Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by User (administrator) on USER-KOMPUTER on 15-03-2014 21:53:12
Running from D:\download\czcionki
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Protexis Inc.) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2145000 2010-04-07] (ESET)
HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [adiras] - C:\Windows\adiras.exe [194128 2007-02-13] ()
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [WinampAgent] - C:\Program Files\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\Update\realsched.exe [296096 2012-09-09] (RealNetworks, Inc.)
HKLM\...\Run: [ISUSScheduler] - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-1894515312-3285578680-510463183-1000\...\Run: [ChomikBox] - C:\Program Files\ChomikBox\chomikbox.exe [5979648 2012-11-15] ( )
HKU\S-1-5-21-1894515312-3285578680-510463183-1000\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKU\S-1-5-21-1894515312-3285578680-510463183-1000\...\Run: [Xvid] - C:\Program Files\Xvid\CheckUpdate.exe [8192 2011-01-17] ()
HKU\S-1-5-21-1894515312-3285578680-510463183-1000\...\Run: [EA Core] - C:\Program Files\Electronic Arts\EADM\Core.exe [3325952 2009-03-28] (Electronic Arts)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\vvc1kf1o.default-1394913388019
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=15.0.6.14 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-09-09]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-04-06]

========================== Services (Whitelisted) =================

S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [33560 2010-04-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810120 2010-04-07] (ESET)

==================== Drivers (Whitelisted) ====================

R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [133512 2010-04-07] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [114984 2010-04-07] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [96896 2010-04-07] (ESET)
R2 npf; C:\Windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324096 2014-02-05] (Duplex Secure Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2091-12-02 13:17 - 2091-12-02 13:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-15 21:20 - 2014-03-15 21:27 - 00000000 ____D () C:\AdwCleaner
2014-03-15 21:18 - 2014-03-15 21:19 - 01950720 _____ () C:\Users\User\Downloads\AdwCleaner.exe
2014-03-15 20:56 - 2014-03-15 20:56 - 00000000 ____D () C:\Users\User\Desktop\Stare dane programu Firefox
2014-03-15 17:19 - 2014-03-15 17:19 - 00002984 _____ () C:\Windows\PFRO.log
2014-03-15 16:17 - 2014-03-15 21:53 - 00000000 ____D () C:\FRST
2014-03-15 11:55 - 2014-03-15 11:55 - 00000000 ____D () C:\Users\User\Documents\zmiany wprowadzone do rejestru
2014-03-15 00:01 - 2014-03-15 00:01 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-14 23:29 - 2014-03-14 23:29 - 13816153 _____ () C:\Users\User\Desktop\shikaku.psd
2014-03-14 21:40 - 2014-03-14 21:47 - 340072530 _____ () C:\Users\User\Downloads\Angus, stringi i przytulanki.rmvb
2014-03-14 21:04 - 2014-03-14 21:10 - 385647124 _____ () C:\Users\User\Downloads\Wredne dziewczyny 2.rmvb
2014-03-13 20:26 - 2014-03-13 20:31 - 299771237 _____ () C:\Users\User\Downloads\Elita [DVDRip.] [Rmvb] [Lektor PL].rmvb
2014-03-13 18:24 - 2014-03-13 18:32 - 323370463 _____ () C:\Users\User\Downloads\Sponsoring.rmvb
2014-03-13 12:03 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 12:03 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 12:03 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 12:03 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 12:03 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 12:03 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 12:03 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 12:03 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 12:03 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 12:03 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 12:03 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 12:03 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 12:03 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 12:02 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 12:02 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 12:02 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 12:02 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 12:02 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 12:02 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 12:02 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 12:02 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 12:02 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 12:02 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 12:02 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 12:02 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 12:02 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 12:02 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 11:14 - 2014-03-15 21:28 - 00000448 _____ () C:\Windows\setupact.log
2014-03-12 11:14 - 2014-03-12 11:14 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-11 18:17 - 2014-03-11 18:17 - 00041546 _____ () C:\Users\User\Desktop\combofix Tova.txt
2014-03-11 17:47 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-11 17:47 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-11 17:47 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-03-11 17:47 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-11 17:47 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-11 17:47 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-11 17:47 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-11 17:47 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-11 17:44 - 2014-03-11 18:14 - 00000000 ____D () C:\Windows\erdnt
2014-03-08 20:54 - 2014-03-08 20:58 - 261802022 _____ () C:\Users\User\Downloads\Miłe martwe dziewczyny - Fine mrtve djevojke (2000)  wgrane napisy.pl.rmvb
2014-03-04 23:27 - 2014-03-04 23:25 - 00044693 _____ () C:\Users\User\Downloads\villemooooo.txt
2014-03-04 23:25 - 2014-03-04 23:25 - 00011046 _____ () C:\Users\User\Downloads\villemooooo.zip
2014-03-04 19:57 - 2014-03-14 19:22 - 04622637 _____ () C:\Users\User\Desktop\rune.cdr
2014-03-04 19:57 - 2014-03-14 18:45 - 04622762 _____ () C:\Users\User\Desktop\Backup_of_rune.cdr
2014-03-03 23:25 - 2014-03-03 23:25 - 00092607 _____ () C:\Users\User\Downloads\gjersoe ann-christin - dziedzictwo 01 kwiat kamelii.epub
2014-03-03 23:16 - 2014-03-03 23:16 - 00172839 _____ () C:\Users\User\Downloads\Gjersoe Ann-Christin - Dziedzictwo 01 Kwiat kamelii.mobi
2014-03-02 21:29 - 2014-03-02 21:29 - 00000000 ____D () C:\Users\User\Desktop\Originals
2014-02-28 23:09 - 2014-02-28 23:09 - 04708736 _____ () C:\Users\User\Downloads\install_flash_player_ics.apk
2014-02-28 22:18 - 2014-02-28 22:18 - 00000044 _____ () C:\Users\User\Downloads\UPLOAD BY GOTTSU3.txt
2014-02-25 17:36 - 2013-02-22 03:56 - 00036076 ____N () C:\Users\User\Downloads\helvetica-bold-italic-1361523410.ttf
2014-02-25 17:35 - 2014-02-25 17:36 - 00023387 _____ () C:\Users\User\Downloads\helvetica-bold-italic-1361523410.zip
2014-02-24 19:56 - 2014-02-24 20:00 - 191259861 _____ () C:\Users\User\Downloads\deftones1999-06-12.rar
2014-02-23 20:45 - 2014-02-23 20:45 - 00000071 _____ () C:\Users\User\Downloads\link.txt
2014-02-20 18:41 - 2014-02-20 18:41 - 00000000 ____D () C:\Users\User\Documents\My Palettes
2014-02-20 18:31 - 2014-02-20 18:31 - 00000258 _____ () C:\Users\User\Documents\CorelDRAW Graphics Suite X6.txt
2014-02-20 18:29 - 2014-02-20 18:17 - 00002613 _____ () C:\Users\Public\Desktop\CorelDRAW X6.lnk
2014-02-20 18:26 - 2014-02-20 18:26 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-20 18:25 - 2014-02-20 18:25 - 00000000 ____D () C:\Program Files\Common Files\Protexis
2014-02-20 18:17 - 2014-02-20 18:17 - 00000000 ____D () C:\Users\Public\Documents\Corel
2014-02-19 21:51 - 2014-02-19 21:51 - 17890696 _____ (Adobe Systems Incorporated) C:\Users\User\Downloads\install_flash_player.exe
2014-02-19 21:49 - 2014-02-19 21:49 - 00673640 _____ ( ) C:\Users\User\Downloads\Adobe-Flash-Player(13091).exe
2014-02-19 21:40 - 2014-02-19 21:40 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim (2).exe
2014-02-19 21:36 - 2014-02-19 21:37 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim (1).exe
2014-02-19 20:52 - 2014-02-19 20:53 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim.exe
2014-02-17 17:02 - 2014-02-17 17:02 - 00000638 _____ () C:\Users\User\Downloads\czytaj draniu.txt
2014-02-14 00:37 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 16:06 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 16:06 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 16:06 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 16:06 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 16:06 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 16:06 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 16:06 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 16:06 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 16:06 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 16:06 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 16:06 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 16:06 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 16:06 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 16:06 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2091-12-02 13:18 - 2091-12-02 13:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-03-15 21:53 - 2014-03-15 16:17 - 00000000 ____D () C:\FRST
2014-03-15 21:51 - 2012-09-07 22:01 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-15 21:40 - 2012-07-12 13:50 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-15 21:37 - 2009-07-14 05:34 - 00014560 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-15 21:37 - 2009-07-14 05:34 - 00014560 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-15 21:32 - 2012-04-23 13:38 - 00000000 ____D () C:\Users\User\.gstreamer-0.10
2014-03-15 21:32 - 2012-04-23 13:08 - 00000000 ____D () C:\Users\User\AppData\Local\ChomikBox
2014-03-15 21:28 - 2014-03-12 11:14 - 00000448 _____ () C:\Windows\setupact.log
2014-03-15 21:28 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-15 21:27 - 2014-03-15 21:20 - 00000000 ____D () C:\AdwCleaner
2014-03-15 21:27 - 2012-04-06 09:57 - 01694377 _____ () C:\Windows\WindowsUpdate.log
2014-03-15 21:19 - 2014-03-15 21:18 - 01950720 _____ () C:\Users\User\Downloads\AdwCleaner.exe
2014-03-15 20:56 - 2014-03-15 20:56 - 00000000 ____D () C:\Users\User\Desktop\Stare dane programu Firefox
2014-03-15 20:47 - 2012-05-25 22:04 - 00000000 ___RD () C:\Users\User\Desktop\programy
2014-03-15 17:45 - 2012-04-19 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Last.fm
2014-03-15 17:36 - 2012-09-26 19:33 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2008
2014-03-15 17:22 - 2012-07-25 17:45 - 00061440 ____H () C:\Users\User\Desktop\photothumb.db
2014-03-15 17:19 - 2014-03-15 17:19 - 00002984 _____ () C:\Windows\PFRO.log
2014-03-15 14:57 - 2012-10-30 13:28 - 00000132 _____ () C:\Users\User\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
2014-03-15 14:37 - 2014-01-13 21:35 - 00439296 ____H () C:\Users\User\Documents\photothumb.db
2014-03-15 11:58 - 2012-05-24 20:00 - 00869888 ___SH () C:\Users\User\Thumbs.db
2014-03-15 11:55 - 2014-03-15 11:55 - 00000000 ____D () C:\Users\User\Documents\zmiany wprowadzone do rejestru
2014-03-15 00:03 - 2012-09-09 13:14 - 00000000 ____D () C:\Program Files\Google
2014-03-15 00:01 - 2014-03-15 00:01 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-14 23:29 - 2014-03-14 23:29 - 13816153 _____ () C:\Users\User\Desktop\shikaku.psd
2014-03-14 21:47 - 2014-03-14 21:40 - 340072530 _____ () C:\Users\User\Downloads\Angus, stringi i przytulanki.rmvb
2014-03-14 21:10 - 2014-03-14 21:04 - 385647124 _____ () C:\Users\User\Downloads\Wredne dziewczyny 2.rmvb
2014-03-14 19:22 - 2014-03-04 19:57 - 04622637 _____ () C:\Users\User\Desktop\rune.cdr
2014-03-14 18:45 - 2014-03-04 19:57 - 04622762 _____ () C:\Users\User\Desktop\Backup_of_rune.cdr
2014-03-14 11:22 - 2009-07-14 05:33 - 04750840 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 11:17 - 2012-04-19 17:19 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 00:13 - 2012-04-06 10:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 00:08 - 2013-11-14 20:24 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-13 20:31 - 2014-03-13 20:26 - 299771237 _____ () C:\Users\User\Downloads\Elita [DVDRip.] [Rmvb] [Lektor PL].rmvb
2014-03-13 18:32 - 2014-03-13 18:24 - 323370463 _____ () C:\Users\User\Downloads\Sponsoring.rmvb
2014-03-13 17:38 - 2012-07-29 21:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Media Player Classic
2014-03-12 12:40 - 2012-07-12 13:50 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 12:40 - 2012-07-12 13:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 11:27 - 2012-11-24 12:44 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-03-12 11:14 - 2014-03-12 11:14 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-11 18:17 - 2014-03-11 18:17 - 00041546 _____ () C:\Users\User\Desktop\combofix Tova.txt
2014-03-11 18:15 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-03-11 18:15 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-03-11 18:14 - 2014-03-11 17:44 - 00000000 ____D () C:\Windows\erdnt
2014-03-11 18:09 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-03-11 18:06 - 2009-07-14 03:03 - 58195968 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-03-11 18:06 - 2009-07-14 03:03 - 14942208 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-03-11 18:06 - 2009-07-14 03:03 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-03-11 18:06 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-03-11 18:06 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-03-11 13:07 - 2013-08-30 14:19 - 00000266 __RSH () C:\Users\User\ntuser.pol
2014-03-11 11:30 - 2012-04-23 19:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\GG
2014-03-09 15:16 - 2013-10-09 16:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-08 20:58 - 2014-03-08 20:54 - 261802022 _____ () C:\Users\User\Downloads\Miłe martwe dziewczyny - Fine mrtve djevojke (2000)  wgrane napisy.pl.rmvb
2014-03-04 23:25 - 2014-03-04 23:27 - 00044693 _____ () C:\Users\User\Downloads\villemooooo.txt
2014-03-04 23:25 - 2014-03-04 23:25 - 00011046 _____ () C:\Users\User\Downloads\villemooooo.zip
2014-03-03 23:25 - 2014-03-03 23:25 - 00092607 _____ () C:\Users\User\Downloads\gjersoe ann-christin - dziedzictwo 01 kwiat kamelii.epub
2014-03-03 23:16 - 2014-03-03 23:16 - 00172839 _____ () C:\Users\User\Downloads\Gjersoe Ann-Christin - Dziedzictwo 01 Kwiat kamelii.mobi
2014-03-03 14:13 - 2012-04-23 17:29 - 00000000 ____D () C:\Program Files\ipla
2014-03-03 14:12 - 2012-04-23 17:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\ipla
2014-03-02 21:29 - 2014-03-02 21:29 - 00000000 ____D () C:\Users\User\Desktop\Originals
2014-03-01 20:15 - 2014-02-05 17:02 - 00000000 ____D () C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2014-03-01 20:15 - 2013-08-12 12:44 - 00000000 ____D () C:\Users\User\AppData\Roaming\DAEMON Tools Pro
2014-03-01 05:30 - 2014-03-13 12:02 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-13 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-13 12:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-13 12:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-13 12:03 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 12:03 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-13 12:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 12:03 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-13 12:03 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-13 12:03 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-13 12:03 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-13 12:03 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-13 12:03 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-13 12:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-13 12:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-13 12:02 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-13 12:02 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 12:02 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 12:02 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-13 12:03 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-13 12:02 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-13 12:03 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 23:09 - 2014-02-28 23:09 - 04708736 _____ () C:\Users\User\Downloads\install_flash_player_ics.apk
2014-02-28 22:18 - 2014-02-28 22:18 - 00000044 _____ () C:\Users\User\Downloads\UPLOAD BY GOTTSU3.txt
2014-02-27 15:30 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-26 23:55 - 2012-04-06 10:11 - 01642584 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-26 23:55 - 2009-07-14 09:07 - 00740536 _____ () C:\Windows\system32\perfh015.dat
2014-02-26 23:55 - 2009-07-14 09:07 - 00156078 _____ () C:\Windows\system32\perfc015.dat
2014-02-25 23:52 - 2012-04-06 15:48 - 00520200 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-25 17:36 - 2014-02-25 17:35 - 00023387 _____ () C:\Users\User\Downloads\helvetica-bold-italic-1361523410.zip
2014-02-24 20:00 - 2014-02-24 19:56 - 191259861 _____ () C:\Users\User\Downloads\deftones1999-06-12.rar
2014-02-23 20:45 - 2014-02-23 20:45 - 00000071 _____ () C:\Users\User\Downloads\link.txt
2014-02-23 12:15 - 2013-11-28 09:12 - 00000000 ____D () C:\Users\User\Downloads\Black Frame Shapes
2014-02-21 18:45 - 2014-02-05 12:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-02-21 18:44 - 2013-12-09 13:16 - 00000000 ____D () C:\Users\User\Desktop\szkoła
2014-02-20 18:41 - 2014-02-20 18:41 - 00000000 ____D () C:\Users\User\Documents\My Palettes
2014-02-20 18:40 - 2012-09-26 19:29 - 00000000 ____D () C:\ProgramData\Corel
2014-02-20 18:31 - 2014-02-20 18:31 - 00000258 _____ () C:\Users\User\Documents\CorelDRAW Graphics Suite X6.txt
2014-02-20 18:29 - 2012-09-26 18:26 - 00000000 ____D () C:\ProgramData\CorelDRAW Graphics Suite X6
2014-02-20 18:26 - 2014-02-20 18:26 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-20 18:25 - 2014-02-20 18:25 - 00000000 ____D () C:\Program Files\Common Files\Protexis
2014-02-20 18:17 - 2014-02-20 18:29 - 00002613 _____ () C:\Users\Public\Desktop\CorelDRAW X6.lnk
2014-02-20 18:17 - 2014-02-20 18:17 - 00000000 ____D () C:\Users\Public\Documents\Corel
2014-02-19 21:51 - 2014-02-19 21:51 - 17890696 _____ (Adobe Systems Incorporated) C:\Users\User\Downloads\install_flash_player.exe
2014-02-19 21:49 - 2014-02-19 21:49 - 00673640 _____ ( ) C:\Users\User\Downloads\Adobe-Flash-Player(13091).exe
2014-02-19 21:40 - 2014-02-19 21:40 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim (2).exe
2014-02-19 21:37 - 2014-02-19 21:36 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim (1).exe
2014-02-19 21:11 - 2012-09-24 17:04 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-02-19 20:53 - 2014-02-19 20:52 - 04987736 _____ (Adobe Systems Inc.) C:\Users\User\Downloads\Shockwave_Installer_Slim.exe
2014-02-19 17:36 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-17 17:02 - 2014-02-17 17:02 - 00000638 _____ () C:\Users\User\Downloads\czytaj draniu.txt
2014-02-14 00:43 - 2013-08-20 23:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 00:40 - 2012-04-06 11:08 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-14 00:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-13 17:00

==================== End Of Log ============================