Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-11-2014 01
Ran by BB1 (administrator) on AK on 08-11-2014 21:18:37
Running from C:\FRST
Loaded Profile: BB1 (Available profiles: BB1)
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Program Files\CDBurnerXP\NMSAccessU.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Marek Jasinski - www.FreeCommander.com) C:\Program Files\FreeCommander\FreeCommander.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4915200 2008-02-13] (Realtek Semiconductor)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-10-14] (Hewlett-Packard)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1579964985-3426180906-2269987189-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-07-25] (Samsung)
HKU\S-1-5-21-1579964985-3426180906-2269987189-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-1579964985-3426180906-2269987189-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\BB1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk
ShortcutTarget: Powiadomienia monitorowania tuszu - HP Deskjet 1510 series.lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\BB1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk
ShortcutTarget: Tworzenie wycinków ekranu i uruchamianie programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141107
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB4D0C891B70ECA01
URLSearchHook: HKLM - Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
URLSearchHook: HKCU - Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
URLSearchHook: HKCU - (No Name) - {c2db4fe6-8409-45ce-8010-189a7b5cce86} -  No File
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKLM - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://isearch.avg.com/search?cid={7B39E381-AF5D-4251-9093-EDED203DC7C1}&mid=547ed8b60b5e47d09317d1569676c6ce-cd057674818d3d359bd7fb4b61be906e948a228e&lang=pl&ds=xn011&pr=sa&d=2012-10-13 19:29:17&v=13.0.0.7&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = 
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
BHO: Winamp Toolbar Loader -> {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} -> C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} ->  No File
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
Toolbar: HKCU - No Name - {3041D03E-FD4B-44E0-B742-2D9B88305F98} -  No File
Toolbar: HKCU - Winamp Toolbar - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
Toolbar: HKCU - No Name - {C2DB4FE6-8409-45CE-8010-189A7B5CCE86} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.0.0\\npsitesafety.dll (AVG Technologies)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\searchplugins\winamp-search.xml
FF Extension: easytoshop - C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\Extensions\ijP4BaU@g.edu [2014-11-07]
FF Extension: Raiffeisen SignPlugin - C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\Extensions\SignPlugin@Raiffeisen.com [2012-03-29]
FF Extension: LastPass - C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\Extensions\support@lastpass.com [2014-03-29]
FF Extension: FEBE - C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-09-15]
FF Extension: Adblock Plus - C:\Users\BB1\AppData\Roaming\Mozilla\Firefox\Profiles\bwypr3jb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-12-14]
FF Extension: Skype extension for Firefox - C:\Program Files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2014-11-07]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-01]
FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\13.0.0.7
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\13.0.0.7 [2012-10-13]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\BB1\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adobe Edge Inspect CC) - C:\Users\BB1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijoeapleklopieoejahbpdnhkjjgddem [2014-11-07]
CHR Extension: (greatsaving) - C:\Users\BB1\AppData\Local\Google\Chrome\User Data\Default\Extensions\llofnbdjhdacelcdfppijfmlbaaonfop [2014-11-07]
CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\13.0.0.7\avg.crx [2012-10-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 GEST Service; C:\Program Files\GIGABYTE\GEST\GSvr.exe [47624 2007-12-14] ()
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [139264 2007-11-06] (Hewlett-Packard Co.) [File not signed]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 NMSAccess; C:\Program Files\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 Update EnterDigital; "C:\Program Files\EnterDigital\updateEnterDigital.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ET5Drv; C:\Windows\system32\Drivers\ET5Drv.sys [30008 2007-10-11] (Windows (R) 2000 DDK provider)
S3 gdrv; C:\Windows\gdrv.sys [16608 2009-07-02] (Windows (R) 2000 DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [9728 2007-01-15] (Microsoft Corporation)
R3 RTL85n86; C:\Windows\System32\DRIVERS\RTL85n86.sys [311808 2006-11-02] (Realtek)
S3 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S1 MpKsl4f5e237f; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E8AECBA2-57A7-4ACF-908E-D0E25DA5E810}\MpKsl4f5e237f.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-08 20:43 - 2014-11-08 21:18 - 00000000 ____D () C:\FRST
2014-11-08 19:57 - 2014-11-08 20:33 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-08 19:52 - 2014-11-08 19:52 - 00000905 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-08 19:52 - 2014-11-08 19:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-08 19:51 - 2014-11-08 19:51 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-08 19:51 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-08 19:51 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-08 19:51 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-08 19:47 - 2014-11-08 19:48 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\BB1\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-07 12:31 - 2014-11-07 12:32 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-07 05:06 - 2014-11-07 05:33 - 00000000 ____D () C:\AdwCleaner
2014-11-07 05:04 - 2014-11-07 05:04 - 01998336 _____ () C:\Users\BB1\Downloads\adwcleaner_4.002_www.INSTALKI.pl.exe
2014-11-07 04:48 - 2014-11-07 04:48 - 00000355 _____ () C:\Users\BB1\Desktop\spyhunt.txt
2014-11-07 03:24 - 2014-11-07 03:24 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-11-07 03:23 - 2014-11-07 13:32 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-11-07 03:23 - 2014-11-07 03:23 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-11-07 03:22 - 2014-11-07 03:22 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\BB1\Downloads\SpyHunter-installer.exe
2014-11-07 02:38 - 2014-11-07 02:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
2014-11-07 02:38 - 2014-11-07 02:38 - 00000000 ____D () C:\Program Files\Xvid
2014-11-07 02:38 - 2014-10-19 18:12 - 00638976 _____ () C:\Windows\system32\xvidcore.dll
2014-11-07 02:38 - 2014-10-19 18:12 - 00235520 _____ () C:\Windows\system32\xvidvfw.dll
2014-11-07 02:38 - 2014-10-19 18:12 - 00147456 _____ () C:\Windows\system32\xvid.ax
2014-11-07 02:28 - 2014-11-07 02:28 - 00000917 _____ () C:\Users\BB1\Desktop\Continue XviD installation.lnk
2014-11-07 02:27 - 2014-11-07 02:26 - 11267880 _____ (Xvid Team) C:\Users\BB1\Downloads\Xvid-1.3.3-20141019.exe
2014-11-07 01:30 - 2014-11-07 01:30 - 00000000 ____D () C:\Program Files\dealpeak
2014-11-07 00:10 - 2014-11-07 01:30 - 00000000 ____D () C:\ProgramData\af605e765fe8a99d
2014-11-06 23:52 - 2014-11-06 23:53 - 00244312 _____ () C:\Users\BB1\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 23:52 - 2014-11-06 23:52 - 00244312 _____ () C:\Users\BB1\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 23:44 - 2014-11-06 23:44 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-11-06 23:44 - 2014-11-06 23:44 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-06 23:34 - 2014-11-08 13:11 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-11-06 23:34 - 2014-11-06 23:34 - 00000864 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-06 23:34 - 2014-11-06 23:34 - 00000852 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-06 23:27 - 2014-11-06 23:32 - 00000952 _____ () C:\Users\BB1\Desktop\Continue Firefox installation.lnk
2014-11-06 22:49 - 2014-11-08 20:30 - 00040938 _____ () C:\Windows\PFRO.log
2014-11-05 12:36 - 2014-11-05 12:36 - 00018207 _____ () C:\Users\BB1\Desktop\Yahoo Search - Web Search.html
2014-11-04 18:07 - 2014-11-04 18:07 - 00121007 _____ () C:\Users\BB1\Desktop\Google.html
2014-11-04 18:07 - 2014-11-04 18:07 - 00000000 ____D () C:\Users\BB1\Desktop\Google_files
2014-10-29 23:37 - 2014-11-08 20:30 - 00000000 ____D () C:\ProgramData\dfed7653-07f4-44f2-abaa-a70c946c17c3
2014-10-27 20:54 - 2014-10-29 00:08 - 00000000 ____D () C:\Users\BB1\Desktop\2014-REZERWACJE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-08 21:15 - 2009-07-02 11:03 - 00000414 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{B7FE35DB-5C20-482A-B782-40CCE7940F92}.job
2014-11-08 20:56 - 2011-03-15 22:22 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-08 20:38 - 2006-11-02 13:52 - 01611233 _____ () C:\Windows\WindowsUpdate.log
2014-11-08 20:30 - 2014-05-12 08:39 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cef2ccdc5a3f47.job
2014-11-08 20:30 - 2013-10-11 18:29 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cc05a1d2dd65c.job
2014-11-08 20:30 - 2011-03-15 22:22 - 00001026 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-08 20:30 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-08 20:30 - 2006-11-02 13:47 - 00004112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-08 20:30 - 2006-11-02 13:47 - 00004112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-08 20:29 - 2006-11-02 14:01 - 00032532 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-08 20:28 - 2006-11-02 13:37 - 00000000 ____D () C:\Windows\twain_32
2014-11-08 20:25 - 2014-07-13 20:24 - 00000000 ____D () C:\Program Files\globalUpdate
2014-11-08 19:51 - 2011-06-09 21:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-07 02:41 - 2009-10-11 12:15 - 00025088 _____ () C:\Users\BB1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-07 01:50 - 2006-12-05 06:22 - 00671902 _____ () C:\Windows\system32\perfh015.dat
2014-11-07 01:50 - 2006-12-05 06:22 - 00130310 _____ () C:\Windows\system32\perfc015.dat
2014-11-07 01:50 - 2006-11-02 11:33 - 01495264 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-07 01:23 - 2006-11-02 11:23 - 00000246 _____ () C:\Windows\win.ini
2014-11-06 23:44 - 2009-08-23 23:00 - 00000000 ____D () C:\Users\BB1\AppData\Local\Adobe
2014-11-06 23:06 - 2014-07-13 20:23 - 00000000 ____D () C:\Program Files\Yawtix
2014-11-06 23:01 - 2009-07-01 21:45 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-11-06 22:55 - 2013-10-25 23:32 - 00000000 ____D () C:\Program Files\MyFree Codec
2014-11-06 22:41 - 2009-07-02 07:34 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-11-06 22:33 - 2009-08-23 22:35 - 00000000 ____D () C:\Program Files\Adobe
2014-11-06 18:58 - 2014-10-08 22:43 - 00000000 ____D () C:\Users\BB1\Desktop\GRANICZNA 45F- SPRZEDAŻ
2014-11-04 23:11 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-04 23:08 - 2013-10-25 23:40 - 00001789 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2014-11-04 23:07 - 2009-07-01 21:33 - 00000000 ____D () C:\Users\BB1
2014-10-30 14:07 - 2014-06-30 23:19 - 00000000 ____D () C:\Users\BB1\Desktop\DRUKI-UM-NAJ-UŻYTK
2014-10-30 14:04 - 2014-06-30 23:29 - 00000000 ____D () C:\Users\BB1\Desktop\UMOWY REZERWACYJNE, PRZEDWSTĘPNE-WZORY
2014-10-30 12:24 - 2009-10-13 10:32 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-30 01:02 - 2014-07-24 15:32 - 00000000 ____D () C:\Users\BB1\Desktop\UMOWY POŚREDNICTWA-2014-DRUK
2014-10-28 17:01 - 2011-03-15 22:24 - 00001983 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-10-28 00:19 - 2011-12-18 01:25 - 00000000 ____D () C:\Users\BB1\.gimp-2.4
2014-10-27 23:55 - 2014-07-08 20:39 - 00000000 ____D () C:\Users\BB1\Desktop\2014-UM-REZ-SP-PROT-UZGODNIEŃ
2014-10-27 00:22 - 2014-07-24 18:03 - 00000000 ____D () C:\Users\BB1\Desktop\DOK-DARKA-NEW-LICENCJE - Kopia
2014-10-23 17:23 - 2012-05-19 00:14 - 00000000 ____D () C:\Users\BB1\Desktop\ANETA
2014-10-17 10:08 - 2009-07-13 20:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-17 10:07 - 2013-08-16 10:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 09:54 - 2006-11-02 11:24 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-10-16 19:22 - 2014-08-18 23:39 - 00000000 ____D () C:\Users\BB1\Desktop\DO PRZYJĘCIA

Some content of TEMP:
====================
C:\Users\BB1\AppData\Local\Temp\SHSetup.exe
C:\Users\BB1\AppData\Local\Temp\sqlite3.dll
C:\Users\BB1\AppData\Local\Temp\_isA708.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-08 20:38

==================== End Of Log ============================