Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02 Ran by DOMOWY (administrator) on DOMOWY-KOMPUTER on 25-05-2014 21:35:33 Running from C:\Users\DOMOWY\Downloads Platform: Windows 7 Ultimate (X64) OS Language: Polish Internet Explorer Version 8 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files (x86)\puush\puush.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe (FNet Co., Ltd.) C:\Program Files (x86)\XFastUSB\XFastUsb.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe (Google Inc.) C:\Program Files (x86)\Google\Google Japanese Input\GoogleIMEJaCacheService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (OldTimer Tools) C:\Users\DOMOWY\Downloads\OTL.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [THXCfg64] => C:\Windows\system32\THXCfg64.dll [26624 2011-05-13] (Creative Technology Ltd.) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO) HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133408 2012-09-11] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation) HKLM-x32\...\Run: [THX TruStudio NB Settings] => C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe [909824 2011-05-19] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [XFastUSB] => C:\Program Files (x86)\XFastUSB\XFastUsb.exe [5021448 2013-01-26] (FNet Co., Ltd.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM-x32\...\Run: [Adobe ARM] => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime Alternative\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Google Japanese Input Prelauncher] => C:\Program Files (x86)\Google\Google Japanese Input\GoogleIMEJaBroker32.exe [1435672 2013-12-18] (Google Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\Run: [EPSON SX125 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\Run: [Xvid] => C:\Program Files (x86)\Xvid\CheckUpdate.exe [8192 2011-01-17] () HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\Run: [Google Update] => C:\Users\DOMOWY\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-13] (Google Inc.) HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\Run: [GoogleDriveSync] => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe [567880 2014-02-28] () HKU\S-1-5-21-2338929927-1395843485-4213390401-1000\...\MountPoints2: {e8b78d0e-3198-11e3-8fcd-bc5ff47b3fa2} - F:\MicroLauncher.exe AppInit_DLLs-x32: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll => C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll [2521040 2013-05-23] () ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A8F8BC5FF47B3FA2&affID=119821&tsp=4950 BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Pomocnik logowania za pomocą konta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\DOMOWY\AppData\Roaming\Mozilla\Firefox\Profiles\chwl6pd7.default-1374411640218 FF SelectedSearchEngine: AVG Secure Search FF Homepage: hxxp://google.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\DOMOWY\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\DOMOWY\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\DOMOWY\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\DOMOWY\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\DOMOWY\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Users\DOMOWY\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google) FF Plugin ProgramFiles/Appdata: C:\Users\DOMOWY\AppData\Roaming\mozilla\plugins\npo1d.dll (Google) FF Extension: ChatZilla - C:\Users\DOMOWY\AppData\Roaming\Mozilla\Firefox\Profiles\chwl6pd7.default-1374411640218\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2014-04-13] FF Extension: 1-Click Dailymotion Video Downloader - C:\Users\DOMOWY\AppData\Roaming\Mozilla\Firefox\Profiles\chwl6pd7.default-1374411640218\Extensions\DailymotionVideoDownloader@PeterOlayev.com.xpi [2014-04-18] FF Extension: Firebug - C:\Users\DOMOWY\AppData\Roaming\Mozilla\Firefox\Profiles\chwl6pd7.default-1374411640218\Extensions\firebug@software.joehewitt.com.xpi [2013-07-21] FF Extension: Adblock Plus - C:\Users\DOMOWY\AppData\Roaming\Mozilla\Firefox\Profiles\chwl6pd7.default-1374411640218\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-20] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2014-05-10] Chrome: ======= CHR Extension: (Free Smileys & Emoticons) - C:\Users\DOMOWY\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl [2013-11-04] ==================== Services (Whitelisted) ================= R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO) R2 GoogleIMEJaCacheService; C:\Program Files (x86)\Google\Google Japanese Input\GoogleIMEJaCacheService.exe [754712 2013-12-18] (Google Inc.) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-05] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] () S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-08-21] (Intel Corporation) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-02-27] () ==================== Drivers (Whitelisted) ==================== R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology) R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO) R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO) R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO) S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [32320 2013-07-02] (FNet Co., Ltd.) R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [16648 2013-01-26] (FNet Co., Ltd.) R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] () R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] () R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO) R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] () R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex) R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-05-25] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-25 21:35 - 2014-05-25 21:35 - 00015120 _____ () C:\Users\DOMOWY\Downloads\FRST.txt 2014-05-25 21:35 - 2014-05-25 21:35 - 00000000 ____D () C:\FRST 2014-05-25 21:34 - 2014-05-25 21:35 - 02066944 _____ (Farbar) C:\Users\DOMOWY\Downloads\FRST64.exe 2014-05-25 21:34 - 2014-05-25 21:34 - 01056256 _____ (Farbar) C:\Users\DOMOWY\Downloads\FRST.exe 2014-05-25 21:34 - 2014-05-25 21:34 - 00602112 _____ (OldTimer Tools) C:\Users\DOMOWY\Downloads\OTL.exe 2014-05-25 21:31 - 2014-05-25 21:31 - 05200426 _____ (Swearware) C:\Users\DOMOWY\Downloads\ComboFix.exe 2014-05-25 08:55 - 2014-05-25 08:55 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2014-05-24 21:53 - 2014-05-24 22:05 - 00000000 ____D () C:\Program Files (x86)\Przyspiesz 2014-05-24 21:52 - 2014-05-24 21:52 - 04482688 _____ (Przyspiesz.pl ) C:\Users\DOMOWY\Downloads\setup_przyspiesz_ndw554hqu.exe 2014-05-21 16:04 - 2014-05-21 16:04 - 01790120 _____ () C:\Users\DOMOWY\Downloads\Riot-setup(1).exe 2014-05-21 15:59 - 2014-05-21 15:59 - 00386864 _____ (Softonic ) C:\Users\DOMOWY\Downloads\SoftonicDownloader_dla_riot.exe 2014-05-20 18:11 - 2014-05-20 18:11 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-05-20 18:10 - 2014-05-20 18:10 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-20 18:10 - 2014-05-20 18:10 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 18:09 - 2014-05-06 21:20 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-20 18:09 - 2014-05-06 16:51 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-20 18:09 - 2014-05-05 15:15 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-20 18:09 - 2014-05-02 11:19 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll 2014-05-20 18:09 - 2014-04-30 11:34 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-20 18:09 - 2014-04-28 15:48 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-05-20 18:09 - 2014-04-25 13:51 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-20 18:09 - 2014-04-25 13:23 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-20 18:09 - 2014-04-23 17:51 - 02117424 _____ () C:\Windows\system32\SStudio.dll 2014-05-20 18:09 - 2014-04-17 17:42 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2014-05-20 18:09 - 2014-04-17 17:42 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-20 18:09 - 2014-04-17 17:42 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-20 18:09 - 2014-04-10 12:20 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2014-05-20 18:09 - 2014-04-10 12:20 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-20 18:09 - 2014-04-10 12:19 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-05-20 18:09 - 2014-04-09 16:39 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll 2014-05-20 18:09 - 2014-04-09 16:38 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2014-05-20 18:09 - 2014-04-07 16:03 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-05-20 18:09 - 2014-04-07 16:03 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-05-20 18:09 - 2014-04-07 16:03 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-05-20 18:09 - 2014-04-07 16:03 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-05-20 18:09 - 2014-03-28 18:03 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-20 18:09 - 2014-03-21 14:17 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2014-05-20 18:09 - 2014-03-19 19:19 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-20 18:09 - 2014-03-06 16:35 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-05-20 18:09 - 2014-03-05 05:11 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-20 18:09 - 2014-03-05 05:11 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-20 18:09 - 2014-03-05 05:11 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-20 18:09 - 2014-03-05 05:11 - 00246008 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2014-05-20 18:09 - 2014-02-27 20:02 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2014-05-20 18:09 - 2014-02-26 15:16 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-05-20 18:09 - 2014-02-18 17:04 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-20 18:09 - 2014-02-06 11:28 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-20 18:09 - 2014-01-31 17:27 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-20 18:09 - 2014-01-28 11:48 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-20 18:09 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-05-20 18:09 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-05-20 18:09 - 2013-10-11 11:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-05-20 18:09 - 2013-10-07 00:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-05-20 18:09 - 2013-10-07 00:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-05-20 18:09 - 2013-10-07 00:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-05-20 18:09 - 2013-08-14 15:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-05-20 18:09 - 2013-08-14 15:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-05-20 18:09 - 2013-06-25 12:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-05-20 18:09 - 2013-06-25 12:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-05-20 18:09 - 2013-06-25 12:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-05-20 18:09 - 2013-06-21 11:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-05-20 18:09 - 2013-04-03 14:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-05-20 18:09 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-05-20 18:09 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-05-20 18:09 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-05-20 18:09 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-05-20 18:09 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-05-20 18:09 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-05-20 18:09 - 2012-01-30 11:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-05-20 18:09 - 2012-01-10 10:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-05-20 18:09 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-05-20 18:09 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-05-20 18:09 - 2011-09-02 14:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-05-20 18:09 - 2011-09-02 14:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-05-20 18:09 - 2011-09-02 14:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-05-20 18:09 - 2011-08-23 17:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-05-20 18:09 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-05-20 18:09 - 2011-03-17 12:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-05-20 18:09 - 2011-03-07 17:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-05-20 18:09 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-05-20 18:09 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-05-20 18:09 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-05-20 18:09 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-05-20 18:09 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-05-20 18:09 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-05-20 18:09 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-05-20 18:09 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-05-20 18:07 - 2014-05-20 18:07 - 229604706 _____ (Realtek Semiconductor Corp.) C:\Users\DOMOWY\Downloads\Win7_Win8_Win81_R274.exe 2014-05-20 18:06 - 2014-05-20 18:06 - 00003270 _____ () C:\Windows\System32\Tasks\Opera D7 2014-05-20 18:06 - 2014-05-20 18:06 - 00003270 _____ () C:\Windows\System32\Tasks\Opera D6 2014-05-20 18:02 - 2014-05-20 18:03 - 00707056 _____ () C:\Users\DOMOWY\Downloads\Realtek-High-Definition-Audio-Codecs(21164).exe 2014-05-18 21:45 - 2014-05-18 21:45 - 00016571 _____ () C:\Users\DOMOWY\Desktop\Czasowniki nieregularne.xlsx 2014-05-18 19:36 - 2014-05-18 19:36 - 00013965 _____ () C:\Users\DOMOWY\Downloads\czasy.xlsx 2014-05-17 15:32 - 2014-05-18 13:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla ActiveX Control v1.5 2014-05-17 15:32 - 2014-05-17 16:09 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\AgerWebEdytor 2014-05-17 15:32 - 2014-05-17 15:51 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\MozillaControl 2014-05-17 15:30 - 2014-05-17 15:30 - 06130708 _____ (StatJacek ) C:\Users\DOMOWY\Downloads\setup.exe 2014-05-17 15:30 - 2014-05-17 15:30 - 00001007 _____ () C:\Users\DOMOWY\Desktop\Ager Web Edytor.lnk 2014-05-17 15:30 - 2014-05-17 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ager Web Edytor 2014-05-17 15:30 - 2014-05-17 15:30 - 00000000 ____D () C:\Program Files (x86)\Ager Web Edytor 2014-05-17 14:56 - 2014-05-17 14:56 - 00000000 ____D () C:\ProgramData\YTD Video Downloader 2014-05-17 14:55 - 2014-05-17 14:55 - 11228600 _____ () C:\Users\DOMOWY\Downloads\YTDSetup.exe 2014-05-17 14:55 - 2014-05-17 14:55 - 00001293 _____ () C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-05-17 14:55 - 2014-05-17 14:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader 2014-05-17 14:55 - 2014-05-17 14:55 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications 2014-05-17 14:54 - 2014-05-17 14:54 - 00707056 _____ () C:\Users\DOMOWY\Downloads\YouTube-Downloader(27896).exe 2014-05-15 18:19 - 2014-05-15 18:21 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\Adobe 2014-05-15 18:19 - 2014-05-15 18:19 - 00000000 ____D () C:\Users\DOMOWY\AppData\Local\Adobe 2014-05-15 18:19 - 2014-05-15 18:19 - 00000000 ____D () C:\ProgramData\Adobe 2014-05-14 18:18 - 2014-05-14 18:18 - 00045383 _____ () C:\Users\DOMOWY\Documents\Bez_nazwy (2).wma 2014-05-14 18:18 - 2014-05-14 18:18 - 00027423 _____ () C:\Users\DOMOWY\Documents\Bez_nazwy.wma 2014-05-10 23:17 - 2014-05-10 23:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-08 18:41 - 2014-05-08 18:42 - 01790120 _____ () C:\Users\DOMOWY\Downloads\Riot-setup.exe 2014-05-08 18:33 - 2014-05-08 18:34 - 03148253 _____ () C:\Users\DOMOWY\Downloads\Background_template(1).psd 2014-05-07 17:21 - 2014-05-07 17:21 - 00041824 _____ () C:\Users\DOMOWY\Downloads\pencilfied.ttf 2014-05-03 11:13 - 2014-05-03 16:56 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2014-05-03 11:13 - 2014-05-03 11:13 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon 2014-05-03 11:13 - 2014-05-03 11:13 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager 2014-05-02 14:40 - 2014-05-02 15:00 - 00000000 ____D () C:\Program Files (x86)\kED 2014-05-02 14:40 - 2014-05-02 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kED 2014-05-02 14:39 - 2014-05-02 14:39 - 01450861 _____ ( ) C:\Users\DOMOWY\Downloads\ked2140(dobreprogramy.pl).exe 2014-05-02 14:39 - 2014-05-02 14:39 - 00700824 _____ ( ) C:\Users\DOMOWY\Downloads\kED(11810).exe 2014-05-02 14:37 - 2014-05-02 14:41 - 264592392 _____ () C:\Users\DOMOWY\Downloads\html_cz_2.flv 2014-05-02 13:38 - 2014-05-02 13:51 - 957805515 _____ () C:\Users\DOMOWY\Downloads\html_cz_1.flv 2014-05-02 13:25 - 2014-05-02 13:25 - 00009855 _____ () C:\Users\DOMOWY\Downloads\Pandora+Hearts+Wiki-20140502112541.xml 2014-04-30 20:12 - 2014-04-30 20:12 - 00000746 _____ () C:\Users\DOMOWY\Desktop\Anki.lnk 2014-04-30 19:59 - 2014-04-30 19:59 - 01310621 _____ () C:\Users\DOMOWY\Downloads\adwcleaner.exe 2014-04-30 19:58 - 2014-04-30 19:58 - 00386864 _____ (Softonic ) C:\Users\DOMOWY\Downloads\SoftonicDownloader_dla_anki.exe 2014-04-30 16:10 - 2014-04-30 20:12 - 00000000 ____D () C:\Program Files (x86)\Anki 2014-04-30 16:09 - 2014-04-30 16:09 - 25863375 _____ () C:\Users\DOMOWY\Downloads\anki-2.0.26.exe 2014-04-27 10:33 - 2014-04-27 10:33 - 00000834 _____ () C:\Users\DOMOWY\Downloads\google(2).csv 2014-04-27 10:30 - 2014-04-27 10:30 - 00000425 _____ () C:\Users\DOMOWY\Downloads\google(1).csv 2014-04-27 10:25 - 2014-04-27 10:25 - 00016598 _____ () C:\Users\DOMOWY\Downloads\google.csv ==================== One Month Modified Files and Folders ======= 2014-05-25 21:35 - 2014-05-25 21:35 - 00015120 _____ () C:\Users\DOMOWY\Downloads\FRST.txt 2014-05-25 21:35 - 2014-05-25 21:35 - 00000000 ____D () C:\FRST 2014-05-25 21:35 - 2014-05-25 21:34 - 02066944 _____ (Farbar) C:\Users\DOMOWY\Downloads\FRST64.exe 2014-05-25 21:34 - 2014-05-25 21:34 - 01056256 _____ (Farbar) C:\Users\DOMOWY\Downloads\FRST.exe 2014-05-25 21:34 - 2014-05-25 21:34 - 00602112 _____ (OldTimer Tools) C:\Users\DOMOWY\Downloads\OTL.exe 2014-05-25 21:33 - 2013-01-26 22:39 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat 2014-05-25 21:31 - 2014-05-25 21:31 - 05200426 _____ (Swearware) C:\Users\DOMOWY\Downloads\ComboFix.exe 2014-05-25 21:26 - 2013-02-07 16:08 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\Skype 2014-05-25 21:24 - 2013-01-27 02:39 - 01871006 _____ () C:\Windows\WindowsUpdate.log 2014-05-25 21:23 - 2013-08-12 21:24 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338929927-1395843485-4213390401-1000UA.job 2014-05-25 21:23 - 2013-06-08 15:40 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-25 19:21 - 2013-03-08 16:23 - 00000000 ____D () C:\Users\DOMOWY\AppData\Local\CrashDumps 2014-05-25 19:19 - 2014-01-30 21:29 - 00000000 ____D () C:\Users\DOMOWY\Documents\Anki 2014-05-25 19:16 - 2013-08-12 21:24 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2338929927-1395843485-4213390401-1000Core.job 2014-05-25 14:17 - 2013-06-08 15:40 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-25 09:02 - 2009-07-14 06:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-25 09:02 - 2009-07-14 06:45 - 00010208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-25 08:55 - 2014-05-25 08:55 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp 2014-05-25 08:55 - 2013-01-26 22:30 - 00034752 _____ () C:\Windows\system32\Drivers\WPRO_41_2001.sys 2014-05-25 08:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-25 08:55 - 2009-07-14 06:51 - 00500763 _____ () C:\Windows\setupact.log 2014-05-25 08:54 - 2013-01-26 22:22 - 00401768 _____ () C:\Windows\PFRO.log 2014-05-24 22:05 - 2014-05-24 21:53 - 00000000 ____D () C:\Program Files (x86)\Przyspiesz 2014-05-24 21:52 - 2014-05-24 21:52 - 04482688 _____ (Przyspiesz.pl ) C:\Users\DOMOWY\Downloads\setup_przyspiesz_ndw554hqu.exe 2014-05-24 09:04 - 2009-07-14 19:55 - 00697674 _____ () C:\Windows\system32\perfh015.dat 2014-05-24 09:04 - 2009-07-14 19:55 - 00134784 _____ () C:\Windows\system32\perfc015.dat 2014-05-24 09:04 - 2009-07-14 07:13 - 01549696 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-24 08:02 - 2013-07-24 11:10 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\Audacity 2014-05-24 07:58 - 2013-04-19 18:26 - 00004366 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{46B0E4A7-5E1A-40E8-8D4B-28AC8A24C147} 2014-05-22 15:56 - 2013-01-27 14:04 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\Mozilla 2014-05-21 16:04 - 2014-05-21 16:04 - 01790120 _____ () C:\Users\DOMOWY\Downloads\Riot-setup(1).exe 2014-05-21 15:59 - 2014-05-21 15:59 - 00386864 _____ (Softonic ) C:\Users\DOMOWY\Downloads\SoftonicDownloader_dla_riot.exe 2014-05-21 15:52 - 2013-05-29 20:15 - 00000000 ____D () C:\Program Files (x86)\osu! 2014-05-20 18:11 - 2014-05-20 18:11 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-05-20 18:10 - 2014-05-20 18:10 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-20 18:10 - 2014-05-20 18:10 - 00000000 ____D () C:\Program Files\Realtek 2014-05-20 18:09 - 2013-01-27 03:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-20 18:09 - 2013-01-27 03:06 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-05-20 18:08 - 2013-08-11 21:34 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-05-20 18:08 - 2013-01-27 02:47 - 00001455 _____ () C:\Users\DOMOWY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-05-20 18:08 - 2013-01-27 02:47 - 00001421 _____ () C:\Users\DOMOWY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-05-20 18:07 - 2014-05-20 18:07 - 229604706 _____ (Realtek Semiconductor Corp.) C:\Users\DOMOWY\Downloads\Win7_Win8_Win81_R274.exe 2014-05-20 18:06 - 2014-05-20 18:06 - 00003270 _____ () C:\Windows\System32\Tasks\Opera D7 2014-05-20 18:06 - 2014-05-20 18:06 - 00003270 _____ () C:\Windows\System32\Tasks\Opera D6 2014-05-20 18:03 - 2014-05-20 18:02 - 00707056 _____ () C:\Users\DOMOWY\Downloads\Realtek-High-Definition-Audio-Codecs(21164).exe 2014-05-18 21:45 - 2014-05-18 21:45 - 00016571 _____ () C:\Users\DOMOWY\Desktop\Czasowniki nieregularne.xlsx 2014-05-18 19:36 - 2014-05-18 19:36 - 00013965 _____ () C:\Users\DOMOWY\Downloads\czasy.xlsx 2014-05-18 13:28 - 2014-05-17 15:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla ActiveX Control v1.5 2014-05-18 12:06 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-17 16:09 - 2014-05-17 15:32 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\AgerWebEdytor 2014-05-17 15:51 - 2014-05-17 15:32 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\MozillaControl 2014-05-17 15:32 - 2013-01-27 02:47 - 00000000 ____D () C:\Users\DOMOWY\AppData\Local\VirtualStore 2014-05-17 15:30 - 2014-05-17 15:30 - 06130708 _____ (StatJacek ) C:\Users\DOMOWY\Downloads\setup.exe 2014-05-17 15:30 - 2014-05-17 15:30 - 00001007 _____ () C:\Users\DOMOWY\Desktop\Ager Web Edytor.lnk 2014-05-17 15:30 - 2014-05-17 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ager Web Edytor 2014-05-17 15:30 - 2014-05-17 15:30 - 00000000 ____D () C:\Program Files (x86)\Ager Web Edytor 2014-05-17 14:56 - 2014-05-17 14:56 - 00000000 ____D () C:\ProgramData\YTD Video Downloader 2014-05-17 14:55 - 2014-05-17 14:55 - 11228600 _____ () C:\Users\DOMOWY\Downloads\YTDSetup.exe 2014-05-17 14:55 - 2014-05-17 14:55 - 00001293 _____ () C:\Users\Public\Desktop\YTD Video Downloader.lnk 2014-05-17 14:55 - 2014-05-17 14:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader 2014-05-17 14:55 - 2014-05-17 14:55 - 00000000 ____D () C:\Program Files (x86)\GreenTree Applications 2014-05-17 14:54 - 2014-05-17 14:54 - 00707056 _____ () C:\Users\DOMOWY\Downloads\YouTube-Downloader(27896).exe 2014-05-15 19:27 - 2013-07-23 20:58 - 00000000 ____D () C:\Users\DOMOWY\Desktop\DCIM 2014-05-15 18:21 - 2014-05-15 18:19 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\Adobe 2014-05-15 18:19 - 2014-05-15 18:19 - 00000000 ____D () C:\Users\DOMOWY\AppData\Local\Adobe 2014-05-15 18:19 - 2014-05-15 18:19 - 00000000 ____D () C:\ProgramData\Adobe 2014-05-14 18:18 - 2014-05-14 18:18 - 00045383 _____ () C:\Users\DOMOWY\Documents\Bez_nazwy (2).wma 2014-05-14 18:18 - 2014-05-14 18:18 - 00027423 _____ () C:\Users\DOMOWY\Documents\Bez_nazwy.wma 2014-05-13 17:19 - 2013-03-23 19:24 - 00000000 ____D () C:\Users\DOMOWY\Desktop\Bleach Wiki 2014-05-12 15:20 - 2013-01-27 14:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-10 23:17 - 2014-05-10 23:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-08 18:51 - 2013-08-12 21:24 - 00004034 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2338929927-1395843485-4213390401-1000UA 2014-05-08 18:51 - 2013-08-12 21:24 - 00003638 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2338929927-1395843485-4213390401-1000Core 2014-05-08 18:42 - 2014-05-08 18:41 - 01790120 _____ () C:\Users\DOMOWY\Downloads\Riot-setup.exe 2014-05-08 18:42 - 2013-07-24 19:37 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\OpenCandy 2014-05-08 18:34 - 2014-05-08 18:33 - 03148253 _____ () C:\Users\DOMOWY\Downloads\Background_template(1).psd 2014-05-08 14:12 - 2013-06-08 15:40 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-05-08 14:12 - 2013-06-08 15:40 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-05-07 17:21 - 2014-05-07 17:21 - 00041824 _____ () C:\Users\DOMOWY\Downloads\pencilfied.ttf 2014-05-07 14:33 - 2013-01-29 16:43 - 00000000 ____D () C:\Users\DOMOWY\AppData\Roaming\vlc 2014-05-07 09:26 - 2014-02-09 12:48 - 00000000 ____D () C:\Users\DOMOWY\Downloads\Wymowa 2014-05-06 21:20 - 2014-05-20 18:09 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-06 16:51 - 2014-05-20 18:09 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-05 15:15 - 2014-05-20 18:09 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-03 16:56 - 2014-05-03 11:13 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2014-05-03 16:56 - 2013-01-27 03:08 - 00000000 ____D () C:\ProgramData\Intel 2014-05-03 11:13 - 2014-05-03 11:13 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon 2014-05-03 11:13 - 2014-05-03 11:13 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager 2014-05-03 11:13 - 2013-01-27 03:08 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-03 11:13 - 2013-01-27 03:00 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-03 11:06 - 2014-02-08 21:14 - 00000000 ____D () C:\Program Files (x86)\Avogadro 2014-05-02 15:00 - 2014-05-02 14:40 - 00000000 ____D () C:\Program Files (x86)\kED 2014-05-02 14:41 - 2014-05-02 14:37 - 264592392 _____ () C:\Users\DOMOWY\Downloads\html_cz_2.flv 2014-05-02 14:40 - 2014-05-02 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\kED 2014-05-02 14:39 - 2014-05-02 14:39 - 01450861 _____ ( ) C:\Users\DOMOWY\Downloads\ked2140(dobreprogramy.pl).exe 2014-05-02 14:39 - 2014-05-02 14:39 - 00700824 _____ ( ) C:\Users\DOMOWY\Downloads\kED(11810).exe 2014-05-02 13:51 - 2014-05-02 13:38 - 957805515 _____ () C:\Users\DOMOWY\Downloads\html_cz_1.flv 2014-05-02 13:25 - 2014-05-02 13:25 - 00009855 _____ () C:\Users\DOMOWY\Downloads\Pandora+Hearts+Wiki-20140502112541.xml 2014-05-02 11:19 - 2014-05-20 18:09 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll 2014-04-30 20:46 - 2013-12-29 16:56 - 00000000 ____D () C:\Users\DOMOWY\Downloads\Poki 2014-04-30 20:16 - 2013-01-27 14:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-30 20:16 - 2013-01-27 14:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-30 20:12 - 2014-04-30 20:12 - 00000746 _____ () C:\Users\DOMOWY\Desktop\Anki.lnk 2014-04-30 20:12 - 2014-04-30 16:10 - 00000000 ____D () C:\Program Files (x86)\Anki 2014-04-30 20:12 - 2014-01-30 21:29 - 00000758 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anki.lnk 2014-04-30 19:59 - 2014-04-30 19:59 - 01310621 _____ () C:\Users\DOMOWY\Downloads\adwcleaner.exe 2014-04-30 19:58 - 2014-04-30 19:58 - 00386864 _____ (Softonic ) C:\Users\DOMOWY\Downloads\SoftonicDownloader_dla_anki.exe 2014-04-30 16:09 - 2014-04-30 16:09 - 25863375 _____ () C:\Users\DOMOWY\Downloads\anki-2.0.26.exe 2014-04-30 11:34 - 2014-05-20 18:09 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-04-28 15:48 - 2014-05-20 18:09 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2014-04-27 21:36 - 2013-10-05 15:14 - 00000000 ____D () C:\Users\DOMOWY\Desktop\Szkoła 2014-04-27 10:33 - 2014-04-27 10:33 - 00000834 _____ () C:\Users\DOMOWY\Downloads\google(2).csv 2014-04-27 10:30 - 2014-04-27 10:30 - 00000425 _____ () C:\Users\DOMOWY\Downloads\google(1).csv 2014-04-27 10:25 - 2014-04-27 10:25 - 00016598 _____ () C:\Users\DOMOWY\Downloads\google.csv 2014-04-25 13:51 - 2014-05-20 18:09 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-04-25 13:23 - 2014-05-20 18:09 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll Files to move or delete: ==================== C:\ProgramData\sysqcl1129139270.dat Some content of TEMP: ==================== C:\Users\DOMOWY\AppData\Local\Temp\appshat-distribution.exe C:\Users\DOMOWY\AppData\Local\Temp\bdfilters.dll C:\Users\DOMOWY\AppData\Local\Temp\DeltaTB.exe C:\Users\DOMOWY\AppData\Local\Temp\down.5028.OptimizerProInstaller.exe C:\Users\DOMOWY\AppData\Local\Temp\GLF3A31.tmp.dll C:\Users\DOMOWY\AppData\Local\Temp\GLF83DF.tmp.dll C:\Users\DOMOWY\AppData\Local\Temp\ICReinstall_audacity-win-2.0.2_Downloader.exe C:\Users\DOMOWY\AppData\Local\Temp\javagiac0.12260797089358355.dll C:\Users\DOMOWY\AppData\Local\Temp\javagiac0.13878404505308772.dll C:\Users\DOMOWY\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\DOMOWY\AppData\Local\Temp\nsu4EDE.exe C:\Users\DOMOWY\AppData\Local\Temp\oi_{C8836F0A-EFF5-4C04-8635-7891FBB4D197}.exe C:\Users\DOMOWY\AppData\Local\Temp\Quarantine.exe C:\Users\DOMOWY\AppData\Local\Temp\SHSetup.exe C:\Users\DOMOWY\AppData\Local\Temp\SkypeSetup.exe C:\Users\DOMOWY\AppData\Local\Temp\Stp53B1_TMP.EXE C:\Users\DOMOWY\AppData\Local\Temp\TsuDEED3B5E.dll C:\Users\DOMOWY\AppData\Local\Temp\UNINSTALL.EXE ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-21 21:04 ==================== End Of Log ============================