Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Wiex (administrator) on WIEX-PC on 17-09-2014 20:12:57
Running from C:\Users\Wiex\Downloads\FRST
Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 2 (X86) OS Language: Polski (Polska)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Bitsum LLC) D:\Programy\Process Lasso\ProcessGovernor.exe
(Bitsum LLC) D:\Programy\Process Lasso\ProcessLasso.exe
(WiseCleaner.com) D:\Programy\Wise Care 365\WiseTray.exe
() D:\Programy\Ashampoo Core Tuner 2\ACT2Service.exe
() D:\Programy\Comodo\Dragon\dragon_updater.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(Company) C:\Program Files\Popcorn Time\Updater.exe
(Malwarebytes Corporation) D:\Programy\Malwarebytes Anti-Malware\mbam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Altrixsoft) D:\Programy\Hard Drive Inspector\HDInspector.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(OrdinarySoft) D:\Programy\Start Menu X\StartMenuX.exe
(AltrixSoft (http://www.altrixsoft.com/)) C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe
(Singer's Creations) D:\Programy\Weather Watcher\ww.exe
() C:\Program Files\RocketDock\RocketDock.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [HDInspector.exe] => D:\Programy\Hard Drive Inspector\HDInspector.exe [3163088 2013-10-21] (Altrixsoft)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3592015403-793725120-2322176034-1000\...\Run: [StartMenuX] => D:\Programy\Start Menu X\StartMenuX.exe [5376320 2013-11-28] (OrdinarySoft)
HKU\S-1-5-21-3592015403-793725120-2322176034-1000\...\Run: [WeatherWatcher] => D:\Programy\Weather Watcher\ww.exe [1110016 2009-07-07] (Singer's Creations)
HKU\S-1-5-21-3592015403-793725120-2322176034-1000\...\Run: [RocketDock] => C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-3592015403-793725120-2322176034-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.113.224.134 217.113.224.135

FireFox:
========
FF ProfilePath: C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default
FF Homepage: www.google.pl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> D:\Progamy\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Wiex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Wiex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Flashblock - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-08-27]
FF Extension: Flash and Video Download - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-08-22]
FF Extension: FireGestures - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\firegestures@xuldev.org.xpi [2014-05-23]
FF Extension: Hide IP Easy - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\support@easy-hideip.com.xpi [2013-08-21]
FF Extension: Thumbnail Zoom Plus - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\thumbnailZoom@dadler.github.com.xpi [2014-05-23]
FF Extension: Adblock Plus - C:\Users\Wiex\AppData\Roaming\Mozilla\Firefox\Profiles\l00tk613.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-11]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.comodo.com/
CHR StartupUrls: Default -> "hxxp://pl.yahoo.com/?fr=fpc-comodo"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR CustomProfile: C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Entanglement Web App) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2014-05-23]
CHR Extension: (Radio) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-05-23]
CHR Extension: (Beatlab) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\alnfdikmbdfgkcbdodjcbmedanjinmkk [2014-05-23]
CHR Extension: (Google Docs) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-06-14]
CHR Extension: (Dysk Google) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-14]
CHR Extension: (Turn Off the Lights) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2014-08-28]
CHR Extension: (Audiotool) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkgoccjhfjgjedhkiefaclppgbmoobnk [2014-05-23]
CHR Extension: (YouTube) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-14]
CHR Extension: (Szukaj w Google) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-14]
CHR Extension: (WGT Golf Challenge) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcilimldmomiaihcfkmaldanopfejefg [2014-05-23]
CHR Extension: (Pixlr-o-matic) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2014-05-23]
CHR Extension: (Photo Zoom for Facebook) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi [2013-06-14]
CHR Extension: (Virtual Piano Black) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjagcpcbacoaogfljhglghpjhkmmfeeo [2014-05-23]
CHR Extension: (Stylish) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2014-05-23]
CHR Extension: (Full Screen Weather) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2014-05-23]
CHR Extension: (AdBlock) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-06-14]
CHR Extension: (FabCam) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\hejilffmihldhlfocnabcgndjjpgadfl [2014-05-23]
CHR Extension: (Pixect) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgdeoagndhabdnoenpdcagbkkmjeibmh [2014-05-23]
CHR Extension: (Movi Kanti Revo) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdkcgeghhfjiglphfppinecpcpnnbne [2014-05-23]
CHR Extension: (Until AM Web App) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2014-05-23]
CHR Extension: (Webcam Toy) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade [2014-05-23]
CHR Extension: (AudioSauna) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkgfemnodkdnenmfkblebnkjpckkjcae [2014-05-23]
CHR Extension: (AS Magic Player) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2014-09-08]
CHR Extension: (Google Wallet) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-28]
CHR Extension: (Hover Zoom) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl [2013-06-14]
CHR Extension: (PhotoFit Me) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdpbdnchfplfpdjbckgbmpnddnjdijjk [2014-05-23]
CHR Extension: (Gmail) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-14]
CHR Extension: (ติ๊ก ชีโร่ (มนัสวิน นันทเสน)) - C:\Users\Wiex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pniaakffjlejdpocgnomjcnfofeajagg [2014-05-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACT2_Service; D:\Programy\Ashampoo Core Tuner 2\ACT2Service.exe [1421216 2011-08-22] ()
R2 DragonUpdater; D:\Programy\Comodo\Dragon\dragon_updater.exe [2135232 2014-05-21] ()
R3 HDDSvc; C:\Program Files\Common Files\AltrixSoft\HDDInfoService\HDDSvc.exe [484304 2013-03-10] (AltrixSoft (http://www.altrixsoft.com/))
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-10-16] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-10-16] (Hewlett-Packard Co.) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMScheduler; D:\Programy\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; D:\Programy\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [File not signed]
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [File not signed]
R2 Update service; C:\Program Files\Popcorn Time\Updater.exe [179200 2014-09-13] (Company) [File not signed]
S2 WiseBootAssistant; D:\Programy\Wise Care 365\BootTime.exe [580232 2014-01-21] (WiseCleaner.com)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ACT2PM; D:\Programy\Ashampoo Core Tuner 2\ACT2ProcessMonitor32.sys [14648 2011-06-10] ()
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [25728 2012-03-02] (Google Inc)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [279712 2013-12-08] ()
S3 cleanhlp; D:\EEK\Run\cleanhlp32.sys [50200 2013-12-17] (Emsisoft GmbH)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()
S3 FlashUSB; C:\Windows\System32\DRIVERS\FlashUSB.sys [16896 2010-05-12] (Danish Wireless Design A/S)
S3 gdrv; C:\Windows\gdrv.sys [17488 2014-06-26] (Windows (R) 2000 DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2013-07-11] ()
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28312 2013-05-23] (Logitech, Inc.)
R3 LVPr2Mon; C:\Windows\System32\Drivers\LVPr2Mon.sys [25752 2009-10-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-09-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl1deb70e0; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9E795D78-7C72-45B2-97B6-3C4D218E5DBC}\MpKsl1deb70e0.sys [39464 2014-09-17] (Microsoft Corporation)
S3 Passthru; C:\Windows\System32\DRIVERS\PPFlt.sys [24824 2014-09-08] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13976 2009-05-01] (Logitech Inc.)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R3 PrivacyProtectorMP; C:\Windows\System32\DRIVERS\PPFlt.sys [24824 2014-09-08] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-07-01] (The OpenVPN Project)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U5 UnlockerDriver5; D:\Programy\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-17 20:11 - 2014-09-17 20:11 - 00000000 ____D () C:\Users\Wiex\Downloads\FSS
2014-09-17 19:07 - 2014-09-17 19:07 - 00512816 _____ () C:\Users\Wiex\Documents\AutoRunsData.ard
2014-09-17 18:36 - 2014-09-17 18:50 - 00000000 ____D () C:\Users\Wiex\Downloads\OTL
2014-09-17 18:30 - 2014-09-17 20:13 - 00000000 ____D () C:\FRST
2014-09-17 18:29 - 2014-09-17 20:12 - 00000000 ____D () C:\Users\Wiex\Downloads\FRST
2014-09-17 15:54 - 2014-09-17 15:54 - 00000047 _____ () C:\Users\Wiex\Downloads\RestoreIPinIPTunnelDriverWindowsVista.bat
2014-09-17 15:42 - 2014-09-17 15:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-17 15:42 - 2014-09-17 15:42 - 00000000 _____ () C:\Windows\setupact.log
2014-09-17 15:21 - 2014-09-17 15:21 - 00000000 ____D () C:\Users\Wiex\Downloads\cce_2.5.242177.201_x32
2014-09-17 15:20 - 2014-09-17 15:20 - 23732069 _____ () C:\Users\Wiex\Downloads\cce_2.5.242177.201_x32.zip
2014-09-17 14:28 - 2014-09-17 14:28 - 00000740 _____ () C:\Users\Public\Desktop\Removal Tool.lnk
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\9-lab
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\9-lab Removal Tool
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\ProgramData\9-lab
2014-09-17 14:20 - 2014-09-17 20:03 - 00063421 _____ () C:\Windows\WindowsUpdate.log
2014-09-17 14:18 - 2014-09-17 20:04 - 00043406 _____ () C:\Windows\PFRO.log
2014-09-17 14:18 - 2014-09-17 14:18 - 00259344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-17 14:12 - 2014-09-17 14:13 - 07828120 _____ () C:\Users\Wiex\Downloads\rmtool-setup-x86.exe
2014-09-17 13:39 - 2014-09-17 13:39 - 00056952 _____ () C:\Users\Wiex\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-17 13:04 - 2014-09-17 13:03 - 00120126 _____ () C:\Users\Wiex\Downloads\John.Dies.At.The.End.2012.HDRip.XviD.HS.srt
2014-09-17 13:03 - 2014-09-17 13:03 - 00047465 _____ () C:\Users\Wiex\Downloads\john.dies.at.the.end.(2012).pol.1cd.(4787997).zip
2014-09-16 13:04 - 2014-09-16 13:04 - 00000824 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera beta.lnk
2014-09-15 06:47 - 2014-09-17 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-09-15 06:47 - 2014-09-17 14:31 - 00000000 ____D () C:\Program Files\K-Lite Codec Pack
2014-09-15 06:47 - 2014-06-14 16:03 - 00218200 _____ () C:\Windows\system32\unrar.dll
2014-09-13 04:02 - 2014-09-17 13:34 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-12 21:52 - 2014-09-17 14:19 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-12 15:21 - 2014-09-12 16:30 - 00000000 ____D () C:\Users\Wiex\AppData\Local\Gods_Will_Be_Watching
2014-09-12 15:16 - 2014-09-12 15:16 - 00000711 _____ () C:\Users\Wiex\Desktop\Gods Will Be Watching.lnk
2014-09-12 15:16 - 2014-09-12 15:16 - 00000605 _____ () C:\Users\Wiex\Desktop\Cat-A-Cat GAMES.lnk
2014-09-12 15:16 - 2014-09-12 15:16 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gods Will Be Watching 1.0
2014-09-10 12:15 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 12:15 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 12:15 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 12:15 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 12:15 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 12:15 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 12:15 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 12:15 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 12:15 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-09-10 12:15 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 12:15 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 12:15 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 12:15 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-09-10 12:15 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-09-09 00:11 - 2014-09-09 00:13 - 00000000 ____D () C:\Users\Wiex\Downloads\blade.runner.(1982).pol.1cd.(4465898)
2014-09-09 00:11 - 2014-09-09 00:11 - 00018500 _____ () C:\Users\Wiex\Downloads\blade.runner.(1982).pol.1cd.(4465898).zip
2014-09-08 23:30 - 2014-09-08 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Westwood
2014-09-08 23:27 - 1997-04-08 20:08 - 00299520 _____ (InstallShield Corporation, Inc.) C:\Windows\uninst.exe
2014-09-08 16:45 - 2014-09-08 17:51 - 00000000 ____D () C:\ProgramData\IPProtector
2014-09-08 16:44 - 2014-09-08 17:50 - 00002249 _____ () C:\Users\Public\Desktop\PrivacyProtector GVN.lnk
2014-09-08 16:44 - 2014-09-08 16:44 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivacyProtectorGVN
2014-09-08 16:44 - 2014-09-08 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivacyProtectorGVN
2014-09-08 16:37 - 2014-09-08 16:37 - 01209232 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Wiex\Downloads\PrivacyProtectorGVNSetup.exe
2014-09-08 12:38 - 2014-09-08 12:52 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\.ACEStream
2014-09-08 12:38 - 2014-09-08 12:38 - 00000000 ___HD () C:\_acestream_cache_
2014-09-08 12:35 - 2014-09-08 17:10 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\ACEStream
2014-09-08 12:28 - 2014-09-08 12:29 - 67195312 _____ () C:\Users\Wiex\Downloads\Ace_Stream_Media_2.2.10-next.exe
2014-09-08 12:21 - 2014-09-17 15:56 - 00000000 ____D () C:\Program Files\Popcorn Time
2014-09-08 12:21 - 2014-09-17 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-09-08 12:21 - 2014-09-08 12:21 - 00000918 _____ () C:\Users\Public\Desktop\Popcorn Time.lnk
2014-09-08 11:25 - 2014-09-08 11:25 - 02374320 _____ (PeerBlock, LLC ) C:\Users\Wiex\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-09-08 11:11 - 2014-09-08 11:13 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\PopcornTime
2014-09-08 11:09 - 2014-09-08 11:10 - 43496185 _____ (Popcorn Time ) C:\Users\Wiex\Downloads\PopcornTime-latest.exe
2014-09-07 20:43 - 2014-09-07 20:44 - 91670064 _____ (The GIMP Team ) C:\Users\Wiex\Downloads\gimp-2.8.14-setup.exe
2014-09-07 12:23 - 2014-09-07 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2014-09-07 12:21 - 2014-09-07 12:21 - 09989013 _____ ( ) C:\Users\Wiex\Downloads\NapiProjektBuild_2.2.0.2399(dobreprogramy.pl).exe
2014-09-07 10:10 - 2014-09-07 10:10 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\ASK Video
2014-09-07 00:34 - 2014-09-07 00:44 - 00000000 ____D () C:\ASK Video
2014-09-06 23:15 - 2014-09-06 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio Entertainment Ltd
2014-09-06 23:14 - 2014-09-06 23:18 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Rovio Entertainment Ltd
2014-09-02 16:13 - 2014-09-02 16:13 - 00561880 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-09-02 16:13 - 2014-09-02 16:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-09-02 16:09 - 2014-09-02 16:09 - 01283176 _____ (CPUID) C:\Users\Wiex\AppData\Roaming\siw_sdk.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-09-02 15:44 - 2014-09-02 15:44 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-09-02 15:44 - 2014-09-02 15:44 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 03086040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-09-02 15:44 - 2014-09-02 15:44 - 02566872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02140976 _____ () C:\Windows\system32\SStudio.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-09-02 15:44 - 2014-09-02 15:44 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-09-02 15:44 - 2014-09-02 15:44 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00916696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00029496 _____ () C:\Windows\system32\audioLibVc.dll
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\IObit
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\ProgramData\IObit
2014-08-30 12:19 - 2014-08-30 12:30 - 00000000 ____D () C:\Program Files\FileViewPro
2014-08-30 12:16 - 2014-08-30 12:16 - 00000000 ____D () C:\Spacekace
2014-08-30 12:15 - 2014-08-30 12:16 - 02388400 _____ () C:\Users\Wiex\Downloads\FileViewPro_2014_Setup.exe
2014-08-29 12:00 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-29 12:00 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-28 11:11 - 2014-08-28 11:11 - 00000000 ____D () C:\Users\Wiex\Documents\7 Days To Die
2014-08-28 10:50 - 2014-08-28 10:50 - 00000000 ___HD () C:\Windows\PIF
2014-08-25 23:41 - 2014-08-25 23:41 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Morphopolis
2014-08-25 14:00 - 2014-08-28 01:12 - 00023358 _____ () C:\Users\Wiex\Documents\CV Tomasz Wieczorek.odt
2014-08-25 13:58 - 2014-08-25 13:58 - 00023234 _____ () C:\Users\Wiex\Documents\CV moje 2.odt
2014-08-25 03:39 - 2014-08-25 04:47 - 00000000 ____D () C:\Users\Public\Documents\White Gold
2014-08-20 09:27 - 2014-08-20 09:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RecoveryMechanic
2014-08-20 09:27 - 2014-08-20 09:27 - 00000000 ____D () C:\Program Files\RecoveryMechanic
2014-08-20 09:24 - 2014-08-20 09:25 - 00000000 ____D () C:\Users\Wiex\Downloads\NTFSMechanicStandard211

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-17 20:13 - 2014-09-17 18:30 - 00000000 ____D () C:\FRST
2014-09-17 20:12 - 2014-09-17 18:29 - 00000000 ____D () C:\Users\Wiex\Downloads\FRST
2014-09-17 20:11 - 2014-09-17 20:11 - 00000000 ____D () C:\Users\Wiex\Downloads\FSS
2014-09-17 20:09 - 2014-09-17 14:20 - 00063421 _____ () C:\Windows\WindowsUpdate.log
2014-09-17 20:07 - 2014-04-08 12:00 - 00000350 _____ () C:\Windows\Tasks\WpsNotifyTask_Wiex.job
2014-09-17 20:05 - 2014-08-14 11:06 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-17 20:05 - 2014-02-16 11:27 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Wise Care 365
2014-09-17 20:04 - 2014-09-17 14:18 - 00043406 _____ () C:\Windows\PFRO.log
2014-09-17 20:04 - 2014-02-16 11:37 - 00000356 _____ () C:\Windows\Tasks\Wise Care 365.job
2014-09-17 20:04 - 2013-06-14 08:55 - 00000000 ____D () C:\Program Files\Google
2014-09-17 20:04 - 2006-11-02 14:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-17 20:04 - 2006-11-02 14:45 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-17 20:04 - 2006-11-02 14:45 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-17 20:03 - 2006-11-02 14:58 - 00032564 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-17 20:02 - 2013-06-14 08:55 - 00000000 ____D () C:\Users\Wiex\AppData\Local\Google
2014-09-17 20:01 - 2014-04-08 12:00 - 00000350 _____ () C:\Windows\Tasks\WpsUpdateTask_Wiex.job
2014-09-17 20:01 - 2013-06-14 00:07 - 00000000 ____D () C:\Users\Wiex
2014-09-17 19:07 - 2014-09-17 19:07 - 00512816 _____ () C:\Users\Wiex\Documents\AutoRunsData.ard
2014-09-17 18:50 - 2014-09-17 18:36 - 00000000 ____D () C:\Users\Wiex\Downloads\OTL
2014-09-17 18:13 - 2013-07-16 19:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-17 18:07 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-09-17 15:56 - 2014-09-08 12:21 - 00000000 ____D () C:\Program Files\Popcorn Time
2014-09-17 15:54 - 2014-09-17 15:54 - 00000047 _____ () C:\Users\Wiex\Downloads\RestoreIPinIPTunnelDriverWindowsVista.bat
2014-09-17 15:42 - 2014-09-17 15:42 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-17 15:42 - 2014-09-17 15:42 - 00000000 _____ () C:\Windows\setupact.log
2014-09-17 15:21 - 2014-09-17 15:21 - 00000000 ____D () C:\Users\Wiex\Downloads\cce_2.5.242177.201_x32
2014-09-17 15:20 - 2014-09-17 15:20 - 23732069 _____ () C:\Users\Wiex\Downloads\cce_2.5.242177.201_x32.zip
2014-09-17 14:31 - 2014-09-15 06:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-09-17 14:31 - 2014-09-15 06:47 - 00000000 ____D () C:\Program Files\K-Lite Codec Pack
2014-09-17 14:30 - 2014-09-08 12:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-09-17 14:28 - 2014-09-17 14:28 - 00000740 _____ () C:\Users\Public\Desktop\Removal Tool.lnk
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\9-lab
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\9-lab Removal Tool
2014-09-17 14:28 - 2014-09-17 14:28 - 00000000 ____D () C:\ProgramData\9-lab
2014-09-17 14:19 - 2014-09-12 21:52 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-17 14:18 - 2014-09-17 14:18 - 00259344 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-17 14:18 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Help
2014-09-17 14:13 - 2014-09-17 14:12 - 07828120 _____ () C:\Users\Wiex\Downloads\rmtool-setup-x86.exe
2014-09-17 14:00 - 2014-02-13 22:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UBISOFT
2014-09-17 14:00 - 2013-06-14 00:17 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-09-17 13:55 - 2013-06-14 17:22 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Ashampoo
2014-09-17 13:53 - 2013-06-14 17:34 - 00000000 ____D () C:\Program Files\Ashampoo
2014-09-17 13:52 - 2013-06-14 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-09-17 13:39 - 2014-09-17 13:39 - 00056952 _____ () C:\Users\Wiex\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-17 13:34 - 2014-09-13 04:02 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-17 13:25 - 2013-06-24 19:52 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\DAEMON Tools Lite
2014-09-17 13:25 - 2013-06-15 14:02 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\AIMP3
2014-09-17 13:25 - 2013-06-14 15:59 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\uTorrent
2014-09-17 13:18 - 2013-08-14 19:46 - 00000000 ____D () C:\Users\Wiex\AppData\Local\CrashDumps
2014-09-17 13:03 - 2014-09-17 13:04 - 00120126 _____ () C:\Users\Wiex\Downloads\John.Dies.At.The.End.2012.HDRip.XviD.HS.srt
2014-09-17 13:03 - 2014-09-17 13:03 - 00047465 _____ () C:\Users\Wiex\Downloads\john.dies.at.the.end.(2012).pol.1cd.(4787997).zip
2014-09-16 20:17 - 2013-09-25 11:38 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\ProcessLasso
2014-09-16 20:17 - 2013-07-10 12:35 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\WeatherWatcher
2014-09-16 13:04 - 2014-09-16 13:04 - 00000824 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera beta.lnk
2014-09-16 13:04 - 2014-05-23 15:55 - 00000000 ____D () C:\Program Files\Opera Next
2014-09-14 13:56 - 2014-02-16 11:37 - 00000336 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2014-09-12 22:13 - 2013-06-22 10:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-12 22:13 - 2013-06-22 10:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-12 21:52 - 2013-06-22 10:55 - 00000000 ____D () C:\Users\Wiex\AppData\Local\Adobe
2014-09-12 16:30 - 2014-09-12 15:21 - 00000000 ____D () C:\Users\Wiex\AppData\Local\Gods_Will_Be_Watching
2014-09-12 15:16 - 2014-09-12 15:16 - 00000711 _____ () C:\Users\Wiex\Desktop\Gods Will Be Watching.lnk
2014-09-12 15:16 - 2014-09-12 15:16 - 00000605 _____ () C:\Users\Wiex\Desktop\Cat-A-Cat GAMES.lnk
2014-09-12 15:16 - 2014-09-12 15:16 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gods Will Be Watching 1.0
2014-09-12 13:10 - 2013-06-27 00:21 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Skype
2014-09-12 12:32 - 2013-11-26 19:03 - 00000000 ____D () C:\Users\Wiex\AppData\Local\Deployment
2014-09-10 12:32 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-10 12:14 - 2008-01-21 08:21 - 01631596 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 12:14 - 2008-01-21 08:20 - 00728314 _____ () C:\Windows\system32\perfh015.dat
2014-09-10 12:14 - 2008-01-21 08:20 - 00158212 _____ () C:\Windows\system32\perfc015.dat
2014-09-10 12:08 - 2013-09-03 13:02 - 00001826 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-10 12:08 - 2013-06-14 08:36 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-09-10 12:07 - 2013-09-03 13:01 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-09 13:45 - 2013-06-24 11:18 - 00000000 ____D () C:\Users\Wiex\Documents\Odzysk Reason
2014-09-09 00:13 - 2014-09-09 00:11 - 00000000 ____D () C:\Users\Wiex\Downloads\blade.runner.(1982).pol.1cd.(4465898)
2014-09-09 00:11 - 2014-09-09 00:11 - 00018500 _____ () C:\Users\Wiex\Downloads\blade.runner.(1982).pol.1cd.(4465898).zip
2014-09-08 23:30 - 2014-09-08 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Westwood
2014-09-08 17:51 - 2014-09-08 16:45 - 00000000 ____D () C:\ProgramData\IPProtector
2014-09-08 17:50 - 2014-09-08 16:44 - 00002249 _____ () C:\Users\Public\Desktop\PrivacyProtector GVN.lnk
2014-09-08 17:10 - 2014-09-08 12:35 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\ACEStream
2014-09-08 16:45 - 2013-11-27 02:32 - 00000000 ____D () C:\Windows\system32\Driver
2014-09-08 16:44 - 2014-09-08 16:44 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PrivacyProtectorGVN
2014-09-08 16:44 - 2014-09-08 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrivacyProtectorGVN
2014-09-08 16:44 - 2013-11-27 02:32 - 00458056 _____ (WeOnlyDo! COM) C:\Windows\system32\wodVPN.ocx
2014-09-08 16:44 - 2013-11-27 02:32 - 00420680 _____ (WeOnlyDo! COM) C:\Windows\system32\wodVPN.dll
2014-09-08 16:44 - 2013-11-27 02:32 - 00024824 _____ () C:\Windows\system32\Drivers\PPFlt.sys
2014-09-08 16:37 - 2014-09-08 16:37 - 01209232 _____ (DevAge, Vestris Inc. & Contributors) C:\Users\Wiex\Downloads\PrivacyProtectorGVNSetup.exe
2014-09-08 12:53 - 2013-06-14 15:34 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Media Player Classic
2014-09-08 12:52 - 2014-09-08 12:38 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\.ACEStream
2014-09-08 12:38 - 2014-09-08 12:38 - 00000000 ___HD () C:\_acestream_cache_
2014-09-08 12:29 - 2014-09-08 12:28 - 67195312 _____ () C:\Users\Wiex\Downloads\Ace_Stream_Media_2.2.10-next.exe
2014-09-08 12:21 - 2014-09-08 12:21 - 00000918 _____ () C:\Users\Public\Desktop\Popcorn Time.lnk
2014-09-08 11:26 - 2013-07-11 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
2014-09-08 11:25 - 2014-09-08 11:25 - 02374320 _____ (PeerBlock, LLC ) C:\Users\Wiex\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-09-08 11:13 - 2014-09-08 11:11 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\PopcornTime
2014-09-08 11:10 - 2014-09-08 11:09 - 43496185 _____ (Popcorn Time ) C:\Users\Wiex\Downloads\PopcornTime-latest.exe
2014-09-07 20:44 - 2014-09-07 20:43 - 91670064 _____ (The GIMP Team ) C:\Users\Wiex\Downloads\gimp-2.8.14-setup.exe
2014-09-07 12:23 - 2014-09-07 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
2014-09-07 12:21 - 2014-09-07 12:21 - 09989013 _____ ( ) C:\Users\Wiex\Downloads\NapiProjektBuild_2.2.0.2399(dobreprogramy.pl).exe
2014-09-07 10:10 - 2014-09-07 10:10 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\ASK Video
2014-09-07 00:44 - 2014-09-07 00:34 - 00000000 ____D () C:\ASK Video
2014-09-06 23:18 - 2014-09-06 23:14 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Rovio Entertainment Ltd
2014-09-06 23:15 - 2014-09-06 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio Entertainment Ltd
2014-09-06 23:13 - 2013-11-02 17:12 - 00000000 ____D () C:\Users\wiekoo\AppData\Roaming\Rovio
2014-09-02 16:13 - 2014-09-02 16:13 - 00561880 _____ (Realtek ) C:\Windows\system32\Drivers\Rtlh86.sys
2014-09-02 16:13 - 2014-09-02 16:13 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-09-02 16:13 - 2014-01-19 16:40 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-09-02 16:11 - 2014-06-17 22:43 - 00000779 _____ () C:\Users\Wiex\Desktop\LGMobile Support Tool.lnk
2014-09-02 16:11 - 2013-08-12 08:43 - 00002411 _____ () C:\Windows\system32\lgAxconfig.ini
2014-09-02 16:11 - 2013-08-12 08:42 - 00000000 ____D () C:\ProgramData\LGMOBILEAX
2014-09-02 16:09 - 2014-09-02 16:09 - 01283176 _____ (CPUID) C:\Users\Wiex\AppData\Roaming\siw_sdk.dll
2014-09-02 15:48 - 2014-01-11 14:21 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-09-02 15:44 - 2014-09-02 15:44 - 60636160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes.dat
2014-09-02 15:44 - 2014-09-02 15:44 - 28062296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 14585432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 11821656 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO30.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 06177624 _____ (Dolby Laboratories) C:\Windows\system32\DDPP32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-09-02 15:44 - 2014-09-02 15:44 - 05086984 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 03683416 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 03086040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-09-02 15:44 - 2014-09-02 15:44 - 02566872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkPgExt.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02474200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02421792 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 02140976 _____ () C:\Windows\system32\SStudio.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01940056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-09-02 15:44 - 2014-09-02 15:44 - 01823320 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01691224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01490264 _____ (Dolby Laboratories) C:\Windows\system32\DDPD32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01116248 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO60.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 01099203 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-09-02 15:44 - 2014-09-02 15:44 - 00987224 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO50.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00966904 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00966744 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO40.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00948336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00916696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00890160 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00818936 _____ (DTS, Inc.) C:\Windows\system32\sl3apo32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00798296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO20.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00782040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApoApi.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00606968 _____ (DTS, Inc.) C:\Windows\system32\sltech32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00274264 _____ (Dolby Laboratories) C:\Windows\system32\DDPO32A.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00265376 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00221528 _____ (Dolby Laboratories) C:\Windows\system32\DDPA32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00219896 _____ (TODO: <Company name>) C:\Windows\system32\slprp32.dll
2014-09-02 15:44 - 2014-09-02 15:44 - 00029496 _____ () C:\Windows\system32\audioLibVc.dll
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\IObit
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-09-02 15:36 - 2014-09-02 15:36 - 00000000 ____D () C:\ProgramData\IObit
2014-08-30 12:30 - 2014-08-30 12:19 - 00000000 ____D () C:\Program Files\FileViewPro
2014-08-30 12:16 - 2014-08-30 12:16 - 00000000 ____D () C:\Spacekace
2014-08-30 12:16 - 2014-08-30 12:15 - 02388400 _____ () C:\Users\Wiex\Downloads\FileViewPro_2014_Setup.exe
2014-08-28 11:11 - 2014-08-28 11:11 - 00000000 ____D () C:\Users\Wiex\Documents\7 Days To Die
2014-08-28 10:50 - 2014-08-28 10:50 - 00000000 ___HD () C:\Windows\PIF
2014-08-28 09:10 - 2014-02-01 01:27 - 00000000 ____D () C:\Program Filesl
2014-08-28 01:12 - 2014-08-25 14:00 - 00023358 _____ () C:\Users\Wiex\Documents\CV Tomasz Wieczorek.odt
2014-08-26 11:31 - 2014-07-15 03:36 - 00000000 ____D () C:\Users\Wiex\Downloads\Ichi-RiTUEL
2014-08-25 23:41 - 2014-08-25 23:41 - 00000000 ____D () C:\Users\Wiex\AppData\Roaming\Morphopolis
2014-08-25 13:58 - 2014-08-25 13:58 - 00023234 _____ () C:\Users\Wiex\Documents\CV moje 2.odt
2014-08-25 04:47 - 2014-08-25 03:39 - 00000000 ____D () C:\Users\Public\Documents\White Gold
2014-08-23 03:03 - 2014-08-29 12:00 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 01:26 - 2014-08-29 12:00 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-20 09:27 - 2014-08-20 09:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RecoveryMechanic
2014-08-20 09:27 - 2014-08-20 09:27 - 00000000 ____D () C:\Program Files\RecoveryMechanic
2014-08-20 09:25 - 2014-08-20 09:24 - 00000000 ____D () C:\Users\Wiex\Downloads\NTFSMechanicStandard211

Files to move or delete:
====================
C:\ProgramData\D__Programy_HideIPEasy_HideIPEasy.exe
C:\Windows\System32\libs.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 20:10

==================== End Of Log ============================