Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014
Ran by User (administrator) on SAMSUNG on 28-07-2014 15:47:55
Running from C:\Users\User\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(VoipCheapCom) C:\Program Files (x86)\VoipCheapCom.com\VoipCheapCom\VoipCheapCom.exe
(BitTorrent Inc.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
() C:\Program Files (x86)\Common Files\YDP\UserAccessManager\useraccess.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\Hostless Modem\Router Wi-Fi Movil\CheckNDISPort_df.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
() C:\Program Files (x86)\Opera\23.0.1522.60\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
() C:\Program Files (x86)\webget\bin\utilwebget.exe
() C:\Program Files (x86)\webget\bin\webget.PurBrowse64.exe
() C:\Program Files (x86)\webget\updatewebget.exe
() C:\Program Files (x86)\webget\bin\webget.BrowserAdapter.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
() C:\Users\User\Downloads\rf0dri1h.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(OldTimer Tools) C:\Users\User\Downloads\OTL.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11369576 2010-08-10] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CheckNDISPortf0ac62] => C:\Program Files (x86)\Hostless Modem\Router Wi-Fi Movil\CheckNDISPort_df.exe [417176 2012-12-24] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-04] (Google Inc.)
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\Run: [Facebook Update] => C:\Users\User\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-02-02] (Facebook Inc.)
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\Run: [VoipCheapCom] => C:\Program Files (x86)\VoipCheapCom.com\VoipCheapCom\VoipCheapCom.exe [19936072 2014-02-11] (VoipCheapCom)
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\Run: [uTorrent] => C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-02] (BitTorrent Inc.)
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\MountPoints2: E - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\MountPoints2: {75f43ad0-851c-11e3-a41d-e839dfa6957a} - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\MountPoints2: {7e72c4d1-6bc9-11e3-aa65-e839dfa6957a} - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1000\...\MountPoints2: {7e72c4ed-6bc9-11e3-aa65-e839dfa6957a} - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-688016795-3676392775-1967071769-1001\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-688016795-3676392775-1967071769-1001\...\MountPoints2: {7e72c4d1-6bc9-11e3-aa65-e839dfa6957a} - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1001\...\MountPoints2: {7e72c4ed-6bc9-11e3-aa65-e839dfa6957a} - E:\AutoRun.exe
HKU\S-1-5-21-688016795-3676392775-1967071769-1001\...\MountPoints2: {db315829-6a21-11e3-8a14-806e6f6e6963} - D:\AutoRun.exe
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{340BE65B-7621-4B0B-B0F9-DBCCD8D70887}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rts.dsrlte.com
SearchScopes: HKCU - DefaultScope {44C3F9CA-F212-4FAD-B677-DA22E65CAE4D} URL = http://rts.dsrlte.com/?q={searchTerms}&r=38
SearchScopes: HKCU - {44C3F9CA-F212-4FAD-B677-DA22E65CAE4D} URL = http://rts.dsrlte.com/?q={searchTerms}&r=38
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} -  No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62
Tcpip\..\Interfaces\{2AAD58BF-C239-4808-B4EA-3FF14F15B953}: [NameServer]89.108.195.21 89.108.202.21
Tcpip\..\Interfaces\{94817EB6-1E10-4766-BBE9-3A2CDDAEB93A}: [NameServer]89.108.202.20 89.108.195.20

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default
FF NewTab: user_pref("browser.newtab.url", "");
FF SearchEngineOrder.1: Ask.com
FF Homepage: www.google.pl
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\User\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\searchplugins\keepmysearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: Ask New Tabs - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\Extensions\{A418B729-A4C7-8F7E-53DB-5FD4D4C9320C} [2014-05-09]
FF Extension: webget - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\Extensions\{9edd0ea8-2819-47c2-8320-b007d5996f8a}.xpi [2014-05-18]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\00yu86b5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-12]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR HomePage: hxxp://www.google.pl/
CHR StartupUrls: "hxxp://rts.dsrlte.com"
CHR NewTab: "chrome-extension://mlmkmibflpaljkoooahfipdfhgpaoddh/spent.html"
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-04]
CHR Extension: (Dysk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-04]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-04]
CHR Extension: (Szukaj w Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-04]
CHR Extension: (Allin1Convert) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlmkmibflpaljkoooahfipdfhgpaoddh [2014-01-10]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-04]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-04]

==================== Services (Whitelisted) =================

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2013-12-23] ()
R2 Update webget; C:\Program Files (x86)\webget\updatewebget.exe [321816 2014-07-27] ()
R2 UserAccess; C:\Program Files (x86)\Common Files\YDP\UserAccessManager\useraccess.exe [53248 2001-12-21] () [File not signed]
R2 Util webget; C:\Program Files (x86)\webget\bin\utilwebget.exe [321816 2014-07-27] ()
S2 SafetyNutManager; C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\SafetyNutManager.exe [X]

==================== Drivers (Whitelisted) ====================

R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\x64\configmgrc1.cfg [36224 2014-04-27] (SafetyNut Inc)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-12-23] (Huawei Technologies Co., Ltd.)
R1 {55685567-4840-4a91-962b-49a412e9485a}w64; C:\Windows\System32\drivers\{55685567-4840-4a91-962b-49a412e9485a}w64.sys [61112 2014-05-26] (StdLib)
R1 {9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64; C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys [61112 2014-05-16] (StdLib)
S3 yukonw7; system32\DRIVERS\yk62x64.sys [X]
U3 pxrdypoc; \??\C:\Users\User\AppData\Local\Temp\pxrdypoc.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-28 15:47 - 2014-07-28 15:48 - 00017367 _____ () C:\Users\User\Downloads\FRST.txt
2014-07-28 15:47 - 2014-07-28 15:47 - 02090496 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-07-28 15:47 - 2014-07-28 15:47 - 00000000 ____D () C:\FRST
2014-07-28 15:30 - 2014-07-28 15:30 - 00050576 _____ () C:\Users\User\Downloads\Extras.Txt
2014-07-28 15:27 - 2014-07-28 15:27 - 00083696 _____ () C:\Users\User\Downloads\OTL.Txt
2014-07-28 15:21 - 2014-07-28 15:35 - 00025287 _____ () C:\Users\User\Desktop\extreas.txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\shortcut.txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\frst.txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\addition.txt
2014-07-28 15:18 - 2014-07-28 15:34 - 00041847 _____ () C:\Users\User\Desktop\otl.txt
2014-07-28 15:17 - 2014-07-28 15:17 - 00602112 _____ (OldTimer Tools) C:\Users\User\Downloads\OTL.exe
2014-07-28 15:14 - 2014-07-28 15:15 - 00019693 _____ () C:\Users\User\Desktop\dds (2).txt
2014-07-28 15:12 - 2014-07-28 15:12 - 00005174 _____ () C:\Users\User\Desktop\attach.txt
2014-07-28 15:11 - 2014-07-28 15:12 - 00019693 _____ () C:\Users\User\Desktop\DDS.txt
2014-07-28 15:10 - 2014-07-28 15:10 - 00688992 ____R (Swearware) C:\Users\User\Downloads\dds.com
2014-07-28 15:06 - 2014-07-28 15:16 - 00003176 _____ () C:\Users\User\Desktop\GMER.txt
2014-07-28 15:05 - 2014-07-28 15:05 - 00380416 _____ () C:\Users\User\Downloads\rf0dri1h.exe
2014-07-25 22:29 - 2014-07-25 22:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-25 22:29 - 2014-07-25 22:29 - 00000000 ____D () C:\Program Files\Adblock Plus for IE
2014-07-25 22:25 - 2014-07-25 22:25 - 04741136 _____ () C:\Users\User\Downloads\adblockplusie-1.1.exe
2014-07-23 08:25 - 2014-07-23 08:25 - 00003748 _____ () C:\Users\User\Downloads\smime.p7s
2014-07-17 13:29 - 2014-07-17 13:29 - 00775112 _____ (Elex do Brasil Participaçoes Ltda) C:\Users\User\Downloads\yet_another_cleaner_mcr.exe
2014-07-16 21:03 - 2014-07-23 22:44 - 00003868 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405537434
2014-07-16 21:03 - 2014-07-23 22:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-07-16 21:03 - 2014-07-16 21:03 - 00001135 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-07-16 21:03 - 2014-07-16 21:03 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-07-16 21:03 - 2014-07-16 21:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Opera Software
2014-07-16 21:03 - 2014-07-16 21:03 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-07-16 21:01 - 2014-07-16 21:01 - 00869480 _____ (Opera Software) C:\Users\User\Downloads\Opera_NI_stable(1).exe
2014-07-16 21:00 - 2014-07-16 21:00 - 00869480 _____ (Opera Software) C:\Users\User\Downloads\Opera_NI_stable.exe
2014-07-16 20:52 - 2014-07-16 20:52 - 00001146 _____ () C:\Users\User\Desktop\Kontynuuj instalację OTL.lnk
2014-07-16 20:52 - 2014-07-16 20:52 - 00000000 ____D () C:\Users\User\AppData\Local\WorldofTanks
2014-07-16 20:51 - 2014-07-16 20:51 - 00613720 _____ () C:\Users\User\Downloads\OTL_3.2.70.2 (25180).exe
2014-07-14 19:59 - 2014-07-14 20:23 - 591759263 _____ () C:\Users\User\Downloads\Qlb.Al-Asd.By.BLACk.Dove(1).rar
2014-07-14 12:01 - 2014-07-14 13:16 - 591759263 _____ () C:\Users\User\Downloads\Qlb.Al-Asd.By.BLACk.Dove.rar
2014-07-08 23:35 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-08 23:35 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-08 23:35 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-08 23:34 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-08 23:34 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-08 23:34 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-08 23:34 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-08 23:34 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-08 23:34 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-08 23:33 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-08 23:33 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-08 23:33 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-08 23:33 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-08 23:33 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-08 23:33 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-08 23:33 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-08 23:33 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-08 23:33 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-08 23:33 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-08 23:33 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-08 23:33 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-08 23:33 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-08 23:33 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-08 23:33 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-08 23:33 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-08 23:33 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-08 23:33 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-08 23:33 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-08 23:33 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-08 23:33 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-08 23:33 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-08 23:33 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-08 23:33 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-08 23:33 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-08 23:33 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-08 23:33 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-08 23:33 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-08 23:33 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-08 23:33 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-08 23:33 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-08 23:33 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-08 23:33 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-08 23:33 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-08 23:33 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-08 23:33 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-08 23:33 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-08 23:33 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-08 23:33 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-08 23:33 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-08 23:33 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-08 23:33 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-08 23:33 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-08 23:33 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-08 23:33 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-08 23:33 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-08 23:33 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-08 23:33 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-08 23:33 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-08 23:33 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-08 23:33 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-08 23:33 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-08 23:33 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-08 23:33 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-08 23:33 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-08 23:33 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-08 23:32 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-08 23:32 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-08 23:32 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-04 09:12 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\OnlineUpdate
2014-07-04 09:12 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\log
2014-07-02 19:14 - 2014-07-02 19:14 - 01029224 _____ () C:\Windows\Minidump\070214-48251-01.dmp
2014-07-01 14:36 - 2014-07-01 14:36 - 00000000 _____ () C:\Users\User\AppData\Local\{3D3AB678-1BCD-4432-AA33-3EEBF402D08A}
2014-06-28 17:17 - 2014-06-28 17:33 - 00000000 ____D () C:\Users\User\Downloads\Lemale et ha'halal (2012) Spanish Subtitles

==================== One Month Modified Files and Folders =======

2060-08-18 20:02 - 2013-12-27 10:09 - 02023424 ____N (Inprise Corporation) C:\Windows\SysWOW64\Vcl50.bpl
2060-08-18 20:02 - 2013-12-27 10:09 - 01496064 ____N (Inprise Corporation) C:\Windows\SysWOW64\Cc3250mt.dll
2060-08-18 20:02 - 2013-12-27 10:09 - 00248832 ____N (Inprise Corporation) C:\Windows\SysWOW64\Vclx50.bpl
2060-08-18 19:40 - 2013-12-27 10:09 - 00909824 ____N (Inprise Corporation) C:\Windows\SysWOW64\Cp3245mt.dll
2060-08-18 19:40 - 2013-12-27 10:09 - 00024064 ____N (Inprise Corporation) C:\Windows\SysWOW64\Borlndmm.dll
2014-07-28 15:48 - 2014-07-28 15:47 - 00017367 _____ () C:\Users\User\Downloads\FRST.txt
2014-07-28 15:48 - 2013-12-30 22:21 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf059cc5e8a420.job
2014-07-28 15:47 - 2014-07-28 15:47 - 02090496 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-07-28 15:47 - 2014-07-28 15:47 - 00000000 ____D () C:\FRST
2014-07-28 15:47 - 2014-04-25 23:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-07-28 15:39 - 2014-01-04 17:18 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688016795-3676392775-1967071769-1000UA.job
2014-07-28 15:35 - 2014-07-28 15:21 - 00025287 _____ () C:\Users\User\Desktop\extreas.txt
2014-07-28 15:34 - 2014-07-28 15:18 - 00041847 _____ () C:\Users\User\Desktop\otl.txt
2014-07-28 15:34 - 2013-12-21 14:24 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{AA8B0F36-27FF-43A6-A5E7-92515203ACDD}
2014-07-28 15:30 - 2014-07-28 15:30 - 00050576 _____ () C:\Users\User\Downloads\Extras.Txt
2014-07-28 15:30 - 2014-02-02 16:25 - 00000924 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-688016795-3676392775-1967071769-1000UA.job
2014-07-28 15:30 - 2014-02-02 16:25 - 00000902 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-688016795-3676392775-1967071769-1000Core.job
2014-07-28 15:27 - 2014-07-28 15:27 - 00083696 _____ () C:\Users\User\Downloads\OTL.Txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\shortcut.txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\frst.txt
2014-07-28 15:20 - 2014-07-28 15:20 - 00000000 _____ () C:\Users\User\Desktop\addition.txt
2014-07-28 15:17 - 2014-07-28 15:17 - 00602112 _____ (OldTimer Tools) C:\Users\User\Downloads\OTL.exe
2014-07-28 15:16 - 2014-07-28 15:06 - 00003176 _____ () C:\Users\User\Desktop\GMER.txt
2014-07-28 15:15 - 2014-07-28 15:14 - 00019693 _____ () C:\Users\User\Desktop\dds (2).txt
2014-07-28 15:14 - 2013-12-23 19:27 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-28 15:12 - 2014-07-28 15:12 - 00005174 _____ () C:\Users\User\Desktop\attach.txt
2014-07-28 15:12 - 2014-07-28 15:11 - 00019693 _____ () C:\Users\User\Desktop\DDS.txt
2014-07-28 15:10 - 2014-07-28 15:10 - 00688992 ____R (Swearware) C:\Users\User\Downloads\dds.com
2014-07-28 15:06 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-28 15:06 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-28 15:05 - 2014-07-28 15:05 - 00380416 _____ () C:\Users\User\Downloads\rf0dri1h.exe
2014-07-28 14:46 - 2013-12-21 11:28 - 01794636 _____ () C:\Windows\WindowsUpdate.log
2014-07-28 13:17 - 2013-12-25 06:13 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-07-28 05:48 - 2013-12-30 22:21 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf059cc50b636c.job
2014-07-28 00:58 - 2009-07-14 04:34 - 00000519 _____ () C:\Windows\win.ini
2014-07-27 22:39 - 2014-01-04 17:18 - 00001002 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688016795-3676392775-1967071769-1000Core.job
2014-07-26 11:13 - 2013-12-23 09:44 - 00000000 ____D () C:\Users\User\Desktop\cv najnowsze
2014-07-25 22:29 - 2014-07-25 22:29 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-25 22:29 - 2014-07-25 22:29 - 00000000 ____D () C:\Program Files\Adblock Plus for IE
2014-07-25 22:25 - 2014-07-25 22:25 - 04741136 _____ () C:\Users\User\Downloads\adblockplusie-1.1.exe
2014-07-25 03:02 - 2014-02-06 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-25 03:01 - 2014-02-06 19:54 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-25 03:01 - 2014-02-06 19:54 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-23 22:44 - 2014-07-16 21:03 - 00003868 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1405537434
2014-07-23 22:44 - 2014-07-16 21:03 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-07-23 22:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-23 22:38 - 2009-07-14 06:51 - 00061425 _____ () C:\Windows\setupact.log
2014-07-23 08:25 - 2014-07-23 08:25 - 00003748 _____ () C:\Users\User\Downloads\smime.p7s
2014-07-23 08:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-20 20:30 - 2013-12-23 09:44 - 00000000 ____D () C:\Users\User\Desktop\cv obecne
2014-07-17 13:29 - 2014-07-17 13:29 - 00775112 _____ (Elex do Brasil Participaçoes Ltda) C:\Users\User\Downloads\yet_another_cleaner_mcr.exe
2014-07-16 21:03 - 2014-07-16 21:03 - 00001135 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-07-16 21:03 - 2014-07-16 21:03 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-07-16 21:03 - 2014-07-16 21:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\Opera Software
2014-07-16 21:03 - 2014-07-16 21:03 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-07-16 21:01 - 2014-07-16 21:01 - 00869480 _____ (Opera Software) C:\Users\User\Downloads\Opera_NI_stable(1).exe
2014-07-16 21:00 - 2014-07-16 21:00 - 00869480 _____ (Opera Software) C:\Users\User\Downloads\Opera_NI_stable.exe
2014-07-16 20:56 - 2010-11-21 05:47 - 00447694 _____ () C:\Windows\PFRO.log
2014-07-16 20:52 - 2014-07-16 20:52 - 00001146 _____ () C:\Users\User\Desktop\Kontynuuj instalację OTL.lnk
2014-07-16 20:52 - 2014-07-16 20:52 - 00000000 ____D () C:\Users\User\AppData\Local\WorldofTanks
2014-07-16 20:51 - 2014-07-16 20:51 - 00613720 _____ () C:\Users\User\Downloads\OTL_3.2.70.2 (25180).exe
2014-07-16 18:27 - 2014-04-07 11:46 - 00000000 ____D () C:\Users\User\Desktop\piotrek allegro
2014-07-16 17:42 - 2010-11-21 14:53 - 00740076 _____ () C:\Windows\system32\perfh015.dat
2014-07-16 17:42 - 2010-11-21 14:53 - 00155618 _____ () C:\Windows\system32\perfc015.dat
2014-07-16 17:42 - 2009-07-14 07:13 - 01668226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-15 03:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-15 03:21 - 2009-07-14 06:45 - 00291776 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-15 03:19 - 2010-11-21 15:04 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-15 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-15 03:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-14 20:23 - 2014-07-14 19:59 - 591759263 _____ () C:\Users\User\Downloads\Qlb.Al-Asd.By.BLACk.Dove(1).rar
2014-07-14 13:16 - 2014-07-14 12:01 - 591759263 _____ () C:\Users\User\Downloads\Qlb.Al-Asd.By.BLACk.Dove.rar
2014-07-13 20:41 - 2014-05-19 03:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-07-13 20:38 - 2014-06-21 19:22 - 00000000 ____D () C:\Users\User\Downloads\Nymphomaniac Vol.II 2013 Limited.1080p.BluRay 5.1 x264 . NVEE
2014-07-09 00:14 - 2013-12-23 19:27 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 00:14 - 2013-12-23 19:27 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 00:14 - 2013-12-23 19:27 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-04 09:12 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\OnlineUpdate
2014-07-04 09:12 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\log
2014-07-02 19:14 - 2014-07-02 19:14 - 01029224 _____ () C:\Windows\Minidump\070214-48251-01.dmp
2014-07-02 19:14 - 2013-12-27 18:55 - 00000000 ____D () C:\Windows\Minidump
2014-07-02 19:13 - 2013-12-27 18:55 - 442840649 _____ () C:\Windows\MEMORY.DMP
2014-07-01 14:36 - 2014-07-01 14:36 - 00000000 _____ () C:\Users\User\AppData\Local\{3D3AB678-1BCD-4432-AA33-3EEBF402D08A}
2014-06-28 17:33 - 2014-06-28 17:17 - 00000000 ____D () C:\Users\User\Downloads\Lemale et ha'halal (2012) Spanish Subtitles

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\User\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\User\AppData\Local\Temp\dsrlte.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\User\AppData\Local\Temp\ICReinstall_OTL_3.2.70.2 (25180).exe
C:\Users\User\AppData\Local\Temp\InstHelper.exe
C:\Users\User\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\User\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\User\AppData\Local\Temp\SIntf16.dll
C:\Users\User\AppData\Local\Temp\SIntf32.dll
C:\Users\User\AppData\Local\Temp\SIntfNT.dll
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\utt4FBC.tmp.exe
C:\Users\User\AppData\Local\Temp\uttC8FE.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-28 01:59

==================== End Of Log ============================