Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Ania (administrator) on FILIP on 17-03-2014 15:36:52
Running from C:\POBRANE
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPStart.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Apple Inc.) C:\programy\itunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Akamai Technologies, Inc.) C:\Users\Ania\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
(Akamai Technologies, Inc.) C:\Users\Ania\AppData\Local\Akamai\netsession_win.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\programy\thunderbird\thunderbird.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Microsoft Corporation) C:\Program Files\Windows Calendar\wincal.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\EXCEL.EXE
(Mozilla Corporation) C:\programy\firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4390912 2007-03-09] (Realtek Semiconductor)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [QPService] - C:\Program Files\HP\QuickPlay\QPService.exe [176128 2007-04-23] (CyberLink Corp.)
HKLM\...\Run: [QlbCtrl] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [159744 2007-02-13] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [HP Health Check Scheduler] - C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [50696 2007-03-12] (Hewlett-Packard)
HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [472776 2007-03-01] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [WAWifiMessage] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [317128 2007-01-10] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [CognizanceTS] - C:\Program Files\Bioscrypt\VeriSoft\Bin\ASTSVCC.dll [17920 2003-12-22] (Cognizance Corporation)
HKLM\...\Run: [Bluetooth Connection Assistant] - LBTWIZ.EXE -silent
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [56080 2007-06-12] (Logitech, Inc.)
HKLM\...\Run: [SynTPStart] - C:\Program Files\Synaptics\SynTP\SynTPStart.exe [102400 2007-09-15] (Synaptics, Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [Zune Launcher] - C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\programy\itunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM\...\RunOnce: [Launcher] - %WINDIR%\SMINST\launcher.exe [44128 2006-11-07] (soft thinks)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [Komunikator] - C:\Program Files\Tlen.pl\tlen.exe
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [ALLUpdate] - "C:\programy\ALLPlayer\ALLUpdate.exe" "sleep"
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [uTorrent] - C:\programy\pitorr\uTorrent.exe [1051984 2013-02-10] (BitTorrent Inc.)
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [AVG-Secure-Search-Update_0913b] - C:\Users\Ania\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid bafde9a0a51547d3a884d1532d17ce6f-9fdd8016946398774170b6c7772ea2076759e4bc --CMPID 0913b
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [Akamai NetSession Interface] - C:\Users\Ania\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\MountPoints2: {0639ca6b-f85e-11dc-b189-001b24aee9cd} - F:\AutoRun.exe
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\MountPoints2: {8998523c-b03a-11e2-b3bd-001a6bf3279c} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\MountPoints2: {c8f17976-cb37-11dc-978b-001b24aee9cd} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe
HKU\S-1-5-21-1466610127-2628119233-3016908339-1000\...\MountPoints2: {c92e77c1-a67a-11de-8cb6-001b24aee9cd} - F:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
AppInit_DLLs: apshook.dll => C:\Windows\system32\apshook.dll [56832 2006-07-13] (Cognizance Corporation)
Lsa: [Notification Packages] scecli ASWLNPkg
Startup: C:\Users\Ania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119357&tt=gc_&babsrc=SP_ss&mntrId=03E7001A6BF3279C
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Ania\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll No File
Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_15-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default
FF user.js: detected! => C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\user.js
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\programy\itunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll No File
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Ania\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\searchplugins\delta.xml
FF Extension: Default Manager - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\Extensions\DefaultManager@Microsoft [2012-07-14]
FF Extension: Iplex to ALLPlayer - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2013-07-02]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-07-22]
FF Extension: Adblock Plus - C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\2xvp2eqe.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-07]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-08-09]
FF StartMenuInternet: FIREFOX.EXE - C:\programy\firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.pl/
CHR RestoreOnStartup: "hxxp://www.google.pl/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\27.0.1453.116\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Angry Birds) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-02-09]
CHR Extension: (Dokumenty Google) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-02-09]
CHR Extension: (Dysk Google) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-02-09]
CHR Extension: (YouTube) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-02-09]
CHR Extension: (Szukaj w Google) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-02-09]
CHR Extension: (Lord of Ultima) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\jdheeblenjmceeppomdgokgilmkonced [2013-02-09]
CHR Extension: (Rango: The WORLD) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\ladlgddeghalkmimaamlhbfaglfcdiep [2013-02-09]
CHR Extension: (Gmail) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-02-09]
CHR HKLM\...\Chrome\Extension: [kiplfnciaokpcennlkldkdaeaaomamof] - C:\Users\Ania\AppData\Local\Torch\Plugins\TorchPlugin.crx [2013-02-10]

========================== Services (Whitelisted) =================

R2 ASBroker; c:\Program Files\Bioscrypt\VeriSoft\Bin\ASWLNPkg.dll [74240 2007-02-07] (Cognizance Corporation)
R2 ASChannel; c:\Program Files\Bioscrypt\VeriSoft\Bin\AsChnl.dll [131584 2006-06-22] (Cognizance Corporation)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 CLCapSvc; C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [262243 2007-04-23] ()
S2 CLSched; C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [106593 2007-04-23] ()
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [62984 2007-03-14] (Hewlett-Packard)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 CLTNetCnService; "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [X]
S3 stllssvr; "C:\Program Files\Common Files\SureThing Shared\stllssvr.exe" [X]

==================== Drivers (Whitelisted) ====================

R3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [140424 2007-03-28] (AuthenTec, Inc.)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [210712 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22808 2014-01-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 eabfiltr; C:\Windows\System32\DRIVERS\eabfiltr.sys [8192 2006-11-30] (Hewlett-Packard Development Company, L.P.)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [371248 2009-02-25] (Symantec Corporation)
S1 eusk2par; C:\Windows\system32\Drivers\eusk2par.sys [24786 2004-11-18] (EUTRON)
R1 ISODrive; C:\programy\UltraISO\drivers\ISODrive.sys [73728 2008-05-24] (EZB Systems, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 nmwcd; system32\drivers\ccdcmb.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [X]
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 15:35 - 2014-03-17 15:36 - 00000000 ____D () C:\FRST
2014-03-17 14:48 - 2014-03-17 14:48 - 00107150 _____ () C:\Users\Ania\Desktop\OTL.Txt
2014-03-17 14:48 - 2014-03-17 14:48 - 00075064 _____ () C:\Users\Ania\Desktop\Extras.Txt
2014-03-16 11:40 - 2014-03-16 11:41 - 00000000 ____D () C:\Users\Ania\Desktop\2014-03-08 do 15 Narty Zillertall
2014-03-14 14:17 - 2014-02-23 06:50 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-14 14:17 - 2014-02-23 06:47 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-14 14:17 - 2014-02-23 06:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-14 14:17 - 2014-02-23 06:41 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-14 14:17 - 2014-02-23 06:40 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-14 14:17 - 2014-02-23 06:39 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-14 14:17 - 2014-02-23 06:38 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-14 14:17 - 2014-02-23 06:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-14 14:17 - 2014-02-23 06:38 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-14 14:17 - 2014-02-23 06:37 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-14 14:17 - 2014-02-23 06:37 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-14 14:17 - 2014-02-23 06:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-14 14:17 - 2014-02-23 06:37 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-14 14:17 - 2014-02-23 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-14 14:17 - 2014-02-23 06:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-14 14:17 - 2014-02-23 06:35 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 08:41 - 2014-02-07 11:38 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 08:41 - 2014-02-03 11:37 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 08:41 - 2014-01-30 08:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 08:40 - 2013-11-13 01:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-03-07 20:37 - 2014-03-07 20:37 - 00000000 ____D () C:\Users\Ania\Desktop\Nowy folder
2014-03-07 20:33 - 2014-03-07 20:33 - 00003059 _____ () C:\Users\Ania\AppData\Local\recently-used.xbel
2014-03-07 19:45 - 2014-03-07 19:45 - 00000127 _____ () C:\Users\Ania\Documents\plot.log
2014-03-04 14:32 - 2014-03-04 14:41 - 00000000 ____D () C:\Users\Ania\Desktop\dewugie
2014-03-04 13:58 - 2014-03-04 13:58 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-03-04 13:12 - 2014-03-04 13:12 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-03-04 12:58 - 2014-03-04 13:28 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-03-04 12:57 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-04 12:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-03-04 10:26 - 2014-03-04 10:27 - 00000000 ____D () C:\Users\Ania\AppData\Local\Akamai
2014-02-22 15:55 - 2014-02-22 15:59 - 00000000 ____D () C:\Users\Ania\Desktop\oboz 1 turnus

==================== One Month Modified Files and Folders =======

2014-03-17 15:36 - 2014-03-17 15:35 - 00000000 ____D () C:\FRST
2014-03-17 15:36 - 2013-06-24 10:40 - 00000000 ____D () C:\POBRANE
2014-03-17 15:17 - 2014-02-02 14:01 - 00000288 _____ () C:\Windows\Tasks\Digital Sites.job
2014-03-17 15:12 - 2013-06-24 14:53 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-17 15:01 - 2013-06-02 21:01 - 00000282 _____ () C:\Windows\Tasks\DSite.job
2014-03-17 14:50 - 2008-01-13 03:29 - 01412838 _____ () C:\Windows\WindowsUpdate.log
2014-03-17 14:48 - 2014-03-17 14:48 - 00107150 _____ () C:\Users\Ania\Desktop\OTL.Txt
2014-03-17 14:48 - 2014-03-17 14:48 - 00075064 _____ () C:\Users\Ania\Desktop\Extras.Txt
2014-03-17 14:48 - 2008-01-14 21:01 - 01621614 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-17 14:48 - 2006-12-05 06:22 - 00716776 _____ () C:\Windows\system32\perfh015.dat
2014-03-17 14:48 - 2006-12-05 06:22 - 00152214 _____ () C:\Windows\system32\perfc015.dat
2014-03-17 13:53 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 13:53 - 2006-11-02 13:47 - 00003168 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 13:52 - 2009-12-08 18:32 - 00452674 _____ () C:\ProgramData\nvModes.001
2014-03-17 13:52 - 2009-12-08 18:31 - 00452674 _____ () C:\ProgramData\nvModes.dat
2014-03-17 12:32 - 2013-07-27 18:40 - 00000219 _____ () C:\Users\Ania\AppData\Roaming\WB.CFG
2014-03-17 11:41 - 2013-04-02 12:34 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\GG
2014-03-17 11:28 - 2013-02-10 12:45 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\uTorrent
2014-03-17 11:25 - 2007-06-02 09:14 - 00000148 _____ () C:\Users\Public\Documents\hpqp.ini
2014-03-17 11:23 - 2007-06-02 09:31 - 00000000 ____D () C:\Windows\SMINST
2014-03-17 11:23 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-17 11:21 - 2006-11-02 14:01 - 00032548 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-17 11:20 - 2008-01-13 03:28 - 00004268 _____ () C:\Windows\bthservsdp.dat
2014-03-17 09:45 - 2013-02-10 00:14 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-16 18:33 - 2013-08-11 22:21 - 00003386 _____ () C:\m.txt
2014-03-16 11:41 - 2014-03-16 11:40 - 00000000 ____D () C:\Users\Ania\Desktop\2014-03-08 do 15 Narty Zillertall
2014-03-16 11:13 - 2013-02-10 18:53 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-16 11:13 - 2011-07-17 19:16 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-14 14:52 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-03-14 14:25 - 2006-11-02 13:47 - 00466344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 14:22 - 2009-11-21 12:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 14:15 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-03-14 14:11 - 2013-08-23 09:13 - 00094635 _____ () C:\Users\Ania\Desktop\Katalogi Danwood.xlsx
2014-03-14 10:47 - 2013-04-02 12:33 - 00000000 ____D () C:\Users\Ania\AppData\Local\GG
2014-03-09 20:52 - 2008-01-13 21:43 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\Skype
2014-03-09 16:10 - 2008-04-15 10:19 - 00007808 _____ () C:\Users\Ania\AppData\Local\d3d9caps.dat
2014-03-09 12:15 - 2006-11-02 13:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-03-08 21:35 - 2013-02-11 20:30 - 00000000 ____D () C:\gry
2014-03-08 12:38 - 2008-01-14 00:12 - 00121344 _____ () C:\Users\Ania\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-07 20:37 - 2014-03-07 20:37 - 00000000 ____D () C:\Users\Ania\Desktop\Nowy folder
2014-03-07 20:36 - 2013-04-03 08:49 - 00000000 ____D () C:\Users\Ania\.gimp-2.8
2014-03-07 20:33 - 2014-03-07 20:33 - 00003059 _____ () C:\Users\Ania\AppData\Local\recently-used.xbel
2014-03-07 19:45 - 2014-03-07 19:45 - 00000127 _____ () C:\Users\Ania\Documents\plot.log
2014-03-07 17:24 - 2013-11-18 13:40 - 00000000 ____D () C:\Users\Ania\AppData\Local\Autodesk
2014-03-07 09:49 - 2013-08-30 11:00 - 00283196 _____ () C:\Users\Ania\Desktop\cennik domów Today.xlsx
2014-03-04 14:41 - 2014-03-04 14:32 - 00000000 ____D () C:\Users\Ania\Desktop\dewugie
2014-03-04 14:02 - 2013-11-18 13:50 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\Autodesk
2014-03-04 14:00 - 2013-11-18 13:50 - 00000000 ____D () C:\ProgramData\Autodesk
2014-03-04 13:58 - 2014-03-04 13:58 - 00000000 ____D () C:\ProgramData\FLEXnet
2014-03-04 13:57 - 2008-01-12 21:51 - 00136064 _____ () C:\Users\Ania\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-04 13:28 - 2014-03-04 12:58 - 00000000 ____D () C:\Program Files\Common Files\Autodesk Shared
2014-03-04 13:15 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-03-04 13:12 - 2014-03-04 13:12 - 00000000 ____D () C:\Program Files\Common Files\Macrovision Shared
2014-03-04 13:04 - 2013-02-09 23:51 - 00000000 ____D () C:\programy
2014-03-04 10:39 - 2013-02-10 18:54 - 00000000 ____D () C:\Torr
2014-03-04 10:27 - 2014-03-04 10:26 - 00000000 ____D () C:\Users\Ania\AppData\Local\Akamai
2014-03-04 10:25 - 2013-11-18 13:47 - 00000000 ____D () C:\Autodesk
2014-03-03 12:40 - 2014-02-06 14:54 - 00031935 _____ () C:\Users\Ania\Desktop\Porównanie.xlsx
2014-02-25 19:08 - 2013-02-27 15:04 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-25 00:27 - 2013-02-11 19:23 - 00000000 ____D () C:\muz
2014-02-23 06:50 - 2014-03-14 14:17 - 12347904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-23 06:47 - 2014-03-14 14:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-23 06:43 - 2014-03-14 14:17 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-23 06:41 - 2014-03-14 14:17 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-23 06:40 - 2014-03-14 14:17 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-23 06:39 - 2014-03-14 14:17 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-23 06:38 - 2014-03-14 14:17 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-23 06:38 - 2014-03-14 14:17 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-23 06:38 - 2014-03-14 14:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-23 06:37 - 2014-03-14 14:17 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-23 06:37 - 2014-03-14 14:17 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-23 06:37 - 2014-03-14 14:17 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-23 06:37 - 2014-03-14 14:17 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-23 06:36 - 2014-03-14 14:17 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-23 06:36 - 2014-03-14 14:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-23 06:35 - 2014-03-14 14:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-22 15:59 - 2014-02-22 15:55 - 00000000 ____D () C:\Users\Ania\Desktop\oboz 1 turnus

Files to move or delete:
====================
C:\ProgramData\ezsid.dat


Some content of TEMP:
====================
C:\Users\Ania\AppData\Local\Temp\AcDeltree.exe
C:\Users\Ania\AppData\Local\Temp\ALLPlayerPL.exe
C:\Users\Ania\AppData\Local\Temp\cres.dll
C:\Users\Ania\AppData\Local\Temp\cshell.dll
C:\Users\Ania\AppData\Local\Temp\DLMGuardian.exe
C:\Users\Ania\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\Ania\AppData\Local\Temp\ggdrive-menu.exe
C:\Users\Ania\AppData\Local\Temp\ggdrive-overlay.exe
C:\Users\Ania\AppData\Local\Temp\installstats.exe
C:\Users\Ania\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Ania\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Ania\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Ania\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ania\AppData\Local\Temp\Q2 Internet Radio Installer v0.38_win32_nojre.exe
C:\Users\Ania\AppData\Local\Temp\SIntf16.dll
C:\Users\Ania\AppData\Local\Temp\SIntf32.dll
C:\Users\Ania\AppData\Local\Temp\SIntfNT.dll
C:\Users\Ania\AppData\Local\Temp\sres.dll
C:\Users\Ania\AppData\Local\Temp\Uninst.exe
C:\Users\Ania\AppData\Local\Temp\uninst1.exe
C:\Users\Ania\AppData\Local\Temp\UninstAP.exe
C:\Users\Ania\AppData\Local\Temp\UnityWebPlayer5015437735421051962.exe
C:\Users\Ania\AppData\Local\Temp\UnityWebPlayer8064273771201056019.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-17 11:36

==================== End Of Log ============================