Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02 Ran by Ania (administrator) on ANIA-PC on 01-07-2014 21:09:05 Running from C:\Users\Ania\Desktop Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe () C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe (TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynToshiba.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (TOSHIBA) C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1316136 2008-06-20] (Synaptics, Inc.) HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [55416 2006-12-07] (TOSHIBA Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2013-10-24] (Realtek Semiconductor) HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13605408 2009-03-06] (NVIDIA Corporation) HKU\S-1-5-21-270748007-779591789-2218584668-1000\...\Run: [TOSCDSPD] => C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe [413696 2006-11-13] (TOSHIBA) ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\ProgramData\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = http://de.search.yahoo.com/search?p={searchTerms}&fr=mkg028 BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer 5.02\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) BHO: IEPluginBHO Class - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Ania\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.) Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.179.1.62 62.179.1.63 FireFox: ======== FF ProfilePath: C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\8ybmlq4q.default-1403958785376 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF user.js: detected! => C:\Users\Ania\AppData\Roaming\Mozilla\Firefox\Profiles\8ybmlq4q.default-1403958785376\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.) FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-06-18] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2014-06-18] Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR StartupUrls: "hxxp://www.google.pl/" CHR Extension: (Skype Click to Call) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-24] CHR Extension: (Google Wallet) - C:\Users\Ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-01-17] ========================== Services (Whitelisted) ================= R2 ALDITALKVerbindungsassistent_Service; C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358528 2012-11-19] () R2 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2006-11-14] (TOSHIBA CORPORATION) [File not signed] R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2014-03-11] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [279776 2014-03-11] (Microsoft Corporation) R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.) R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [114688 2006-05-25] (TOSHIBA Corporation) [File not signed] S2 TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [118784 2007-02-02] (TOSHIBA CORPORATION) [File not signed] R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed] ==================== Drivers (Whitelisted) ==================== R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [239168 2011-12-15] (DT Soft Ltd) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231960 2014-01-25] (Microsoft Corporation) R3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [17960 2009-04-10] (Chicony Electronics Co., Ltd.) U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\Users\Ania\AppData\Local\Temp\catchme.sys [X] S1 MpKsl8185abc8; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9A9E4675-0D63-448D-9E74-A338EB3460D9}\MpKsl8185abc8.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-01 21:00 - 2014-07-01 21:00 - 01073664 _____ (Farbar) C:\Users\Ania\Desktop\FRST.exe 2014-07-01 20:56 - 2014-07-01 20:56 - 00000611 _____ () C:\Users\Ania\Desktop\fixlist.lnk 2014-06-30 22:38 - 2014-06-30 22:38 - 00047295 _____ () C:\Users\Ania\Desktop\Shortcut.txt 2014-06-30 22:36 - 2014-06-30 22:38 - 00030965 _____ () C:\Users\Ania\Desktop\Addition.txt 2014-06-30 22:35 - 2014-07-01 21:10 - 00011995 _____ () C:\Users\Ania\Desktop\FRST.txt 2014-06-30 22:26 - 2014-07-01 21:09 - 00000000 ____D () C:\FRST 2014-06-30 20:53 - 2014-06-30 20:53 - 00006128 _____ () C:\Users\Ania\Desktop\pełny skan.txt 2014-06-30 17:58 - 2014-06-30 17:58 - 00000493 _____ () C:\Users\Ania\Desktop\szybki skan.txt 2014-06-30 17:03 - 2014-06-30 17:13 - 00065050 _____ () C:\Users\Ania\Desktop\Extras.Txt 2014-06-30 17:02 - 2014-06-30 17:13 - 00079872 _____ () C:\Users\Ania\Desktop\OTL.Txt 2014-06-29 19:17 - 2014-06-29 19:13 - 00380416 _____ () C:\Users\Ania\Desktop\vte74zzp.exe 2014-06-29 19:17 - 2014-06-29 19:13 - 00012283 _____ () C:\Users\Ania\Desktop\attachment-27f6e0-1.html 2014-06-29 19:17 - 2014-06-29 19:13 - 00005573 _____ () C:\Users\Ania\Desktop\attachment-27f6e0-0.txt 2014-06-29 19:16 - 2014-06-29 19:13 - 00602112 _____ (OldTimer Tools) C:\Users\Ania\Desktop\OTL.exe 2014-06-28 14:11 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-06-28 13:45 - 2014-06-28 13:45 - 00000000 __SHD () C:\Users\Ania\AppData\Local\EmieUserList 2014-06-28 13:45 - 2014-06-28 13:45 - 00000000 __SHD () C:\Users\Ania\AppData\Local\EmieSiteList 2014-06-27 19:11 - 2014-07-01 20:43 - 00001918 _____ () C:\Windows\PFRO.log 2014-06-27 18:38 - 2014-06-27 18:38 - 00339456 _____ () C:\Users\Ania\Downloads\Niebieski ptak.pdf__3038_i960027877_il4487634.exe 2014-06-18 10:55 - 2014-06-18 10:56 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-16 22:22 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-16 22:22 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-16 22:22 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-06-16 22:22 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-16 22:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-16 22:22 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-06-16 22:22 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-16 22:22 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-16 22:22 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-16 22:22 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-16 22:22 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-16 22:22 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-06-16 22:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-06-16 22:22 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-16 22:22 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-16 22:22 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-16 22:22 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-16 22:22 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-16 22:22 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-16 22:22 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-16 22:22 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-16 22:22 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-16 22:22 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-06-16 22:22 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-16 22:22 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-16 22:22 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-16 22:22 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-16 22:22 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-06-16 22:21 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-16 22:21 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-16 22:21 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-16 22:21 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-06-16 22:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-16 22:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-16 22:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-06-16 22:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-06-16 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-16 21:49 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-06-16 21:49 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\system32\installd.exe 2014-06-13 14:16 - 2014-07-01 21:03 - 00322591 _____ () C:\Windows\setupact.log 2014-06-13 14:16 - 2014-06-13 14:16 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-13 13:50 - 2014-06-13 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz 2014-06-13 13:50 - 2014-06-13 13:50 - 00000000 ____D () C:\Program Files\Odkurzacz 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\ProgramData\Auslogics 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\Program Files\Auslogics 2014-06-11 16:11 - 2014-06-11 16:11 - 02118241 _____ () C:\Users\Ania\Desktop\KWIATKI_prezentacja.pptx 2014-06-11 16:09 - 2014-06-11 16:09 - 02118245 _____ () C:\Users\Ania\Desktop\KWIATKI_pokaz.ppsx 2014-06-11 15:54 - 2014-06-11 16:15 - 00007680 _____ () C:\Users\Ania\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-06-10 17:31 - 2014-06-10 17:32 - 02109808 _____ () C:\Users\Ania\Documents\KWIATKI.pptx ==================== One Month Modified Files and Folders ======= 2014-07-01 21:10 - 2014-06-30 22:35 - 00011995 _____ () C:\Users\Ania\Desktop\FRST.txt 2014-07-01 21:09 - 2014-06-30 22:26 - 00000000 ____D () C:\FRST 2014-07-01 21:06 - 2011-12-15 18:53 - 01138855 _____ () C:\Windows\WindowsUpdate.log 2014-07-01 21:03 - 2014-06-13 14:16 - 00322591 _____ () C:\Windows\setupact.log 2014-07-01 21:03 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-01 21:00 - 2014-07-01 21:00 - 01073664 _____ (Farbar) C:\Users\Ania\Desktop\FRST.exe 2014-07-01 20:56 - 2014-07-01 20:56 - 00000611 _____ () C:\Users\Ania\Desktop\fixlist.lnk 2014-07-01 20:50 - 2011-12-15 18:30 - 00010048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-01 20:50 - 2011-12-15 18:30 - 00010048 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-01 20:43 - 2014-06-27 19:11 - 00001918 _____ () C:\Windows\PFRO.log 2014-07-01 09:34 - 2006-11-02 12:23 - 00000321 _____ () C:\Windows\win.ini 2014-06-30 23:03 - 2011-12-15 23:08 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\Skype 2014-06-30 22:38 - 2014-06-30 22:38 - 00047295 _____ () C:\Users\Ania\Desktop\Shortcut.txt 2014-06-30 22:38 - 2014-06-30 22:36 - 00030965 _____ () C:\Users\Ania\Desktop\Addition.txt 2014-06-30 20:53 - 2014-06-30 20:53 - 00006128 _____ () C:\Users\Ania\Desktop\pełny skan.txt 2014-06-30 17:58 - 2014-06-30 17:58 - 00000493 _____ () C:\Users\Ania\Desktop\szybki skan.txt 2014-06-30 17:13 - 2014-06-30 17:03 - 00065050 _____ () C:\Users\Ania\Desktop\Extras.Txt 2014-06-30 17:13 - 2014-06-30 17:02 - 00079872 _____ () C:\Users\Ania\Desktop\OTL.Txt 2014-06-29 19:13 - 2014-06-29 19:17 - 00380416 _____ () C:\Users\Ania\Desktop\vte74zzp.exe 2014-06-29 19:13 - 2014-06-29 19:17 - 00012283 _____ () C:\Users\Ania\Desktop\attachment-27f6e0-1.html 2014-06-29 19:13 - 2014-06-29 19:17 - 00005573 _____ () C:\Users\Ania\Desktop\attachment-27f6e0-0.txt 2014-06-29 19:13 - 2014-06-29 19:16 - 00602112 _____ (OldTimer Tools) C:\Users\Ania\Desktop\OTL.exe 2014-06-28 13:45 - 2014-06-28 13:45 - 00000000 __SHD () C:\Users\Ania\AppData\Local\EmieUserList 2014-06-28 13:45 - 2014-06-28 13:45 - 00000000 __SHD () C:\Users\Ania\AppData\Local\EmieSiteList 2014-06-28 13:42 - 2012-08-17 14:49 - 00001105 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-06-28 13:42 - 2012-01-26 00:16 - 00001792 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2014-06-28 13:42 - 2011-12-15 18:59 - 00001426 _____ () C:\Users\Ania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-06-28 13:22 - 2011-12-15 20:57 - 00000000 ____D () C:\Users\Ania\Documents\webcam-20070809133519 2014-06-27 21:40 - 2011-12-15 18:32 - 00000000 ____D () C:\Users\Ania 2014-06-27 21:33 - 2011-12-15 19:06 - 01670590 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-27 21:33 - 2009-07-14 10:07 - 00740688 _____ () C:\Windows\system32\perfh015.dat 2014-06-27 21:33 - 2009-07-14 10:07 - 00156230 _____ () C:\Windows\system32\perfc015.dat 2014-06-27 18:38 - 2014-06-27 18:38 - 00339456 _____ () C:\Users\Ania\Downloads\Niebieski ptak.pdf__3038_i960027877_il4487634.exe 2014-06-20 11:28 - 2012-08-17 14:49 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-18 10:56 - 2014-06-18 10:55 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-17 13:04 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache 2014-06-16 23:22 - 2014-05-01 00:45 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-06-16 22:09 - 2011-12-15 19:28 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-16 21:51 - 2013-08-15 01:56 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-16 21:42 - 2011-12-18 18:21 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-16 06:50 - 2013-02-27 22:51 - 00000000 ____D () C:\Windows\pss 2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\system32\installd.exe 2014-06-13 14:16 - 2014-06-13 14:16 - 00000000 _____ () C:\Windows\setuperr.log 2014-06-13 14:16 - 2012-11-22 23:47 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-06-13 14:16 - 2012-11-22 23:47 - 00001028 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-06-13 14:14 - 2012-02-23 18:41 - 00000000 ____D () C:\ProgramData\WebEx 2014-06-13 14:13 - 2012-03-22 20:18 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\Winamp 2014-06-13 14:13 - 2011-12-16 18:42 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\uTorrent 2014-06-13 14:13 - 2011-12-15 19:20 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\DAEMON Tools Lite 2014-06-13 14:11 - 2011-12-15 18:25 - 00000000 ____D () C:\Windows\Panther 2014-06-13 14:09 - 2012-11-29 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Alternative 2014-06-13 14:09 - 2011-12-15 23:07 - 00000000 ____D () C:\ProgramData\Skype 2014-06-13 13:50 - 2014-06-13 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz 2014-06-13 13:50 - 2014-06-13 13:50 - 00000000 ____D () C:\Program Files\Odkurzacz 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\ProgramData\Auslogics 2014-06-13 13:49 - 2014-06-13 13:49 - 00000000 ____D () C:\Program Files\Auslogics 2014-06-13 13:48 - 2013-02-27 22:50 - 00000000 ____D () C:\Program Files\CCleaner 2014-06-13 13:46 - 2013-12-09 22:14 - 00000000 ____D () C:\Users\Ania\AppData\Roaming\GG 2014-06-11 16:18 - 2011-12-15 19:29 - 00000000 ____D () C:\Users\Ania\AppData\Local\Microsoft Help 2014-06-11 16:15 - 2014-06-11 15:54 - 00007680 _____ () C:\Users\Ania\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-06-11 16:11 - 2014-06-11 16:11 - 02118241 _____ () C:\Users\Ania\Desktop\KWIATKI_prezentacja.pptx 2014-06-11 16:09 - 2014-06-11 16:09 - 02118245 _____ () C:\Users\Ania\Desktop\KWIATKI_pokaz.ppsx 2014-06-10 17:32 - 2014-06-10 17:31 - 02109808 _____ () C:\Users\Ania\Documents\KWIATKI.pptx 2014-06-08 10:48 - 2014-06-16 22:21 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-06-08 10:43 - 2014-06-16 22:21 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-02 10:45 - 2009-07-14 06:53 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-28 21:03 ==================== End Of Log ============================