Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-10-2014
Ran by Tosia (administrator) on TOSIA-KOMPUTER on 21-10-2014 13:23:07
Running from C:\Users\Tosia\Desktop
Loaded Profile: Tosia (Available profiles: Tosia)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
() C:\ProgramData\2ce8e63b-5e53-4efc-b4cf-6a6e52e017a4\maintainer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(UltraVNC) C:\Program Files\uvnc bvba\UltraVNC\winvnc.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3593744 2014-09-05] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {078c57f6-34f6-11e3-9641-001e6868bf1e} - E:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {078c5810-34f6-11e3-9641-001e6868bf1e} - G:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {1f1c8625-2633-11e4-947e-001e6868bf1e} - E:\LGAutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {25101291-a068-11e3-a12b-001e6868bf1e} - E:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {75d3cf8a-3d45-11e3-a0f4-001e6868bf1e} - E:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {7d75ca73-e1e3-11e3-bc88-001e6868bf1e} - E:\AutoRun.exe
HKU\S-1-5-21-3540718366-3431534050-1744074-1000\...\MountPoints2: {b8134048-36e9-11e3-ba20-001e6868bf1e} - E:\AutoRun.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
SearchScopes: HKCU - {044384BA-0092-4206-9230-55AE3492A442} URL = http://rts.dsrlte.com/?q={searchTerms}&r=50
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)

Chrome: 
=======

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1459872 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 Huawei E3272; C:\ProgramData\MobileBrServ\mbbservice.exe [240720 2013-12-03] ()
R2 MaintainerSvc1.47.6049145; C:\ProgramData\2ce8e63b-5e53-4efc-b4cf-6a6e52e017a4\maintainer.exe [117248 2014-10-21] () [File not signed]
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [204056 2014-07-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147736 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [193304 2014-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [230680 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [98584 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [199448 2014-07-02] (AVG Technologies CZ, s.r.o.)
S3 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-21 13:23 - 2014-10-21 13:23 - 00007717 _____ () C:\Users\Tosia\Desktop\FRST.txt
2014-10-21 13:20 - 2014-10-21 13:20 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-21 13:03 - 2014-10-21 13:16 - 00000000 ____D () C:\AdwCleaner
2014-10-21 12:08 - 2014-10-21 12:08 - 01962496 _____ () C:\Users\Tosia\Desktop\adwcleaner_4.001.exe
2014-10-21 11:38 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-21 11:38 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-10-21 11:34 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-10-21 11:34 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-10-21 11:34 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-10-21 11:34 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-10-21 11:34 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-10-21 11:34 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-10-21 11:34 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-10-21 11:34 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-10-21 11:34 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-10-21 11:34 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-10-21 11:34 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-21 11:34 - 2013-10-01 22:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-21 11:34 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-10-21 11:34 - 2012-08-23 16:46 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\terminpt.sys
2014-10-21 11:34 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-10-21 11:34 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-10-21 11:33 - 2014-10-21 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-10-21 11:33 - 2014-10-21 11:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-10-21 11:32 - 2014-10-21 11:32 - 00000000 ____D () C:\Program Files\CONEXANT
2014-10-21 11:07 - 2014-10-21 11:07 - 00144984 _____ () C:\Windows\Minidump\102114-39078-01.dmp
2014-10-21 11:07 - 2014-10-21 11:07 - 00000000 ____D () C:\Windows\Minidump
2014-10-21 11:06 - 2014-10-21 11:06 - 276749851 _____ () C:\Windows\MEMORY.DMP
2014-10-21 10:54 - 2014-10-21 10:54 - 00380416 _____ () C:\Users\Tosia\Desktop\qvmtyo96.exe
2014-10-21 10:50 - 2014-10-21 10:50 - 00602112 _____ (OldTimer Tools) C:\Users\Tosia\Desktop\OTL.exe
2014-10-21 10:47 - 2014-10-21 13:23 - 00000000 ____D () C:\FRST
2014-10-21 10:46 - 2014-10-21 10:46 - 01102336 _____ (Farbar) C:\Users\Tosia\Desktop\FRST.exe
2014-10-21 10:40 - 2014-10-21 10:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraVNC
2014-10-21 10:40 - 2014-10-21 10:40 - 00000000 ____D () C:\Program Files\uvnc bvba
2014-10-21 10:39 - 2014-10-21 10:39 - 03377384 _____ (uvnc bvba ) C:\Users\Tosia\Downloads\UltraVNC_1_2_03_X86_Setup.exe
2014-10-19 16:35 - 2014-10-19 20:53 - 00000000 ____D () C:\Users\Tosia\Desktop\cabrio
2014-10-18 22:24 - 2014-10-18 22:24 - 00896584 _____ (Elex do Brasil Participações Ltda) C:\Users\Tosia\Downloads\yet_another_cleaner_reh.exe
2014-10-18 21:55 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 21:55 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 21:55 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 21:55 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 21:55 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 21:55 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 21:55 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 21:55 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 21:55 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 21:55 - 2014-09-19 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 21:55 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 21:55 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 21:55 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 21:55 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 21:55 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 21:55 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 21:55 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 21:55 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 21:55 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 21:55 - 2014-09-19 02:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 21:55 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 21:55 - 2014-09-19 02:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 21:55 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 21:55 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 21:55 - 2014-09-19 02:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 21:55 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 21:55 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 21:55 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 21:55 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 21:55 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 21:54 - 2014-10-10 03:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 21:54 - 2014-10-10 03:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 21:54 - 2014-10-10 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 21:54 - 2014-09-29 02:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 21:53 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 21:51 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 21:51 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 21:51 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 21:50 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 21:50 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 21:50 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 21:50 - 2014-07-17 03:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 21:50 - 2014-07-17 03:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 21:50 - 2014-07-17 03:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 21:50 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 21:50 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 21:50 - 2014-07-17 03:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-18 21:50 - 2014-07-17 03:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-10 16:43 - 2014-10-21 13:12 - 00000560 _____ () C:\Windows\setupact.log
2014-10-10 16:43 - 2014-10-10 16:43 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-10 16:42 - 2014-10-21 13:12 - 00001940 _____ () C:\Windows\PFRO.log
2014-10-10 16:29 - 2014-10-10 16:29 - 04964600 _____ (Piriform Ltd) C:\Users\Tosia\Downloads\ccsetup418pro.exe
2014-10-10 16:29 - 2014-10-10 16:29 - 04964600 _____ (Piriform Ltd) C:\Users\Tosia\Downloads\ccsetup418pro (1).exe
2014-10-10 16:23 - 2014-10-10 16:23 - 00000000 ____D () C:\ProgramData\Avg_Update_0914av
2014-10-10 16:21 - 2014-10-10 16:21 - 00000000 ____D () C:\Users\Tosia\AppData\Roaming\AVG2015
2014-10-10 16:20 - 2014-10-10 16:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-10-10 16:20 - 2014-10-10 16:20 - 00000925 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2014-10-10 16:20 - 2014-10-10 16:20 - 00000000 ____D () C:\Users\Tosia\AppData\Roaming\TuneUp Software
2014-10-10 16:19 - 2014-10-10 16:21 - 00000000 ____D () C:\ProgramData\AVG2015
2014-10-10 16:19 - 2014-10-10 16:19 - 00000000 ___HD () C:\$AVG
2014-10-10 16:19 - 2014-10-10 16:19 - 00000000 ____D () C:\Program Files\AVG
2014-10-10 16:18 - 2014-10-21 11:33 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-10 16:18 - 2014-10-10 16:23 - 00000000 ____D () C:\Users\Tosia\AppData\Local\Avg2015
2014-10-10 16:18 - 2014-10-10 16:18 - 04578040 _____ (AVG Technologies) C:\Users\Tosia\Downloads\avg_free_stb_all_2015_5315_ppc1.exe
2014-10-10 16:18 - 2014-10-10 16:18 - 00000000 ____D () C:\Users\Tosia\AppData\Local\MFAData
2014-10-10 16:16 - 2014-10-10 16:16 - 04578040 _____ (AVG Technologies) C:\Users\Tosia\Downloads\Niepotwierdzony 427769.crdownload
2014-10-10 16:14 - 2014-10-21 13:21 - 00000000 ____D () C:\Program Files\Google
2014-10-10 16:14 - 2014-10-10 16:14 - 00000000 ____D () C:\Users\Tosia\AppData\Local\Google
2014-10-10 16:13 - 2014-10-10 16:14 - 00000000 ____D () C:\Users\Tosia\AppData\Local\Deployment
2014-10-10 16:13 - 2014-10-10 16:13 - 00000000 ____D () C:\Users\Tosia\AppData\Local\Apps\2.0
2014-10-07 22:10 - 2014-10-21 10:48 - 00000000 ____D () C:\ProgramData\2ce8e63b-5e53-4efc-b4cf-6a6e52e017a4
2014-10-01 21:55 - 2014-10-21 11:52 - 00000472 __RSH () C:\ProgramData\ntuser.pol
2014-10-01 21:11 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-09-26 21:41 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-21 13:20 - 2013-10-14 15:30 - 00000000 ____D () C:\ProgramData\Adobe
2014-10-21 13:20 - 2009-07-14 06:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-21 13:20 - 2009-07-14 06:34 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-21 13:17 - 2013-10-14 12:45 - 01689917 _____ () C:\Windows\WindowsUpdate.log
2014-10-21 13:12 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-21 13:06 - 2013-10-14 12:48 - 00000000 ____D () C:\Users\Tosia
2014-10-21 13:06 - 2009-07-14 04:04 - 00000580 _____ () C:\Windows\win.ini
2014-10-21 12:24 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-10-21 11:41 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-21 11:38 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-10-19 20:59 - 2014-05-18 16:19 - 00000000 ____D () C:\Users\Tosia\Desktop\LAGUNA
2014-10-19 20:58 - 2013-10-15 12:55 - 00000000 ____D () C:\Users\Tosia\Desktop\NIEWYSTAWIONE
2014-10-19 20:55 - 2014-04-03 21:39 - 00000000 ____D () C:\Users\Tosia\Desktop\ANGLIA
2014-10-19 20:55 - 2013-10-15 12:54 - 00000000 ____D () C:\Users\Tosia\Desktop\Auta
2014-10-19 16:34 - 2009-07-14 06:33 - 00411240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-19 16:31 - 2014-05-26 21:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 22:47 - 2013-10-14 15:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-18 22:44 - 2013-10-19 16:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-18 22:41 - 2013-10-19 16:20 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-12 19:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-10-10 16:41 - 2013-10-14 15:30 - 00000000 ____D () C:\Users\Tosia\AppData\Roaming\AIMP3
2014-10-10 16:41 - 2013-10-14 13:41 - 00000000 ____D () C:\Windows\Panther
2014-10-10 16:18 - 2013-10-14 15:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-10-10 16:12 - 2013-10-14 19:46 - 00000000 ____D () C:\Program Files\Opera
2014-10-01 21:03 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2014-09-22 08:41 - 2013-10-14 15:31 - 00231568 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Tosia\AppData\Local\Temp\Quarantine.exe
C:\Users\Tosia\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-10 17:41

==================== End Of Log ============================