Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-04-2014 01
Ran by rf (administrator) on RF-SAMSUNG on 13-04-2014 18:01:37
Running from C:\Users\rf\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Google Inc.) C:\Users\rf\AppData\Local\Google\Chrome\Application\chrome.exe
(Flux Software LLC) C:\Users\rf\AppData\Local\FluxSoftware\Flux\flux.exe
(Google Inc.) C:\Users\rf\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\rf\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Software 2000 Limited) C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
(PeerBlock, LLC) C:\Program Files\PeerBlock\peerblock.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11106408 2010-08-04] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2581384 2010-08-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [HPUsageTracking] - C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [24576 2009-05-11] (Hewlett-Packard Company)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [69632 2004-04-13] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [196608 2004-04-17] (InstallShield Software Corporation)
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\Run: [Google Update] - C:\Users\rf\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-30] (Google Inc.)
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\Run: [0C754ED15003B9568ED605C5CDE739F1BB9D3D56._service_run] - C:\Users\rf\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-02] (Google Inc.)
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\Run: [F.lux] - C:\Users\rf\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\MountPoints2: I - I:\LaunchU3.exe -a
HKU\S-1-5-21-4057851523-1035767074-843124173-1000\...\MountPoints2: {cba298b0-142f-11e0-af2f-4cedde691ec9} - F:\autorun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
SearchScopes: HKCU - DefaultScope {73B9A1E8-6DCA-4DAA-8557-90FFAC515948} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {73B9A1E8-6DCA-4DAA-8557-90FFAC515948} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: W2PBrowser Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {1EBD4AC5-4DCE-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/RuchyBrownaXp.cab
DPF: HKLM-x32 {4A161C25-4C1A-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/DyfrakcjaElektronowXp.cab
DPF: HKLM-x32 {8734F545-4E63-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/ThomsonXp.cab
DPF: HKLM-x32 {D883C831-4CD0-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/RozpadGraXp.cab
DPF: HKLM-x32 {D883C83C-4CD0-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/RozpadPromieniotworczyXp.cab
DPF: HKLM-x32 {D92AA206-515B-11D3-977B-444553540000} http://library.thinkquest.org/28383/nowe_teksty/html/ActiveX/MillikanXp.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default
FF user.js: detected! => C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\user.js
FF Homepage: hxxp://www.pajacyk.pl
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: @wolfram.com/Mathematica - C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.4.2615434\npmathplugin.dll (Wolfram Research, Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\rf\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\rf\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\rf\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\searchplugins\ceneo.xml
FF SearchPlugin: C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\searchplugins\ponseu--polnisch--deutsch.xml
FF SearchPlugin: C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\searchplugins\ponseu--polnisch--englisch.xml
FF SearchPlugin: C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml
FF Extension: Google Toolbar for Firefox - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-04-17]
FF Extension: ChatZilla - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2013-08-07]
FF Extension: iMacros for Firefox - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2014-03-11]
FF Extension: DownloadHelper - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-26]
FF Extension: FireGestures - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\firegestures@xuldev.org.xpi [2011-03-29]
FF Extension: Text Link - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{54BB9F3F-07E5-486c-9B39-C7398B99391C}.xpi [2013-01-13]
FF Extension: NoScript - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-01-31]
FF Extension: Easy YouTube Video Downloader - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2012-03-07]
FF Extension: QuickNote - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{C0CB8BA3-6C1B-47e8-A6AB-1FAB889562D9}.xpi [2011-03-28]
FF Extension: Adblock Plus - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-03-27]
FF Extension: Tab Mix Plus - C:\Users\rf\AppData\Roaming\Mozilla\Firefox\Profiles\ww2vp2kr.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2011-05-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-03-30]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-03-30]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-03-30]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-10-29]

Chrome: 
=======
CHR HomePage: hxxp://www.pajacyk.pl/
CHR Plugin: (Shockwave Flash) - C:\Users\rf\AppData\Local\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\rf\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\rf\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Norton Confidential) - C:\Users\rf\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.18.4_0\npcoplgn.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (McAfeeScanAndRepair) - C:\Users\rf\AppData\Local\Google\Chrome\Application\plugins\npMcAfeeSRPlgn.dll (McAfee, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Wolfram Mathematica) - C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.4.2615434\npmathplugin.dll (Wolfram Research, Inc.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\rf\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (AdBlock) - C:\Users\rf\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-08-21]
CHR Extension: (Norton Identity Protection) - C:\Users\rf\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2012-08-21]
CHR Extension: (Google Wallet) - C:\Users\rf\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\Exts\Chrome.crx [2014-03-24]

==================== Services (Whitelisted) =================

S3 B-Service; C:\Users\rf\AppData\Roaming\Mikogo\B-Service.exe [185640 2011-01-25] ()
R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2010-12-30] ()
S3 McAfee ScanAndRepair Svc; C:\Program Files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [695640 2012-01-12] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-09-03] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140319.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-28] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140411.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] ()
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140412.008\ENG64.SYS [126040 2014-03-28] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140412.008\EX64.SYS [2099288 2014-03-28] (Symantec Corporation)
R3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-12-30] ()
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-10-29] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-16] ()
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-02-24] (CyberLink Corp.)
U3 aayzhabn; C:\Windows\System32\Drivers\aayzhabn.sys [0 ] (Microsoft Corporation)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-13 18:01 - 2014-04-13 18:03 - 00026535 _____ () C:\Users\rf\Desktop\FRST.txt
2014-04-13 18:00 - 2014-04-13 18:01 - 00000000 ____D () C:\FRST
2014-04-13 17:58 - 2014-04-13 17:58 - 02157568 _____ (Farbar) C:\Users\rf\Desktop\FRST64.exe
2014-04-13 17:56 - 2014-04-13 17:56 - 00987448 _____ () C:\Users\rf\Desktop\SecurityCheck.exe
2014-04-13 17:56 - 2014-04-13 17:56 - 00602112 _____ (OldTimer Tools) C:\Users\rf\Desktop\OTL.exe
2014-04-12 14:08 - 2014-04-12 14:08 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-12 14:08 - 2014-04-12 14:08 - 00000000 ____D () C:\Users\rf\AppData\Local\Skype
2014-04-09 20:17 - 2014-04-09 20:17 - 00000000 ____D () C:\Users\rf\AppData\Roaming\chc
2014-04-09 17:54 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 17:54 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 17:54 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 17:54 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 17:54 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 17:54 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 17:54 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 17:54 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 17:54 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 17:54 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 17:54 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 17:54 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 17:54 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 17:54 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 17:54 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 17:54 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 17:54 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 17:54 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 17:54 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 17:54 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 17:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-30 17:08 - 2014-03-30 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 14:43 - 2014-03-29 14:43 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-03-29 14:37 - 2013-09-10 04:47 - 00078936 ____R (Symantec Corporation) C:\Windows\system32\Drivers\SymIMV.sys
2014-03-27 20:08 - 2014-03-27 20:08 - 00000000 ____D () C:\Program Files (x86)\e-Deklaracje
2014-03-16 18:36 - 2014-03-31 16:53 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak

==================== One Month Modified Files and Folders =======

2014-04-13 18:03 - 2014-04-13 18:01 - 00026535 _____ () C:\Users\rf\Desktop\FRST.txt
2014-04-13 18:01 - 2014-04-13 18:00 - 00000000 ____D () C:\FRST
2014-04-13 17:59 - 2012-06-25 17:10 - 00000000 ____D () C:\Users\rf\AppData\Roaming\uTorrent
2014-04-13 17:58 - 2014-04-13 17:58 - 02157568 _____ (Farbar) C:\Users\rf\Desktop\FRST64.exe
2014-04-13 17:57 - 2014-02-16 00:53 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-13 17:56 - 2014-04-13 17:56 - 00987448 _____ () C:\Users\rf\Desktop\SecurityCheck.exe
2014-04-13 17:56 - 2014-04-13 17:56 - 00602112 _____ (OldTimer Tools) C:\Users\rf\Desktop\OTL.exe
2014-04-13 17:56 - 2010-12-30 00:13 - 00001040 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-13 17:48 - 2010-10-26 20:45 - 01146846 _____ () C:\Windows\WindowsUpdate.log
2014-04-13 17:31 - 2009-07-14 06:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-13 17:31 - 2009-07-14 06:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-13 17:04 - 2012-08-21 16:52 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4057851523-1035767074-843124173-1000UA.job
2014-04-13 15:58 - 2014-02-01 18:58 - 00000000 ____D () C:\Program Files\PeerBlock
2014-04-13 14:22 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-13 14:20 - 2010-12-30 00:13 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-13 14:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-13 14:20 - 2009-07-14 06:51 - 00211958 _____ () C:\Windows\setupact.log
2014-04-13 01:36 - 2010-12-30 16:44 - 00000000 ____D () C:\Users\rf\AppData\Roaming\Skype
2014-04-13 00:04 - 2012-08-21 16:52 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4057851523-1035767074-843124173-1000Core.job
2014-04-13 00:02 - 2012-07-16 20:19 - 00000000 ____D () C:\Users\rf\AppData\Local\TSVNCache
2014-04-12 14:39 - 2010-12-31 16:44 - 00000000 ____D () C:\Users\rf\AppData\Local\Eclipse
2014-04-12 14:08 - 2014-04-12 14:08 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-12 14:08 - 2014-04-12 14:08 - 00000000 ____D () C:\Users\rf\AppData\Local\Skype
2014-04-12 14:08 - 2010-12-29 23:59 - 00000000 ____D () C:\ProgramData\Skype
2014-04-11 16:10 - 2012-08-21 16:53 - 00002317 _____ () C:\Users\rf\Desktop\Google Chrome.lnk
2014-04-10 18:48 - 2011-07-23 21:10 - 00000119 _____ () C:\Users\rf\Documents\Powers.log
2014-04-09 23:45 - 2012-05-27 15:47 - 00000039 _____ () C:\Windows\vbaddin.ini
2014-04-09 23:45 - 2010-12-30 14:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-09 23:44 - 2013-08-14 20:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 23:38 - 2010-12-29 19:58 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 20:17 - 2014-04-09 20:17 - 00000000 ____D () C:\Users\rf\AppData\Roaming\chc
2014-04-06 22:35 - 2010-10-26 21:30 - 00740688 _____ () C:\Windows\system32\perfh015.dat
2014-04-06 22:35 - 2010-10-26 21:30 - 00156230 _____ () C:\Windows\system32\perfc015.dat
2014-04-06 22:35 - 2009-07-14 07:13 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-06 16:40 - 2011-01-15 01:40 - 00007613 _____ () C:\Users\rf\AppData\Local\Resmon.ResmonCfg
2014-04-05 23:59 - 2012-08-21 16:52 - 00004010 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4057851523-1035767074-843124173-1000UA
2014-04-05 23:59 - 2012-08-21 16:52 - 00003614 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4057851523-1035767074-843124173-1000Core
2014-04-02 21:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-03-31 22:58 - 2012-05-03 13:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-31 22:58 - 2010-10-26 05:57 - 00417614 _____ () C:\Windows\PFRO.log
2014-03-31 16:53 - 2014-03-16 18:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox.bak
2014-03-31 03:16 - 2014-04-09 17:54 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-09 17:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-09 17:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-09 17:54 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-30 17:08 - 2014-03-30 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-29 14:43 - 2014-03-29 14:43 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-03-29 14:37 - 2012-02-02 17:01 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-03-29 14:37 - 2011-04-23 15:27 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-03-28 23:51 - 2010-12-30 00:13 - 00004036 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-28 23:51 - 2010-12-30 00:13 - 00003784 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-27 20:08 - 2014-03-27 20:08 - 00000000 ____D () C:\Program Files (x86)\e-Deklaracje
2014-03-24 20:00 - 2010-12-29 20:01 - 00000000 ____D () C:\Users\rf\Documents\Youcam
2014-03-24 17:56 - 2011-01-11 18:34 - 00000000 ____D () C:\Users\rf\AppData\Roaming\IrfanView
2014-03-19 22:08 - 2011-01-25 20:50 - 00000000 ____D () C:\Users\rf\AppData\Roaming\Mikogo
2014-03-14 17:46 - 2009-07-14 06:45 - 05016552 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 17:39 - 2012-05-11 17:50 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 17:39 - 2012-05-11 17:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

Files to move or delete:
====================
C:\Users\rf\zemsta kujona pl.exe


Some content of TEMP:
====================
C:\Users\rf\AppData\Local\Temp\COMAP.EXE
C:\Users\rf\AppData\Local\Temp\drm_dialogs.dll
C:\Users\rf\AppData\Local\Temp\el_inst.exe
C:\Users\rf\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe
C:\Users\rf\AppData\Local\Temp\gg10.upgr.exe
C:\Users\rf\AppData\Local\Temp\gg10_upgr_to_13096_from_12444.exe
C:\Users\rf\AppData\Local\Temp\ICReinstall_nokiafree-unlock-codes-calculator_586_pc.exe
C:\Users\rf\AppData\Local\Temp\ipl3228.tmp.exe
C:\Users\rf\AppData\Local\Temp\iplE1D6.tmp.exe
C:\Users\rf\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u25-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\rf\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\rf\AppData\Local\Temp\lame.exe
C:\Users\rf\AppData\Local\Temp\MAC.exe
C:\Users\rf\AppData\Local\Temp\MSN8068.exe
C:\Users\rf\AppData\Local\Temp\not_bundled_icytower15_install.exe
C:\Users\rf\AppData\Local\Temp\npp.5.9.6.2.Installer.exe
C:\Users\rf\AppData\Local\Temp\oggdec.exe
C:\Users\rf\AppData\Local\Temp\oggenc.exe
C:\Users\rf\AppData\Local\Temp\ose00000.exe
C:\Users\rf\AppData\Local\Temp\ose00001.exe
C:\Users\rf\AppData\Local\Temp\setup_FMSI.exe
C:\Users\rf\AppData\Local\Temp\Shockwave_Installer_FF.exe
C:\Users\rf\AppData\Local\Temp\SkypeSetup.exe
C:\Users\rf\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\rf\AppData\Local\Temp\uninstall.exe
C:\Users\rf\AppData\Local\Temp\xmllite.dll
C:\Users\rf\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-02 21:41

==================== End Of Log ============================