Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2014 Ran by Bartek (administrator) on BARTEK-KOMPUTER on 24-09-2014 21:18:14 Running from C:\Users\Bartek\Desktop Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Windows\SysWOW64\PnkBstrA.exe (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKU\S-1-5-21-1813054588-749713010-1817662991-1000\...\Run: [Google Update] => C:\Users\Bartek\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2010-12-24] (Google Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x22E5720DADD5CE01 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.gazeta.pl/0,0.html?p=180&d=20140622 BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File BHO-x32: IplexToALLPlayer -> {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} -> F:\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== Chrome: ======= CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.5.671\_platform_specific\win_x86\widevinecdmadapter.dll () CHR Plugin: (Shockwave Flash) - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\37.0.2062.120\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\37.0.2062.120\pdf.dll () CHR Profile: C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Wallet) - C:\Users\Bartek\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-26] CHR StartMenuInternet: Google Chrome - C:\Users\Bartek\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2010-12-26] () [File not signed] S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [4045688 2011-05-01] (INCA Internet Co., Ltd.) [File not signed] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2012-12-23] () S4 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [173616 2007-02-07] () S3 ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [628736 2010-12-08] (Nokia) [File not signed] S4 SPDFToolsReadSpool; F:\solid\SPDFT\SolidPdfToolsServicex64.exe [320512 2009-09-10] (Solid Documents, LLC) [File not signed] R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2010-02-03] (Dell Inc.) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2011-06-13] () S3 ew_hwusbdev; C:\Windows\System32\DRIVERS\ew_hwusbdev.sys [117248 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed] S3 GT680x; C:\Windows\System32\Drivers\Gt680x.sys [22528 2007-02-06] ( ) S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [91136 2010-11-15] (Huawei Technologies Co., Ltd.) [File not signed] R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-06-13] () S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-04] (INCA Internet Co., Ltd.) [File not signed] S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B}; F:\PowerDVD\000.fcl [13560 2006-11-02] (Cyberlink Corp.) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-24 21:18 - 2014-09-24 21:20 - 00009222 _____ () C:\Users\Bartek\Desktop\FRST.txt 2014-09-24 21:17 - 2014-09-24 21:17 - 00006268 _____ () C:\Users\Bartek\Desktop\AdwCleaner[S0].txt 2014-09-24 21:14 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-09-24 21:13 - 2014-09-24 21:14 - 00000000 ____D () C:\AdwCleaner 2014-09-24 21:13 - 2014-09-24 21:13 - 01373475 _____ () C:\Users\Bartek\Downloads\adwcleaner_3.310.exe 2014-09-24 20:51 - 2014-09-24 20:51 - 00003128 _____ () C:\Windows\System32\Tasks\{21119E0B-C5E4-46DB-A3FA-B68FBDF8176D} 2014-09-21 23:20 - 2014-09-21 23:20 - 00096098 _____ () C:\Users\Bartek\Downloads\Extras.Txt 2014-09-21 23:18 - 2014-09-21 23:18 - 00110704 _____ () C:\Users\Bartek\Downloads\OTL.Txt 2014-09-21 20:52 - 2014-09-21 20:52 - 00602112 _____ (OldTimer Tools) C:\Users\Bartek\Downloads\OTL.exe 2014-09-21 20:44 - 2014-09-21 20:44 - 00103796 _____ () C:\Users\Bartek\Downloads\Shortcut.txt 2014-09-21 20:43 - 2014-09-21 20:44 - 00045805 _____ () C:\Users\Bartek\Downloads\Addition.txt 2014-09-21 20:42 - 2014-09-21 20:42 - 00380416 _____ () C:\Users\Bartek\Downloads\938mzrcx.exe 2014-09-21 20:41 - 2014-09-21 20:44 - 00037315 _____ () C:\Users\Bartek\Downloads\FRST.txt 2014-09-21 20:40 - 2014-09-24 20:52 - 02106880 _____ (Farbar) C:\Users\Bartek\Desktop\FRST64.exe 2014-09-12 02:26 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-09-12 02:26 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-09-12 02:26 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-09-12 02:26 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-09-12 02:26 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-09-12 02:26 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-09-12 02:26 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-09-12 02:26 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-09-12 02:26 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-09-12 02:26 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-09-12 02:26 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-09-12 02:26 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-09-12 02:26 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-09-12 02:26 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-09-12 02:26 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-09-12 02:26 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-09-12 02:26 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-09-12 02:26 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-09-12 02:26 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-09-12 02:26 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-09-12 02:26 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-09-12 02:26 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-09-12 02:26 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-09-12 02:26 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-09-12 02:26 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-09-12 02:26 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-09-12 02:26 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-09-12 02:26 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-09-12 02:26 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-09-12 02:26 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-09-12 02:26 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-09-12 02:26 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-09-12 02:26 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-09-12 02:26 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-09-12 02:26 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-09-12 02:26 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-09-12 02:26 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-09-12 02:26 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-09-12 02:26 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-09-12 02:26 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-09-12 02:26 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-09-12 02:26 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-09-12 02:26 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-09-12 02:26 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-09-12 02:26 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-09-12 02:26 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-09-12 02:26 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-09-12 02:26 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-09-12 02:26 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-09-12 02:26 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-09-12 02:26 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-09-12 02:26 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-09-12 02:26 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-09-12 02:26 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-09-12 02:26 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-09-12 02:26 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-09-12 02:01 - 2014-09-12 02:03 - 04172825 _____ () C:\Users\Bartek\Downloads\Latency.rar 2014-09-11 22:18 - 2014-09-11 22:18 - 00001243 _____ () C:\Users\Bartek\Desktop\Paint.lnk 2014-09-11 03:13 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-09-11 03:13 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-09-11 03:01 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-09-11 03:01 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-09-11 03:01 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-09-11 03:01 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-09-11 01:40 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-11 01:40 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-11 01:40 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-09-11 01:40 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-09-11 01:40 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-09-11 01:40 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-09-11 01:40 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-09-06 20:18 - 2014-09-06 20:18 - 00275632 _____ () C:\Windows\Minidump\090614-31449-01.dmp 2014-09-06 00:08 - 2014-09-06 00:08 - 00000000 _____ () C:\Users\Bartek\Downloads\Pozdrowienia_z_Chorwacji.zip 2014-09-04 07:25 - 2014-09-04 07:25 - 237237153 _____ () C:\Users\Bartek\Downloads\korf.rar 2014-09-01 20:57 - 2014-09-02 15:02 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\BoL 2014-09-01 20:53 - 2014-09-01 20:54 - 00000000 ____D () C:\Users\Bartek\Desktop\bol 2014-09-01 20:16 - 2014-09-01 20:17 - 10339653 _____ () C:\Users\Bartek\Downloads\BoL+Studio.rar 2014-08-31 15:24 - 2014-08-31 15:56 - 00043411 _____ () C:\Users\Bartek\Desktop\Bartek Pietrzyk tabelka Sierpień 2014.xlsx 2014-08-28 21:07 - 2014-08-28 21:21 - 00000000 ____D () C:\Users\Bartek\Desktop\Korfu 2014-08-27 19:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-27 19:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-27 19:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-24 21:20 - 2014-09-24 21:18 - 00009222 _____ () C:\Users\Bartek\Desktop\FRST.txt 2014-09-24 21:20 - 2010-09-14 03:03 - 01338660 _____ () C:\Windows\WindowsUpdate.log 2014-09-24 21:18 - 2014-04-20 19:03 - 00000000 ____D () C:\FRST 2014-09-24 21:17 - 2014-09-24 21:17 - 00006268 _____ () C:\Users\Bartek\Desktop\AdwCleaner[S0].txt 2014-09-24 21:15 - 2014-06-12 18:52 - 00003356 _____ () C:\Windows\System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1813054588-749713010-1817662991-1000 2014-09-24 21:15 - 2014-06-12 18:52 - 00003224 _____ () C:\Windows\System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1813054588-749713010-1817662991-1000 2014-09-24 21:15 - 2010-09-14 03:52 - 00354384 _____ () C:\Windows\PFRO.log 2014-09-24 21:15 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-09-24 21:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-24 21:15 - 2009-07-14 06:51 - 00159617 _____ () C:\Windows\setupact.log 2014-09-24 21:14 - 2014-09-24 21:13 - 00000000 ____D () C:\AdwCleaner 2014-09-24 21:14 - 2013-12-24 14:48 - 00000000 ____D () C:\Windows\system32\log 2014-09-24 21:14 - 2010-12-24 16:04 - 00000000 ____D () C:\Users\Bartek 2014-09-24 21:13 - 2014-09-24 21:13 - 01373475 _____ () C:\Users\Bartek\Downloads\adwcleaner_3.310.exe 2014-09-24 21:11 - 2009-07-14 06:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-24 21:11 - 2009-07-14 06:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-24 21:02 - 2010-12-24 17:26 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job 2014-09-24 21:01 - 2013-10-30 21:56 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000UA.job 2014-09-24 21:01 - 2013-10-30 21:56 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job 2014-09-24 21:01 - 2011-09-13 21:55 - 00000000 ____D () C:\Windows\pss 2014-09-24 20:52 - 2014-09-21 20:40 - 02106880 _____ (Farbar) C:\Users\Bartek\Desktop\FRST64.exe 2014-09-24 20:51 - 2014-09-24 20:51 - 00003128 _____ () C:\Windows\System32\Tasks\{21119E0B-C5E4-46DB-A3FA-B68FBDF8176D} 2014-09-24 20:49 - 2013-01-15 23:29 - 00000000 ____D () C:\Users\Bartek\AppData\Local\Ubisoft Game Launcher 2014-09-24 20:49 - 2011-10-26 20:50 - 00000000 ____D () C:\Program Files (x86)\MyFree Codec 2014-09-24 20:47 - 2011-03-06 21:01 - 00000000 ____D () C:\Program Files (x86)\Java 2014-09-24 20:42 - 2010-12-26 12:43 - 00000000 ____D () C:\Users\Bartek\AppData\Local\Adobe 2014-09-24 20:42 - 2010-09-14 03:33 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-24 20:42 - 2010-09-14 03:33 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-24 20:41 - 2011-01-29 15:12 - 00000000 ____D () C:\Windows\SysWOW64\Adobe 2014-09-24 20:41 - 2010-09-14 03:31 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-09-24 19:58 - 2010-12-24 17:26 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1813054588-749713010-1817662991-1000Core.job 2014-09-24 19:53 - 2010-12-24 16:30 - 00003998 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{FC9BF907-DD13-4969-8723-85E6F8A9C577} 2014-09-21 23:20 - 2014-09-21 23:20 - 00096098 _____ () C:\Users\Bartek\Downloads\Extras.Txt 2014-09-21 23:18 - 2014-09-21 23:18 - 00110704 _____ () C:\Users\Bartek\Downloads\OTL.Txt 2014-09-21 20:52 - 2014-09-21 20:52 - 00602112 _____ (OldTimer Tools) C:\Users\Bartek\Downloads\OTL.exe 2014-09-21 20:44 - 2014-09-21 20:44 - 00103796 _____ () C:\Users\Bartek\Downloads\Shortcut.txt 2014-09-21 20:44 - 2014-09-21 20:43 - 00045805 _____ () C:\Users\Bartek\Downloads\Addition.txt 2014-09-21 20:44 - 2014-09-21 20:41 - 00037315 _____ () C:\Users\Bartek\Downloads\FRST.txt 2014-09-21 20:42 - 2014-09-21 20:42 - 00380416 _____ () C:\Users\Bartek\Downloads\938mzrcx.exe 2014-09-15 09:06 - 2011-06-15 13:47 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-09-12 10:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-09-12 02:24 - 2010-12-24 21:36 - 01653520 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-09-12 02:24 - 2010-09-14 05:54 - 00744510 _____ () C:\Windows\system32\perfh015.dat 2014-09-12 02:24 - 2010-09-14 05:54 - 00157702 _____ () C:\Windows\system32\perfc015.dat 2014-09-12 02:24 - 2009-07-14 07:13 - 01653520 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-12 02:23 - 2013-09-26 03:17 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-12 02:07 - 2010-12-27 21:50 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-12 02:03 - 2014-09-12 02:01 - 04172825 _____ () C:\Users\Bartek\Downloads\Latency.rar 2014-09-11 22:18 - 2014-09-11 22:18 - 00001243 _____ () C:\Users\Bartek\Desktop\Paint.lnk 2014-09-11 03:01 - 2014-05-07 03:17 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-07 09:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-06 20:18 - 2014-09-06 20:18 - 00275632 _____ () C:\Windows\Minidump\090614-31449-01.dmp 2014-09-06 20:18 - 2011-04-25 11:15 - 520946989 _____ () C:\Windows\MEMORY.DMP 2014-09-06 20:18 - 2011-04-25 11:15 - 00000000 ____D () C:\Windows\Minidump 2014-09-06 00:08 - 2014-09-06 00:08 - 00000000 _____ () C:\Users\Bartek\Downloads\Pozdrowienia_z_Chorwacji.zip 2014-09-05 04:10 - 2014-09-11 01:40 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 04:05 - 2014-09-11 01:40 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 07:25 - 2014-09-04 07:25 - 237237153 _____ () C:\Users\Bartek\Downloads\korf.rar 2014-09-02 15:02 - 2014-09-01 20:57 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\BoL 2014-09-01 20:54 - 2014-09-01 20:53 - 00000000 ____D () C:\Users\Bartek\Desktop\bol 2014-09-01 20:17 - 2014-09-01 20:16 - 10339653 _____ () C:\Users\Bartek\Downloads\BoL+Studio.rar 2014-08-31 22:56 - 2011-02-04 23:56 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\TS3Client 2014-08-31 15:56 - 2014-08-31 15:24 - 00043411 _____ () C:\Users\Bartek\Desktop\Bartek Pietrzyk tabelka Sierpień 2014.xlsx 2014-08-31 10:53 - 2010-12-25 10:40 - 00000000 ____D () C:\Users\Bartek\AppData\Roaming\Skype 2014-08-28 22:01 - 2014-08-20 13:14 - 00000000 ____D () C:\Users\Bartek\Desktop\Grecja 2014 2014-08-28 21:21 - 2014-08-28 21:07 - 00000000 ____D () C:\Users\Bartek\Desktop\Korfu 2014-08-28 20:16 - 2009-07-14 06:45 - 00416208 _____ () C:\Windows\system32\FNTCACHE.DAT Some content of TEMP: ==================== C:\Users\Bartek\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-09-17 23:27 ==================== End Of Log ============================