Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:26-08-2014
Ran by 98 (administrator) on XX-035E39113BC4 on 27-08-2014 12:38:26
Running from G:\
Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\IePluginService\PluginService.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files\WinZipper\winzipersvc.exe
(Cherished Technololgy LIMITED) C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(DAEMON'S HOME) C:\Program Files\D-Tools\daemon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(BitTorrent Inc.) G:\Łukasz\torrent\uTorrent.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService\ibsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-11] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20065936 2012-06-06] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [DAEMON Tools-1033] => C:\Program Files\D-Tools\daemon.exe [81920 2004-08-22] (DAEMON'S HOME)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-06] (AVAST Software)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [ALLUpdate] => C:\Program Files\ALLPlayer\ALLUpdate.exe [2995712 2013-04-14] (ALLPlayer Group Ltd.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2008-01-01] (Google Inc.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [Facebook Update] => C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe [138096 2013-09-27] (Facebook Inc.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [GG] => C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\GG\Application\gghub.exe [4023360 2014-07-18] (GG Network S.A.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21442176 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [uTorrent] => "G:\A
ukasz\torrent\uTorrent.exe"  /MINIMIZED
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Run: [99] => wscript.exe //B "C:\Documents and Settings\98\Dane aplikacji\99.vbs"
HKU\S-1-5-21-790525478-1343024091-725345543-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Documents and Settings\98\Menu Start\Programy\Autostart\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
ShellIconOverlayIdentifiers: GGDriveOverlay1 -> {E68D0A50-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay2 -> {E68D0A51-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay3 -> {E68D0A52-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)
ShellIconOverlayIdentifiers: GGDriveOverlay4 -> {E68D0A53-3C40-4712-B90D-DCFA93FF2534} => C:\Documents and Settings\All Users\Dane aplikacji\GG\ggdrive\ggdrive-overlay.dll (GG Network S.A.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.awesomehp.com/web/?type=ds&ts=1390751574&from=smt&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.awesomehp.com/web/?type=ds&ts=1390751574&from=smt&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.awesomehp.com/web/?type=ds&ts=1390751574&from=smt&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files\Minibar\Minibar.dll (KangoExtensions)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.awesomehp.com/?type=sc&ts=1390751574&from=smt&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086&type=default&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086&type=default&q={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086&type=default&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C6700304F29A9F7&affID=123627&tsp=5001
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086&type=default&q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {90377711-210E-4483-95D6-00C70DE92904} URL = http://search.ividi.org/?q={searchTerms}&src=tbsp&id=7c676fae00000000000000304f29a9f7&affilt=3&r=796
BHO: hosts -> {11111111-1111-1111-1111-110311531182} -> C:\Program Files\hosts\hosts-bho.dll (Alex)
BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: dokotoolbar Helper Object -> {3B9F6E59-04CA-43FF-92DF-F6E66D3A8D82} -> C:\Program Files\Doko-Toolbar\dokotoolbar\1.8.26.9\bh\dokotoolbar.dll (Doko-Toolbar)
BHO: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> G:\Klocu=)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: SelectionLinks -> {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} -> C:\Program Files\OApps\SelectionLinks.dll (SelectionLinks)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: ValueApps -> {93DBF2BB-A2B3-4683-A92E-57E60751F346} -> C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll (Conduit Ltd.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: MinibarBHO -> {AA74D58F-ACD0-450D-A85E-6C04B171C044} -> C:\Program Files\Minibar\Minibar.dll (KangoExtensions)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
BHO: Yontoo -> {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} -> C:\Program Files\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - dokotoolbar Toolbar - {339E1B37-76D3-4A64-A988-E81425DF831C} - C:\Program Files\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarTlbr.dll (Doko-Toolbar)
Toolbar: HKCU - &Adres - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Łącza - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF user.js: detected! => C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\delta.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\dokotoolbar.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\ividi.xml
FF SearchPlugin: C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\searchplugins\mixidj.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\delta-homes.xml
FF Extension: Fast Start - C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\Extensions\faststartff@gmail.com [2014-07-11]
FF Extension: dokotoolbar.com - C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\Extensions\ffxtlbr@dokotoolbar.com [2013-10-16]
FF Extension: Value Apps - C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\Extensions\{94cd2cc3-083f-49ba-a218-4cda4b4829fd} [2014-02-11]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-11]
FF HKLM\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Documents and Settings\98\Dane aplikacji\Mozilla\Firefox\Profiles\qec735si.default\extensions\quick_start@gmail.com
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-08-20]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
CHR RestoreOnStartup: Default -> "hxxp://google.pl/"
CHR NewTab: Default -> "chrome-extension://ifohbjbgfchkkfhphahclmkpgejiplfo/index.html"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\PepperFlash\11.7.700.225\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - G:\ukasz\adobe\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
CHR CustomProfile: C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default
CHR Extension: (Doko Toolbar) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\edcikfknpchdehdlmjpbofgkoaonaijg [2013-10-21]
CHR Extension: (avast! Online Security) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-11]
CHR Extension: (Lightning Newtab) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo [2014-03-02]
CHR Extension: (Value apps) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon [2014-01-26]
CHR Extension: (hosts) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa [2013-09-10]
CHR Extension: (Extended Protection) - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo [2014-03-02]
CHR Extension: (Managera) - C:\DOCUME~1\98\USTAWI~1\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-01-26]
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Documents and Settings\98\Dane aplikacji\BabSolution\CR\BabylonChrome1.crx [2013-03-09]
CHR HKLM\...\Chrome\Extension: [dkipemekkkamhdafmodmiecddjhkmanm] - C:\Program Files\OApps\chrome-sl.crx [2013-08-07]
CHR HKLM\...\Chrome\Extension: [edcikfknpchdehdlmjpbofgkoaonaijg] - C:\Documents and Settings\98\Dane aplikacji\BabSolution\CR\Doko.crx [2013-10-16]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-06]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-06]
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\newtab.crx [2014-03-02]
CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files\Yontoo\YontooLayers.crx [2013-03-07]
CHR HKLM\...\Chrome\Extension: [ogfjmhfnldnajmfaofeiaepghjenbgjo] - C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ep.crx [2014-03-02]
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=sc&from=wpm0226&uid=WDCXWD5003ABYX-18WERA0_WD-WMAYP208377583775&ts=1393765086
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [602112 2010-02-11] (ATI Technologies Inc.) [File not signed]
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-06] (AVAST Software)
R2 IBUpdaterService; C:\Documents and Settings\All Users\Dane aplikacji\IBUpdaterService\ibsvc.exe [727360 2013-06-08] ()
R2 IePluginService; C:\Documents and Settings\All Users\Dane aplikacji\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182184 2013-07-01] (Oracle Corporation)
S2 sfrem02; C:\WINDOWS\system32\sfrem02.exe [358008 2006-05-11] (Protection Technology (StarForce))
R2 winzipersvc; C:\Program Files\WinZipper\winzipersvc.exe [425104 2014-03-02] (Taiwan Shui Mu Chih Ching Technology Limited.)
R2 Wpm; C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe [501904 2014-02-26] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACEDRV07; C:\WINDOWS\system32\drivers\ACEDRV07.sys [101376 2013-08-30] (Protect Software GmbH) [File not signed]
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-08-06] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-08-06] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-08-06] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-08-06] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-08-06] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-08-06] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-08-06] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-08-06] ()
R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [3565056 2010-02-11] (ATI Technologies Inc.) [File not signed]
R0 d347bus; C:\WINDOWS\System32\DRIVERS\d347bus.sys [155136 2004-08-22] ( ) [File not signed]
R0 d347prt; C:\WINDOWS\System32\Drivers\d347prt.sys [5248 2004-08-22] ( ) [File not signed]
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.)
S3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-04] (Realtek Semiconductor Corporation)
R0 sfdrv02; C:\WINDOWS\System32\drivers\sfdrv02.sys [67960 2006-09-11] (Protection Technology (StarForce))
R0 sfsync05; C:\WINDOWS\System32\drivers\sfsync05.sys [61312 2006-11-03] (Protection Technology (StarForce))
R2 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [File not signed]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath
U3 uxxdrpog; \??\C:\DOCUME~1\98\USTAWI~1\Temp\uxxdrpog.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 12:37 - 2014-08-27 12:38 - 00000000 ____D () C:\FRST
2014-08-26 17:09 - 2014-08-26 17:24 - 00000695 _____ () C:\Documents and Settings\98\Pulpit\prośba.txt
2014-08-26 15:36 - 2014-08-26 15:36 - 00000548 _____ () C:\Documents and Settings\All Users\Pulpit\Total Commander.lnk
2014-08-26 15:36 - 2014-08-26 15:36 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Total Commander
2014-08-26 15:18 - 2014-08-26 15:26 - 00000000 ____D () C:\UsbFix
2014-08-26 15:18 - 2014-08-26 15:18 - 00001364 _____ () C:\Documents and Settings\98\Pulpit\UsbFix.lnk
2014-08-25 14:00 - 2014-08-25 15:39 - 00000029 _____ () C:\Documents and Settings\98\Pulpit\odsluchy.txt
2014-08-20 17:28 - 2006-06-29 13:07 - 00014048 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg2.dll
2014-08-20 17:27 - 2014-08-20 17:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$
2014-08-20 17:27 - 2014-08-20 17:27 - 00000000 ____D () C:\19750ebbc8e7e090187f
2014-08-20 17:26 - 2014-08-21 17:56 - 00000000 ____D () C:\185050a7ad5ab7d310
2014-08-20 17:25 - 2014-08-20 17:27 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-08-20 17:25 - 2014-08-20 17:25 - 00073744 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2014-08-20 17:25 - 2014-08-20 17:25 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-08-20 17:25 - 2014-08-20 17:25 - 00000000 ____D () C:\Program Files\MSBuild
2014-08-20 17:24 - 2014-08-20 17:24 - 00000000 ____D () C:\eb57a0c9d30168d3a24f2575
2014-08-20 17:24 - 2008-07-06 14:06 - 01676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2014-08-20 17:24 - 2008-07-06 14:06 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
2014-08-20 17:24 - 2008-07-06 14:06 - 00575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
2014-08-20 17:24 - 2008-07-06 14:06 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
2014-08-20 17:24 - 2008-07-06 14:06 - 00117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2014-08-20 17:24 - 2008-07-06 14:06 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll
2014-08-20 17:24 - 2008-07-06 12:50 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe
2014-08-20 17:20 - 2014-08-21 17:56 - 00000000 ____D () C:\ca160e34efd926e65d8c3c
2014-08-20 17:20 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-08-20 17:20 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-20 17:20 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-08-20 17:20 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-08-20 17:20 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-20 17:20 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-20 17:20 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-20 17:20 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-08-20 17:19 - 2014-08-20 17:19 - 00000666 _____ () C:\Documents and Settings\All Users\Pulpit\FarCry 3.lnk
2014-08-10 15:22 - 2014-08-19 21:11 - 00000000 ____D () C:\Documents and Settings\98\Pulpit\Lista
2014-08-10 00:09 - 2014-08-10 00:09 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
2014-08-10 00:08 - 2014-08-10 00:08 - 00000000 ____D () C:\Program Files\Panda USB Vaccine
2014-08-10 00:08 - 2014-08-10 00:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Panda Security
2014-08-09 22:55 - 2014-08-09 23:43 - 00000213 _____ () C:\Documents and Settings\98\Pulpit\Klasyczne.txt
2014-08-09 22:55 - 2014-08-09 22:55 - 00000000 ____D () C:\Documents and Settings\98\Pulpit\Nowy folder
2014-08-07 18:01 - 2014-08-07 18:03 - 00000000 ____D () C:\Documents and Settings\98\Moje dokumenty\Freemake
2014-08-07 18:01 - 2014-08-07 18:02 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Freemake
2014-08-07 18:01 - 2014-08-07 18:01 - 00000752 _____ () C:\Documents and Settings\All Users\Pulpit\Freemake Audio Converter.lnk
2014-08-07 18:01 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Freemake
2014-08-07 18:01 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\98\Menu Start\Programy\Freemake
2014-08-07 13:55 - 2014-08-07 13:55 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2014-08-06 19:31 - 2014-08-06 19:31 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-08-06 19:31 - 2014-08-06 19:31 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-08-05 15:36 - 2014-08-05 15:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
2014-08-05 15:36 - 2014-08-05 15:36 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\Ubisoft
2014-08-05 15:32 - 2014-08-20 17:19 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Ubisoft
2014-08-05 15:32 - 2014-08-05 15:32 - 00000759 _____ () C:\Documents and Settings\All Users\Pulpit\Assassin's Creed.lnk
2014-08-02 16:42 - 2014-08-02 17:15 - 00000176 _____ () C:\Documents and Settings\98\Pulpit\Do kupienia.txt
2014-08-01 14:33 - 2014-08-01 14:33 - 00000644 _____ () C:\Documents and Settings\98\Pulpit\South Park - The Stick of Truth.lnk
2014-08-01 14:33 - 2014-08-01 14:33 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\R.G. Mechanics
2014-08-01 14:33 - 2014-08-01 14:33 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\South Park - The Stick of Truth
2014-08-01 09:46 - 2014-08-01 09:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-27 12:39 - 2013-09-09 21:47 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\uTorrent
2014-08-27 12:39 - 2008-01-01 03:01 - 00000000 ____D () C:\Documents and Settings\98\Ustawienia lokalne\Temp
2014-08-27 12:38 - 2014-08-27 12:37 - 00000000 ____D () C:\FRST
2014-08-27 12:29 - 2014-03-22 14:49 - 00000930 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-08-27 12:29 - 2013-10-16 15:22 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\Skype
2014-08-27 12:27 - 2008-01-01 09:30 - 00001028 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-27 12:22 - 2008-01-01 03:31 - 00859883 _____ () C:\WINDOWS\setupapi.log
2014-08-27 12:01 - 2013-10-02 17:37 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\GG
2014-08-27 12:01 - 2008-01-01 02:56 - 00429101 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-27 11:57 - 2014-03-02 14:58 - 00000000 ____D () C:\Program Files\WinZipper
2014-08-27 11:55 - 2014-02-11 22:48 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-08-27 11:54 - 2008-01-01 09:30 - 00001024 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-27 11:54 - 2008-01-01 03:00 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-27 09:23 - 2013-03-07 00:33 - 00393216 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2014-08-27 09:23 - 2008-01-01 03:01 - 00000188 ___SH () C:\Documents and Settings\98\ntuser.ini
2014-08-27 09:23 - 2008-01-01 03:00 - 00032576 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-26 19:00 - 2008-01-01 03:01 - 00000000 ____D () C:\Documents and Settings\98
2014-08-26 17:24 - 2014-08-26 17:09 - 00000695 _____ () C:\Documents and Settings\98\Pulpit\prośba.txt
2014-08-26 17:20 - 2008-01-01 03:01 - 00000000 ___RD () C:\Documents and Settings\98\Menu Start\Programy\Autostart
2014-08-26 17:09 - 2008-01-01 03:01 - 00000000 ____D () C:\Documents and Settings\98\Pulpit
2014-08-26 16:15 - 2013-09-27 16:10 - 00000990 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-790525478-1343024091-725345543-1003UA.job
2014-08-26 16:15 - 2013-09-27 16:10 - 00000968 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-790525478-1343024091-725345543-1003Core.job
2014-08-26 15:36 - 2014-08-26 15:36 - 00000548 _____ () C:\Documents and Settings\All Users\Pulpit\Total Commander.lnk
2014-08-26 15:36 - 2014-08-26 15:36 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Total Commander
2014-08-26 15:36 - 2008-01-01 04:07 - 00000000 ____D () C:\totalcmd
2014-08-26 15:36 - 2008-01-01 03:33 - 00000000 ___RD () C:\Documents and Settings\All Users\Menu Start\Programy
2014-08-26 15:36 - 2008-01-01 03:33 - 00000000 ____D () C:\Documents and Settings\All Users\Pulpit
2014-08-26 15:31 - 2008-01-01 03:01 - 00000000 __RHD () C:\Documents and Settings\98\Dane aplikacji
2014-08-26 15:26 - 2014-08-26 15:18 - 00000000 ____D () C:\UsbFix
2014-08-26 15:18 - 2014-08-26 15:18 - 00001364 _____ () C:\Documents and Settings\98\Pulpit\UsbFix.lnk
2014-08-25 15:39 - 2014-08-25 14:00 - 00000029 _____ () C:\Documents and Settings\98\Pulpit\odsluchy.txt
2014-08-23 20:27 - 2008-01-01 03:01 - 00000000 ___HD () C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji
2014-08-22 19:24 - 2013-08-07 12:34 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\vlc
2014-08-22 09:33 - 2008-01-01 03:35 - 00000216 _____ () C:\WINDOWS\wiadebug.log
2014-08-22 00:46 - 2008-01-01 03:35 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-08-21 18:31 - 2008-01-01 11:07 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-08-21 17:56 - 2014-08-20 17:26 - 00000000 ____D () C:\185050a7ad5ab7d310
2014-08-21 17:56 - 2014-08-20 17:20 - 00000000 ____D () C:\ca160e34efd926e65d8c3c
2014-08-21 17:56 - 2013-08-11 01:10 - 00007168 ___SH () C:\WINDOWS\Thumbs.db
2014-08-21 15:42 - 2013-05-15 18:52 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\Audacity
2014-08-20 17:30 - 2008-01-01 10:44 - 00079648 _____ () C:\WINDOWS\spupdsvc.log
2014-08-20 17:28 - 2008-01-01 11:13 - 00020720 _____ () C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
2014-08-20 17:28 - 2008-01-01 03:33 - 00040971 _____ () C:\WINDOWS\ocgen.log
2014-08-20 17:28 - 2008-01-01 03:31 - 00129296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-20 17:27 - 2014-08-20 17:27 - 00000000 __HDC () C:\WINDOWS\$NtUninstallXPSEPSCLP$
2014-08-20 17:27 - 2014-08-20 17:27 - 00000000 ____D () C:\19750ebbc8e7e090187f
2014-08-20 17:27 - 2014-08-20 17:25 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-08-20 17:27 - 2008-01-01 10:43 - 00000000 ____D () C:\WINDOWS\system32\pl-pl
2014-08-20 17:27 - 2008-01-01 03:27 - 00000000 ____D () C:\WINDOWS\system32\mui
2014-08-20 17:26 - 2008-01-01 03:33 - 01249046 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-20 17:26 - 2001-10-26 16:15 - 00555118 _____ () C:\WINDOWS\system32\perfh015.dat
2014-08-20 17:26 - 2001-10-26 16:15 - 00104274 _____ () C:\WINDOWS\system32\perfc015.dat
2014-08-20 17:25 - 2014-08-20 17:25 - 00073744 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
2014-08-20 17:25 - 2014-08-20 17:25 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-08-20 17:25 - 2014-08-20 17:25 - 00000000 ____D () C:\Program Files\MSBuild
2014-08-20 17:25 - 2008-01-01 03:00 - 00000000 ___HD () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji
2014-08-20 17:24 - 2014-08-20 17:24 - 00000000 ____D () C:\eb57a0c9d30168d3a24f2575
2014-08-20 17:24 - 2008-01-01 03:27 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-08-20 17:20 - 2008-01-01 02:56 - 00000000 ____D () C:\WINDOWS\system32\DirectX
2014-08-20 17:19 - 2014-08-20 17:19 - 00000666 _____ () C:\Documents and Settings\All Users\Pulpit\FarCry 3.lnk
2014-08-20 17:19 - 2014-08-05 15:32 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Ubisoft
2014-08-20 17:09 - 2013-03-06 21:55 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-08-20 17:05 - 2001-07-21 22:17 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-08-20 00:09 - 2013-03-19 01:41 - 00138478 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
2014-08-19 21:11 - 2014-08-10 15:22 - 00000000 ____D () C:\Documents and Settings\98\Pulpit\Lista
2014-08-10 01:03 - 2013-03-19 01:41 - 00722454 _____ () C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-790525478-1343024091-725345543-1003-0.dat
2014-08-10 00:09 - 2014-08-10 00:09 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Panda Security
2014-08-10 00:09 - 2008-01-01 03:31 - 00000000 __RHD () C:\Documents and Settings\All Users\Dane aplikacji
2014-08-10 00:08 - 2014-08-10 00:08 - 00000000 ____D () C:\Program Files\Panda USB Vaccine
2014-08-10 00:08 - 2014-08-10 00:08 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Panda Security
2014-08-09 23:43 - 2014-08-09 22:55 - 00000213 _____ () C:\Documents and Settings\98\Pulpit\Klasyczne.txt
2014-08-09 22:55 - 2014-08-09 22:55 - 00000000 ____D () C:\Documents and Settings\98\Pulpit\Nowy folder
2014-08-09 13:15 - 2013-09-27 16:10 - 00000000 ____D () C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\Temp
2014-08-09 02:14 - 2013-03-08 10:38 - 00000254 _____ () C:\WINDOWS\Tasks\EPUpdater.job
2014-08-07 18:03 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\98\Moje dokumenty\Freemake
2014-08-07 18:02 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Freemake
2014-08-07 18:01 - 2014-08-07 18:01 - 00000752 _____ () C:\Documents and Settings\All Users\Pulpit\Freemake Audio Converter.lnk
2014-08-07 18:01 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\Freemake
2014-08-07 18:01 - 2014-08-07 18:01 - 00000000 ____D () C:\Documents and Settings\98\Menu Start\Programy\Freemake
2014-08-07 18:01 - 2008-01-01 03:01 - 00000000 ___RD () C:\Documents and Settings\98\Moje dokumenty
2014-08-07 18:01 - 2008-01-01 03:01 - 00000000 ___RD () C:\Documents and Settings\98\Menu Start\Programy
2014-08-07 13:55 - 2014-08-07 13:55 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2014-08-06 19:31 - 2014-08-06 19:31 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-08-06 19:31 - 2014-08-06 19:31 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-08-06 19:31 - 2014-02-11 22:48 - 00001733 _____ () C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk
2014-08-06 19:31 - 2014-02-11 22:47 - 00779536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00414520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00192352 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00057800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00055112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-08-06 19:31 - 2014-02-11 22:47 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-08-06 19:31 - 2008-01-01 09:30 - 00276432 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-08-06 09:38 - 2013-10-02 17:37 - 00000000 ____D () C:\Documents and Settings\98\Ustawienia lokalne\Dane aplikacji\GG
2014-08-05 15:36 - 2014-08-05 15:36 - 00000000 ____D () C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
2014-08-05 15:36 - 2014-08-05 15:36 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\Ubisoft
2014-08-05 15:32 - 2014-08-05 15:32 - 00000759 _____ () C:\Documents and Settings\All Users\Pulpit\Assassin's Creed.lnk
2014-08-05 15:32 - 2013-09-17 18:01 - 00289493 _____ () C:\WINDOWS\DirectX.log
2014-08-02 18:41 - 2013-03-09 11:35 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-02 17:15 - 2014-08-02 16:42 - 00000176 _____ () C:\Documents and Settings\98\Pulpit\Do kupienia.txt
2014-08-01 14:33 - 2014-08-01 14:33 - 00000644 _____ () C:\Documents and Settings\98\Pulpit\South Park - The Stick of Truth.lnk
2014-08-01 14:33 - 2014-08-01 14:33 - 00000000 ____D () C:\Documents and Settings\All Users\Menu Start\Programy\R.G. Mechanics
2014-08-01 14:33 - 2014-08-01 14:33 - 00000000 ____D () C:\Documents and Settings\98\Dane aplikacji\South Park - The Stick of Truth
2014-08-01 09:46 - 2014-08-01 09:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox

Files to move or delete:
====================
C:\Documents and Settings\98\TempWmicBatchFile.bat


Some content of TEMP:
====================
C:\Documents and Settings\98\Ustawienia lokalne\Temp\appshat-distribution.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\BackupSetup.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\bassmod.dll
C:\Documents and Settings\98\Ustawienia lokalne\Temp\bitool.dll
C:\Documents and Settings\98\Ustawienia lokalne\Temp\dlLogic.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\drm_dialogs.dll
C:\Documents and Settings\98\Ustawienia lokalne\Temp\drm_dyndata_7370014.dll
C:\Documents and Settings\98\Ustawienia lokalne\Temp\EnableExtDll.dll
C:\Documents and Settings\98\Ustawienia lokalne\Temp\FixMyRegistry_20120821.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\ggdrive-menu.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\ggdrive-overlay.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\ICReinstall_PhotoScape_V3.6.3_Downloader.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\installstats.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\LiveSupport_setup.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\MixiDJToolbar_yh.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\MixiYD.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\MyBabylonTB.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\MyDelta_sftnc.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nseBA.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nsfB5.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nsiAF.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nslC0.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nstB2.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\nsvBD.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\OptimizerPro.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\smt_awesomehp.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\Softonic_PL_1-4-5.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\SPSetup.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\ubiAC3.tmp.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\uninst1.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\vcredist_x86.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\YontooSetup-S.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\_is48.exe
C:\Documents and Settings\98\Ustawienia lokalne\Temp\?odec Performer803921.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================