Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-03-2014
Ran by Michau (administrator) on PC on 06-03-2014 16:24:09
Running from C:\Users\Michau\Desktop
Microsoft Windows 7 Home Premium  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Kingsoft Corporation) d:\program files\kingsoft antivirus\kxescore.exe
(Nero AG) D:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\system32\IoctlSvc.exe
() C:\Program Files\Cyberlink\Shared files\RichVideo.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Kingsoft Corporation) D:\Program Files\kingsoft antivirus\kxetray.exe
(Opera Software) F:\Program Files\Opera\opera.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM\...\Run: [kxesc] - d:\program files\kingsoft antivirus\kxetray.exe [1595056 2013-02-24] (Kingsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-2705754529-576382186-3183432847-1000\...\Run: [Xvid] - D:\Program Files\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-2705754529-576382186-3183432847-1000\...\Run: [ALLUpdate] - "F:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep"
HKU\S-1-5-21-2705754529-576382186-3183432847-1000\...\MountPoints2: G - G:\setup.exe
HKU\S-1-5-21-2705754529-576382186-3183432847-1000\...\MountPoints2: {68edeaf6-6ec4-11e2-98f2-6c626de43ffc} - H:\Autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {A06395B7-A40D-49EE-9101-ACC020ED36BC} URL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U40) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Uplay PC) - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.400.43) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Extension: (Dokumenty Google) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-25]
CHR Extension: (Dysk Google) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-25]
CHR Extension: (YouTube) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-10]
CHR Extension: (Szukaj w Google) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-10]
CHR Extension: (Chrome In-App Payments service) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-25]
CHR Extension: (Gmail) - C:\Users\Michau\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-10]

========================== Services (Whitelisted) =================

S2 KMService; C:\Windows\system32\srvany.exe [8192 2013-03-05] ()
R2 kxescore; d:\program files\kingsoft antivirus\kxescore.exe [123992 2013-02-24] (Kingsoft Corporation)
S3 Microsoft SharePoint Workspace Audit Service; D:\Program Files\Microsoft Office\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation)
R2 Nero BackItUp Scheduler 3; D:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)
R2 RichVideo; C:\Program Files\Cyberlink\Shared files\RichVideo.exe [247152 2010-08-19] ()

==================== Drivers (Whitelisted) ====================

R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14528 2014-01-22] (Glarysoft Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-02-04] (DT Soft Ltd)
R0 kavbootc; C:\Windows\System32\drivers\kavbootc.sys [27240 2013-02-24] (Kingsoft Corporation)
R1 KDHacker; d:\program files\kingsoft antivirus\security\kxescan\kdhacker.sys [125784 2013-02-24] (Kingsoft Corporation)
R2 kisknl; C:\Windows\system32\drivers\kisknl.sys [165176 2013-06-12] (Kingsoft Corporation)
R3 ksapi; C:\Windows\system32\drivers\ksapi.sys [82264 2013-02-24] (Kingsoft Corporation)
R4 KUsbGuard; D:\Program Files\kingsoft antivirus\kusbquery.sys [14200 2013-02-24] (Kingsoft Corporation)
S3 amdiox86; system32\DRIVERS\amdiox86.sys [X]
U5 UnlockerDriver5; D:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-06 16:24 - 2014-03-06 16:24 - 00008073 _____ () C:\Users\Michau\Desktop\FRST.txt
2014-03-06 16:23 - 2014-03-06 16:23 - 00063680 _____ () C:\Users\Michau\Desktop\Extras.Txt
2014-03-06 16:19 - 2014-03-06 16:24 - 00066232 _____ () C:\Users\Michau\Desktop\OTL.Txt
2014-03-06 16:16 - 2014-03-06 16:16 - 00380416 _____ () C:\Users\Michau\Desktop\jjr92q9z.exe
2014-03-06 16:14 - 2014-03-06 16:24 - 00000000 ____D () C:\FRST
2014-03-06 16:12 - 2014-03-06 16:12 - 01145344 _____ (Farbar) C:\Users\Michau\Desktop\FRST.exe
2014-03-06 16:12 - 2014-03-06 16:12 - 00602112 _____ (OldTimer Tools) C:\Users\Michau\Desktop\OTL.exe
2014-03-05 17:59 - 2014-03-05 18:01 - 00000000 ____D () C:\AdwCleaner
2014-02-27 00:17 - 2014-02-27 00:19 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\vlc
2014-02-27 00:08 - 2014-02-27 00:08 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\AC3Filter
2014-02-27 00:07 - 2014-02-27 00:07 - 00000000 ____D () C:\Users\Michau\AppData\Local\ALLMediaServer
2014-02-27 00:07 - 2014-02-27 00:07 - 00000000 ____D () C:\Program Files\ALLMediaServer
2014-02-21 11:06 - 2014-02-21 11:06 - 00000802 _____ () C:\Users\Ired\Desktop\e-pity 2013 - program, pity roczne, e-deklaracje.lnk
2014-02-21 11:06 - 2014-02-21 11:06 - 00000802 _____ () C:\Users\Ired\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e-pity 2013 - program, pity roczne, e-deklaracje.lnk
2014-02-21 11:06 - 2014-02-21 11:06 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\fillUp
2014-02-21 11:06 - 2014-02-21 11:06 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\com.efile.epity2013
2014-02-21 11:05 - 2014-02-21 11:05 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-02-21 11:05 - 2014-02-21 11:05 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\e-Deklaracje
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\efile.epity2012
2014-02-14 17:22 - 2014-02-14 17:22 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\e-Deklaracje
2014-02-13 18:32 - 2014-02-13 18:32 - 00000032 _____ () C:\Users\Michau\Desktop\PIT.txt
2014-02-13 18:25 - 2014-02-13 18:25 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-02-09 19:40 - 2014-02-09 19:40 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Kalypso Media
2014-02-09 16:09 - 2014-02-09 16:09 - 00000000 ____D () C:\Users\Ired\AppData\Local\VirtualStore
2014-02-09 15:43 - 2014-02-09 15:43 - 00000045 _____ () C:\Windows\system32\_WKERNEL.SYL
2014-02-09 15:43 - 2010-07-25 22:23 - 01706800 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll
2014-02-09 15:43 - 2010-07-25 22:23 - 00544768 _____ (Stardock Corporation) C:\Windows\system32\wbocx.ocx
2014-02-09 15:43 - 2010-07-25 22:23 - 00258352 _____ (Microsoft Corporation) C:\Windows\system32\unicows.dll
2014-02-09 15:43 - 2010-07-25 22:23 - 00056496 _____ (Stardock.Net, Inc) C:\Windows\system32\wbhelp2.dll
2014-02-09 15:43 - 2010-07-25 22:23 - 00033968 _____ (Neil Banfield) C:\Windows\system32\anim.dll
2014-02-09 15:43 - 2010-07-25 22:23 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\W95INF32.DLL
2014-02-09 15:43 - 2010-07-25 22:23 - 00002272 _____ (Microsoft Corporation) C:\Windows\system32\W95INF16.DLL
2014-02-09 15:11 - 2014-03-06 13:38 - 00004200 _____ () C:\Windows\setupact.log
2014-02-09 15:11 - 2014-02-09 15:11 - 00000334 _____ () C:\Windows\PFRO.log
2014-02-09 15:11 - 2014-02-09 15:11 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-09 15:04 - 2014-02-09 15:04 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-02-09 14:25 - 2014-03-06 16:02 - 00000320 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2014-02-09 14:25 - 2014-02-09 14:25 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\GlarySoft
2014-02-09 14:25 - 2014-01-22 02:16 - 00101664 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2014-02-09 14:25 - 2014-01-22 02:09 - 00014528 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\BootDefragDriver.sys
2014-02-07 18:17 - 2014-02-07 18:17 - 00000000 ____D () C:\Users\Michau\Desktop\foto
2014-02-06 19:55 - 2014-02-06 19:55 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Daum
2014-02-05 15:43 - 2014-02-05 15:43 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup

==================== One Month Modified Files and Folders =======

2014-03-06 16:24 - 2014-03-06 16:24 - 00008073 _____ () C:\Users\Michau\Desktop\FRST.txt
2014-03-06 16:24 - 2014-03-06 16:19 - 00066232 _____ () C:\Users\Michau\Desktop\OTL.Txt
2014-03-06 16:24 - 2014-03-06 16:14 - 00000000 ____D () C:\FRST
2014-03-06 16:23 - 2014-03-06 16:23 - 00063680 _____ () C:\Users\Michau\Desktop\Extras.Txt
2014-03-06 16:16 - 2014-03-06 16:16 - 00380416 _____ () C:\Users\Michau\Desktop\jjr92q9z.exe
2014-03-06 16:12 - 2014-03-06 16:12 - 01145344 _____ (Farbar) C:\Users\Michau\Desktop\FRST.exe
2014-03-06 16:12 - 2014-03-06 16:12 - 00602112 _____ (OldTimer Tools) C:\Users\Michau\Desktop\OTL.exe
2014-03-06 16:02 - 2014-02-09 14:25 - 00000320 _____ () C:\Windows\Tasks\GlaryInitialize 4.job
2014-03-06 15:40 - 2014-01-23 16:49 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-06 13:38 - 2014-02-09 15:11 - 00004200 _____ () C:\Windows\setupact.log
2014-03-06 13:38 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-05 18:02 - 2013-02-04 12:46 - 01692058 _____ () C:\Windows\WindowsUpdate.log
2014-03-05 18:01 - 2014-03-05 17:59 - 00000000 ____D () C:\AdwCleaner
2014-03-04 17:13 - 2013-02-04 13:45 - 00000000 ____D () C:\Users\Michau\Desktop\moment
2014-03-03 22:20 - 2009-07-14 05:34 - 00009808 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-03 22:20 - 2009-07-14 05:34 - 00009808 _____ () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-03 17:54 - 2013-02-04 13:45 - 00000000 ____D () C:\Users\Michau\Desktop\Inne
2014-03-03 17:30 - 2013-02-04 13:53 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\uTorrent
2014-03-03 11:52 - 2013-02-04 13:12 - 00738468 _____ () C:\Windows\system32\perfh015.dat
2014-03-03 11:52 - 2013-02-04 13:12 - 00154578 _____ () C:\Windows\system32\perfc015.dat
2014-03-03 11:52 - 2013-02-04 12:55 - 01664708 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-28 11:44 - 2013-02-24 14:22 - 00000000 __SHD () C:\KRECYCLE
2014-02-27 00:19 - 2014-02-27 00:17 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\vlc
2014-02-27 00:08 - 2014-02-27 00:08 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\AC3Filter
2014-02-27 00:07 - 2014-02-27 00:07 - 00000000 ____D () C:\Users\Michau\AppData\Local\ALLMediaServer
2014-02-27 00:07 - 2014-02-27 00:07 - 00000000 ____D () C:\Program Files\ALLMediaServer
2014-02-25 11:19 - 2013-10-10 20:10 - 00000000 ____D () C:\Users\Michau\Desktop\prezentacja maturalna
2014-02-21 11:16 - 2013-04-17 18:36 - 00000000 ____D () C:\Users\Ired\Documents\Pliki programu Outlook
2014-02-21 11:06 - 2014-02-21 11:06 - 00000802 _____ () C:\Users\Ired\Desktop\e-pity 2013 - program, pity roczne, e-deklaracje.lnk
2014-02-21 11:06 - 2014-02-21 11:06 - 00000802 _____ () C:\Users\Ired\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\e-pity 2013 - program, pity roczne, e-deklaracje.lnk
2014-02-21 11:06 - 2014-02-21 11:06 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\fillUp
2014-02-21 11:06 - 2014-02-21 11:06 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\com.efile.epity2013
2014-02-21 11:06 - 2013-02-25 12:16 - 00000000 ____D () C:\Users\Ired\Documents\efile
2014-02-21 11:05 - 2014-02-21 11:05 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-02-21 11:05 - 2014-02-21 11:05 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\e-Deklaracje
2014-02-21 11:05 - 2013-02-23 10:17 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\Adobe
2014-02-21 11:05 - 2013-02-23 10:17 - 00000000 ____D () C:\Users\Ired\AppData\Local\Adobe
2014-02-20 23:40 - 2013-06-02 15:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-20 23:40 - 2013-06-02 15:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\efile.epity2012
2014-02-14 22:55 - 2014-01-25 16:51 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Tropico 4
2014-02-14 17:22 - 2014-02-14 17:22 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\e-Deklaracje
2014-02-14 17:22 - 2013-02-16 23:22 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR
2014-02-13 20:12 - 2013-02-24 14:21 - 00000000 ____D () C:\ProgramData\Kingsoft
2014-02-13 18:32 - 2014-02-13 18:32 - 00000032 _____ () C:\Users\Michau\Desktop\PIT.txt
2014-02-13 18:25 - 2014-02-13 18:25 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2014-02-13 18:24 - 2013-02-06 15:39 - 00000000 ____D () C:\Users\Michau\AppData\Local\Adobe
2014-02-12 17:17 - 2013-02-04 12:54 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Adobe
2014-02-09 19:40 - 2014-02-09 19:40 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Kalypso Media
2014-02-09 19:00 - 2013-02-04 13:45 - 00000000 ___RD () C:\Users\Michau\Desktop\Programy
2014-02-09 18:44 - 2013-02-04 21:49 - 00000000 ____D () C:\Users\Michau
2014-02-09 16:09 - 2014-02-09 16:09 - 00000000 ____D () C:\Users\Ired\AppData\Local\VirtualStore
2014-02-09 15:57 - 2009-07-14 03:03 - 61079552 _____ () C:\Windows\system32\config\SOFTWARE.regbk109
2014-02-09 15:57 - 2009-07-14 03:03 - 17825792 _____ () C:\Windows\system32\config\SYSTEM.regbk109
2014-02-09 15:57 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.regbk109
2014-02-09 15:57 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SAM.regbk109
2014-02-09 15:57 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT.regbk109
2014-02-09 15:43 - 2014-02-09 15:43 - 00000045 _____ () C:\Windows\system32\_WKERNEL.SYL
2014-02-09 15:11 - 2014-02-09 15:11 - 00000334 _____ () C:\Windows\PFRO.log
2014-02-09 15:11 - 2014-02-09 15:11 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-09 15:08 - 2013-02-04 13:45 - 00000000 ____D () C:\Users\Michau\Desktop\Gry
2014-02-09 15:06 - 2013-11-26 18:22 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\KastorVideoConverter
2014-02-09 15:06 - 2013-11-03 15:37 - 00000000 ____D () C:\Users\Michau\Documents\SCANIA Truck Driving Simulator
2014-02-09 15:06 - 2013-10-16 17:30 - 00000000 ____D () C:\Users\Michau\Documents\Deluxe Ski Jump 4
2014-02-09 15:06 - 2013-09-03 15:56 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\GG
2014-02-09 15:06 - 2013-09-03 15:50 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\.purple
2014-02-09 15:06 - 2013-07-14 08:58 - 00000000 ____D () C:\ProgramData\ArcSoft
2014-02-09 15:06 - 2013-07-05 12:08 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Sony
2014-02-09 15:06 - 2013-06-10 17:00 - 00000000 ____D () C:\Users\Michau\AppData\Local\Google
2014-02-09 15:06 - 2013-06-10 16:59 - 00000000 ____D () C:\Program Files\Google
2014-02-09 15:06 - 2013-04-26 15:20 - 00000000 ____D () C:\Users\Michau\Documents\Settlers7
2014-02-09 15:06 - 2013-04-19 19:41 - 00000000 ____D () C:\Users\Michau\AppData\Local\BridgeProject
2014-02-09 15:06 - 2013-04-12 15:47 - 00000000 ____D () C:\Users\Michau\.gimp-2.8
2014-02-09 15:06 - 2013-04-07 16:53 - 00000000 ____D () C:\Users\Michau\Documents\FIFA MANAGER 13
2014-02-09 15:06 - 2013-03-08 16:55 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Origin
2014-02-09 15:06 - 2013-03-08 16:48 - 00000000 ____D () C:\ProgramData\Origin
2014-02-09 15:06 - 2013-02-23 11:40 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-09 15:06 - 2013-02-23 11:39 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\CyberLink
2014-02-09 15:06 - 2013-02-23 10:22 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\Skype
2014-02-09 15:06 - 2013-02-21 15:57 - 00000000 ____D () C:\ProgramData\Yahoo! Companion
2014-02-09 15:06 - 2013-02-11 17:26 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Skype
2014-02-09 15:06 - 2013-02-08 19:31 - 00000000 ____D () C:\ProgramData\AMD
2014-02-09 15:06 - 2013-02-07 14:10 - 00000000 ____D () C:\Users\Michau\Documents\Visual Studio 2005
2014-02-09 15:06 - 2013-02-06 15:40 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-09 15:06 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-09 15:06 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-02-09 15:05 - 2013-07-18 12:36 - 00000000 ____D () C:\Users\Ired\Desktop\moje
2014-02-09 15:04 - 2014-02-09 15:04 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-02-09 14:27 - 2013-02-04 21:37 - 00000000 ____D () C:\Windows\Panther
2014-02-09 14:25 - 2014-02-09 14:25 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\GlarySoft
2014-02-08 11:07 - 2009-07-14 05:33 - 03824816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-07 19:00 - 2013-02-24 12:44 - 00116400 _____ () C:\Users\Ired\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-07 18:17 - 2014-02-07 18:17 - 00000000 ____D () C:\Users\Michau\Desktop\foto
2014-02-07 16:31 - 2013-07-05 12:24 - 00000728 _____ () C:\Users\Michau\Documents\Default.sfvidcap
2014-02-07 16:23 - 2013-02-04 13:39 - 00116400 _____ () C:\Users\Michau\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-06 19:55 - 2014-02-06 19:55 - 00000000 ____D () C:\Users\Michau\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Daum
2014-02-05 15:44 - 2013-08-10 18:46 - 00000000 ____D () C:\Users\Ired\AppData\Local\Google
2014-02-05 15:43 - 2014-02-05 15:43 - 00000000 ____D () C:\Users\Ired\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-02-05 09:46 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries

Some content of TEMP:
====================
C:\Users\Ired\AppData\Local\Temp\install_flashplayer11x32_chrd_aih.exe
C:\Users\Ired\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Michau\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 14:31

==================== End Of Log ============================