Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014 01 Ran by Kasia (administrator) on KASI on 06-07-2014 20:42:35 Running from C:\Users\Kasia\Desktop Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Polski (Polska) Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Agere Systems) C:\Windows\System32\agrsmsvc.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe (Toshiba Europe GmbH) C:\Program Files\Toshiba TEMPRO\TempoSVC.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA Corporation) C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe (Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Karol Winnicki) E:\Instalki\BESTplayer_www.INSTALKI.pl.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe (Microsoft Corporation) C:\Windows\System32\conime.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6037504 2008-04-08] (Realtek Semiconductor) HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-24] (AVAST Software) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-3001598987-1533124634-673735140-1000\...\MountPoints2: {6d7d9374-a246-11e2-b17e-00037a99fba1} - G:\LaunchU3.exe -a HKU\S-1-5-21-3001598987-1533124634-673735140-1000\...\MountPoints2: {a130a759-58cd-11e2-9ef3-001e3384f08f} - G:\LaunchU3.exe -a Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {7CC7ED6F-8E41-4AE4-A070-4986FF42892E} URL = http://www.google.com/search?source=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEA; BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\kzb8nvxa.default FF Homepage: hxxp://www.google.pl/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin: @java.com/DTPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\browser\plugins\npVividasPlayer.dll ( ) FF Extension: Vividas player plugin - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\kzb8nvxa.default\Extensions\player@vividas.com [2012-11-04] FF Extension: Save now - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\kzb8nvxa.default\Extensions\5088d53d0fca0@5088d53d0fcda.com.xpi [2012-10-25] FF Extension: AutoPager - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\kzb8nvxa.default\Extensions\autopager@mozilla.org.xpi [2012-10-19] FF Extension: Adblock Plus - C:\Users\Kasia\AppData\Roaming\Mozilla\Firefox\Profiles\kzb8nvxa.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-10-19] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-06-18] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-10-20] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-12-25] Chrome: ======= CHR HomePage: hxxp://www.interia.pl/ CHR StartupUrls: "hxxp://www.interia.pl/" CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll No File CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U37) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll No File CHR Plugin: (Java Deployment Toolkit 6.0.370.6) - C:\Windows\system32\npdeployJava1.dll No File CHR Extension: (Google Wallet) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30] CHR Extension: (Cookie Monster Sesame Street) - C:\Users\Kasia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pooggmllopdcmfkooghmpmjjadoilmla [2014-03-08] ========================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-04] (AVAST Software) R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2008-04-17] (TOSHIBA CORPORATION) [File not signed] S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed] S3 jswpsapi; C:\Program Files\Jumpstart\jswpsapi.exe [937984 2007-10-30] (Atheros Communications, Inc.) [File not signed] R2 TempoMonitoringService; C:\Program Files\Toshiba TEMPRO\TempoSVC.exe [99720 2008-04-24] (Toshiba Europe GmbH) R2 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-03] (TOSHIBA Corporation) [File not signed] R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed] ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-05-04] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-05-04] (AVAST Software) R1 AswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-05-16] (AVAST Software) R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-05-04] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [777488 2014-05-16] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411680 2014-05-16] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-05-04] (AVAST Software) R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-05-04] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-10-19] (DT Soft Ltd) R3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [141408 2008-02-27] (Realtek Semiconductor Corp.) S3 igfx; system32\DRIVERS\igdkmd32.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-06 20:42 - 2014-07-06 20:42 - 00012776 _____ () C:\Users\Kasia\Desktop\FRST.txt 2014-07-06 20:41 - 2014-07-06 20:42 - 00000000 ____D () C:\FRST 2014-07-06 20:39 - 2014-07-06 20:39 - 00055554 _____ () C:\Users\Kasia\Desktop\Extras.Txt 2014-07-06 20:37 - 2014-07-06 20:37 - 00105576 _____ () C:\Users\Kasia\Desktop\OTL.Txt 2014-07-06 20:24 - 2014-07-06 20:24 - 00380416 _____ () C:\Users\Kasia\Desktop\bectqm8i.exe 2014-07-06 20:23 - 2014-07-06 20:23 - 01074688 _____ (Farbar) C:\Users\Kasia\Desktop\FRST.exe 2014-07-06 20:23 - 2014-07-06 20:23 - 00602112 _____ (OldTimer Tools) C:\Users\Kasia\Desktop\OTL.exe 2014-06-22 09:23 - 2014-06-22 09:23 - 00000000 ____D () C:\Users\Kasia\Desktop\CV 2014-06-22 09:22 - 2014-06-30 18:47 - 00000000 ____D () C:\Users\Kasia\Desktop\Zdjęcia 2014-06-22 08:36 - 2014-06-22 08:36 - 00000000 ____D () C:\ProgramData\WindowsSearch 2014-06-21 17:12 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-06-21 09:53 - 2014-06-21 09:52 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-06-21 09:53 - 2014-06-21 09:52 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-06-21 09:53 - 2014-06-21 09:52 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-06-21 09:53 - 2014-06-21 09:52 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-06-18 20:42 - 2014-06-18 20:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-11 17:11 - 2014-05-28 18:48 - 12356608 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-11 17:11 - 2014-05-28 18:39 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-11 17:11 - 2014-05-28 18:38 - 09711104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-11 17:11 - 2014-05-28 18:33 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-11 17:11 - 2014-05-28 18:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-11 17:11 - 2014-05-28 18:32 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-11 17:11 - 2014-05-28 18:31 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-06-11 17:11 - 2014-05-28 18:31 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-11 17:11 - 2014-05-28 18:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-11 17:11 - 2014-05-28 18:30 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-06-11 17:11 - 2014-05-28 18:29 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-11 17:11 - 2014-05-28 18:29 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-11 17:11 - 2014-05-28 18:29 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-11 17:11 - 2014-05-28 18:29 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-06-11 17:11 - 2014-05-28 18:29 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-06-11 17:11 - 2014-05-28 18:28 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-11 17:11 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-11 17:11 - 2014-04-05 04:42 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-11 17:11 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-11 17:11 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll ==================== One Month Modified Files and Folders ======= 2014-07-06 20:42 - 2014-07-06 20:42 - 00012776 _____ () C:\Users\Kasia\Desktop\FRST.txt 2014-07-06 20:42 - 2014-07-06 20:41 - 00000000 ____D () C:\FRST 2014-07-06 20:42 - 2012-10-14 21:56 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-06 20:39 - 2014-07-06 20:39 - 00055554 _____ () C:\Users\Kasia\Desktop\Extras.Txt 2014-07-06 20:37 - 2014-07-06 20:37 - 00105576 _____ () C:\Users\Kasia\Desktop\OTL.Txt 2014-07-06 20:29 - 2012-10-14 21:56 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-06 20:24 - 2014-07-06 20:24 - 00380416 _____ () C:\Users\Kasia\Desktop\bectqm8i.exe 2014-07-06 20:24 - 2012-10-14 20:05 - 01563564 _____ () C:\Windows\WindowsUpdate.log 2014-07-06 20:23 - 2014-07-06 20:23 - 01074688 _____ (Farbar) C:\Users\Kasia\Desktop\FRST.exe 2014-07-06 20:23 - 2014-07-06 20:23 - 00602112 _____ (OldTimer Tools) C:\Users\Kasia\Desktop\OTL.exe 2014-07-06 20:23 - 2012-10-14 20:56 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-06 20:22 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-06 20:22 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-06 20:16 - 2012-10-21 08:29 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\uTorrent 2014-07-05 22:16 - 2012-11-26 06:30 - 00000680 _____ () C:\Users\Kasia\AppData\Local\d3d9caps.dat 2014-06-30 18:47 - 2014-06-22 09:22 - 00000000 ____D () C:\Users\Kasia\Desktop\Zdjęcia 2014-06-26 21:30 - 2008-01-21 08:24 - 01616086 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-26 21:30 - 2008-01-21 08:24 - 00714916 _____ () C:\Windows\system32\perfh015.dat 2014-06-26 21:30 - 2008-01-21 08:24 - 00151756 _____ () C:\Windows\system32\perfc015.dat 2014-06-25 14:11 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-22 22:54 - 2013-04-30 21:17 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR 2014-06-22 22:53 - 2012-10-14 20:56 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-06-22 22:53 - 2012-10-14 20:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-06-22 09:23 - 2014-06-22 09:23 - 00000000 ____D () C:\Users\Kasia\Desktop\CV 2014-06-22 08:36 - 2014-06-22 08:36 - 00000000 ____D () C:\ProgramData\WindowsSearch 2014-06-22 08:32 - 2012-10-14 20:26 - 00114968 _____ () C:\Users\Kasia\AppData\Local\GDIPFONTCACHEV1.DAT 2014-06-22 07:53 - 2006-11-02 14:47 - 00404792 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-06-22 07:52 - 2008-01-21 04:47 - 00184578 _____ () C:\Windows\PFRO.log 2014-06-22 07:51 - 2006-11-02 15:01 - 00032626 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-06-21 17:14 - 2012-10-19 20:21 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-21 09:53 - 2008-07-04 11:35 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-06-21 09:52 - 2014-06-21 09:53 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-06-21 09:52 - 2014-06-21 09:53 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-06-21 09:52 - 2014-06-21 09:53 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-06-21 09:52 - 2014-06-21 09:53 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2014-06-21 09:52 - 2008-07-04 11:35 - 00000000 ____D () C:\Program Files\Java 2014-06-18 20:42 - 2014-06-18 20:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-12 03:11 - 2008-07-04 12:26 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-06-12 03:08 - 2013-08-15 03:13 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-12 03:05 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-06-09 23:01 - 2013-08-19 05:58 - 00000000 ____D () C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-06-09 23:01 - 2013-08-19 05:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-06-25 14:18 ==================== End Of Log ============================