 18:31 - 2014-02-02 18:31 - 01137152 _____ (Farbar) C:\Users\Kasia\Downloads\FRST.exe
2014-02-02 18:28 - 2013-09-17 07:27 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 18:01 - 2013-05-27 10:35 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1662912730-1646418203-3115140772-1000UA.job
2014-02-02 17:52 - 2011-01-29 11:27 - 00001034 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-02 17:35 - 2009-12-31 23:00 - 01237374 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 17:32 - 2011-01-29 11:27 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-02 17:31 - 2010-04-28 12:10 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-02 17:30 - 2010-01-15 14:44 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-02 17:30 - 2010-01-02 04:21 - 00215468 _____ () C:\Windows\PFRO.log
2014-02-02 17:30 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-02 17:30 - 2009-07-14 05:39 - 00106890 _____ () C:\Windows\setupact.log
2014-02-02 17:29 - 2013-12-27 15:35 - 00019803 _____ () C:\Users\Kasia\daemonprocess.txt
2014-02-02 17:26 - 2012-11-19 03:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-02 17:26 - 2012-11-19 03:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-02 17:02 - 2009-12-31 16:02 - 01888342 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-02 17:02 - 2009-07-14 09:07 - 00827656 _____ () C:\Windows\system32\perfh015.dat
2014-02-02 17:02 - 2009-07-14 09:07 - 00189554 _____ () C:\Windows\system32\perfc015.dat
2014-02-02 15:50 - 2012-05-28 10:37 - 00000000 ____D () C:\ProgramData\Norton
2014-02-02 15:47 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410 (1).exe
2014-02-02 15:47 - 2010-11-10 09:41 - 00000975 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-02 15:47 - 2010-11-10 09:41 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-02 15:46 - 2014-02-02 15:46 - 04721920 _____ (Piriform Ltd) C:\Users\Kasia\Downloads\ccsetup410.exe
2014-02-02 14:59 - 2014-02-02 14:59 - 00003528 ____N () C:\bootsqm.dat
2014-02-02 08:33 - 2009-12-31 16:02 - 00000000 ____D () C:\Users\Kasia
2014-02-02 08:32 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-02 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-02 08:31 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-02 08:30 - 2010-12-04 12:57 - 00000000 ____D () C:\ProgramData\Real
2014-02-01 09:21 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-02-01 09:07 - 2013-12-27 15:41 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\1H1Q
2014-02-01 08:26 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-01 02:24 - 2013-12-27 15:35 - 00000000 ____D () C:\Users\Kasia\AppData\Local\genienext
2014-02-01 02:19 - 2013-12-27 15:33 - 00000000 ____D () C:\Program Files\Mobogenie
2014-01-31 12:51 - 2014-01-31 12:51 - 00131072 _____ () C:\Windows\Minidump\013114-28376-01.dmp
2014-01-31 12:51 - 2011-04-22 12:40 - 205499216 _____ () C:\Windows\MEMORY.DMP
2014-01-31 12:51 - 2011-04-22 12:40 - 00000000 ____D () C:\Windows\Minidump
2014-01-31 07:01 - 2013-05-27 10:35 - 00001006 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1662912730-1646418203-3115140772-1000Core.job
2014-01-29 20:23 - 2014-01-29 20:23 - 00000000 ____D () C:\Users\Kasia\Documents\Pliki programu Outlook
2014-01-29 13:10 - 2012-01-30 11:04 - 00000000 ____D () C:\Users\Kasia\Desktop\SM
2014-01-29 09:58 - 2013-05-01 06:36 - 00002141 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-29 09:10 - 2014-01-28 18:14 - 00000000 ____D () C:\Users\Kasia\Desktop\WAKO
2014-01-29 09:09 - 2011-02-28 19:02 - 00000000 ____D () C:\Users\Kasia\Desktop\Zdjęcia
2014-01-29 09:09 - 2010-09-28 15:19 - 00002067 _____ () C:\Users\Kasia\Desktop\EKN-serwer.lnk
2014-01-29 09:06 - 2012-11-09 12:50 - 00000000 ____D () C:\Users\Kasia\Desktop\ME Kadetów i Juniorów 2013
2014-01-29 09:04 - 2011-07-23 20:48 - 00000000 ____D () C:\Users\Kasia\Desktop\statek
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February.zip
2014-01-28 17:46 - 2014-01-28 17:46 - 00049289 _____ () C:\Users\Kasia\Downloads\MCM Schedules & Highlights - February (1).zip
2014-01-28 00:34 - 2013-07-27 17:54 - 00000222 _____ () C:\Users\Kasia\AppData\Roaming\WB.CFG
2014-01-26 18:53 - 2014-01-26 17:47 - 00017659 _____ () C:\Users\Kasia\Desktop\Schemat magazynu SPORT MASTERS.xlsx
2014-01-25 15:15 - 2012-12-13 09:25 - 00000000 ____D () C:\Users\Kasia\Desktop\GARY
2014-01-24 23:02 - 2010-01-04 19:46 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\Mozilla
2014-01-24 11:30 - 2014-01-24 11:30 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 23489.crdownload
2014-01-23 19:31 - 2014-01-23 19:30 - 06075512 _____ (TeamViewer GmbH) C:\Users\Kasia\Downloads\TeamViewer_Setup_pl.exe
2014-01-23 17:21 - 2014-01-23 17:21 - 00156160 _____ () C:\Users\Kasia\Downloads\wagi.xls
2014-01-23 10:49 - 2013-08-21 11:54 - 00000000 ____D () C:\Users\Kasia\AppData\Local\CUSTPDF Writer
2014-01-23 10:27 - 2013-03-26 20:36 - 00000000 ____D () C:\Users\Kasia\Desktop\III kadencja
2014-01-20 19:35 - 2014-01-20 19:35 - 00056320 _____ () C:\Users\Kasia\Desktop\Kopia RKZ (1) w poziomie - za okres.xls
2014-01-19 08:32 - 2009-12-31 16:20 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-16 19:55 - 2014-01-16 19:55 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 281860.crdownload
2014-01-16 03:26 - 2009-07-14 05:33 - 00416712 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 03:05 - 2013-08-11 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 03:01 - 2010-01-02 03:47 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 19:38 - 2014-01-15 19:37 - 00000000 ____D () C:\Program Files\Comarch ERP Optima
2014-01-15 19:38 - 2014-01-15 19:19 - 00000000 __HDC () C:\ProgramData\{6D86B28B-FB6B-4CED-9F24-D53E5436F2AC}
2014-01-15 19:38 - 2012-12-28 08:28 - 00001055 _____ () C:\Users\Public\Desktop\Comarch ERP Optima.lnk
2014-01-15 19:37 - 2011-03-05 12:07 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\Comarch OPT!MA
2014-01-15 19:12 - 2014-01-15 19:12 - 00000000 ____D () C:\Users\Kasia\Desktop\Comarch ERP Optima
2014-01-14 03:11 - 2013-02-20 12:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-14 03:04 - 2009-07-14 03:04 - 00000631 _____ () C:\Windows\win.ini
2014-01-13 22:06 - 2014-01-13 21:49 - 00018671 ____H () C:\Users\Kasia\Desktop\~WRL2023.tmp
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013.zip
2014-01-13 18:59 - 2014-01-13 18:59 - 00733172 _____ () C:\Users\Kasia\Downloads\All results, pools, medals-Antalya WC 2013 (1).zip
2014-01-13 17:08 - 2012-12-16 12:35 - 00000000 ____D () C:\Users\Kasia\Desktop\FMS
2014-01-13 17:07 - 2013-06-05 07:31 - 00000000 ____D () C:\Users\Kasia\Desktop\SM Sp. z o.o. S.K
2014-01-09 11:40 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\raiffeisen-signplugin-win-x86-gc-1.3.0.36 (2).crx
2014-01-09 11:38 - 2014-01-09 11:38 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 684012.crdownload
2014-01-04 18:27 - 2013-03-06 13:55 - 00000000 ____D () C:\Users\Kasia\Desktop\SM KK-P
2014-01-04 09:22 - 2014-01-04 09:22 - 00387482 _____ () C:\Users\Kasia\Downloads\Niepotwierdzony 7736.crdownload
2014-01-03 13:56 - 2014-01-03 13:56 - 00049340 _____ () C:\Users\Kasia\Desktop\arkusz spisu z natury.xlsx
2014-01-03 13:55 - 2014-01-03 13:54 - 00050384 _____ () C:\Users\Kasia\Downloads\arkusz spisu z natury.xlsx

Files to move or delete:
====================
C:\Users\Kasia\RealPlayerSPGold (2).exe
C:\Users\Kasia\RealPlayerSPGold.exe


Some content of TEMP:
====================
C:\Users\Kasia\AppData\Local\Temp\contentDATs.exe
C:\Users\Kasia\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Kasia\AppData\Local\Temp\ezmrnn5i.dll
C:\Users\Kasia\AppData\Local\Temp\FlashPlayerUpdate.exe
C:\Users\Kasia\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\Kasia\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Kasia\AppData\Local\Temp\lowproc.exe
C:\Users\Kasia\AppData\Local\Temp\ose00000.exe
C:\Users\Kasia\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Kasia\AppData\Local\Temp\siinst.exe
C:\Users\Kasia\AppData\Local\Temp\strings.dll
C:\Users\Kasia\AppData\Local\Temp\stubhelper.dll
C:\Users\Kasia\AppData\Local\Temp\_is11EA.exe
C:\Users\Kasia\AppData\Local\Temp\_is12D4.exe
C:\Users\Kasia\AppData\Local\Temp\_is13CE.exe
C:\Users\Kasia\AppData\Local\Temp\_is298F.exe
C:\Users\Kasia\AppData\Local\Temp\_is2B55.exe
C:\Users\Kasia\AppData\Local\Temp\_is621C.exe
C:\Users\Kasia\AppData\Local\Temp\_is7D5A.exe
C:\Users\Kasia\AppData\Local\Temp\_is889F.exe
C:\Users\Kasia\AppData\Local\Temp\_isA5D0.exe
C:\Users\Kasia\AppData\Local\Temp\_isB53B.exe
C:\Users\Kasia\AppData\Local\Temp\_isEA.exe
C:\Users\Kasia\AppData\Local\Temp\_isF69D.exe
C:\Users\Kasia\AppData\Local\Temp\_isFC38.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-02 01:57

==================== End Of Log ============================