Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-11-2014 01 Ran by Gosia (administrator) on GOSIA-PC on 23-11-2014 00:57:14 Running from C:\Users\Gosia\Downloads Loaded Profile: Gosia (Available profiles: Gosia) Platform: Microsoft® Windows Vista™ Home Basic (X86) OS Language: Polski (Polska) Internet Explorer Version 7 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Agere Systems) C:\Windows\System32\agrsmsvc.exe () C:\Program Files\Canon\IJPLM\ijplmsvc.exe () C:\Program Files\LG Software\System Control Manager\edd.exe (O2Micro International) C:\Program Files\O2Micro Oz128 Driver\o2flash.exe (Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Google Inc.) C:\Program Files\Google\Update\1.3.25.11\GoogleCrashHandler.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (BIT LEADER) C:\Program Files\lg_swupdate\GiljabiStart.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (MSI) C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (ArcticLine Software) C:\Program Files\Jet Screenshot\jetScreenshot.exe (Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Redefine Sp z o.o.) C:\Program Files\ipla\ipla.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1006264 2013-01-22] (Microsoft Corporation) HKLM\...\Run: [iPlusManager] => C:\Program Files\iPlus\iPlusChecker.exe [446464 2009-12-21] () HKLM\...\Run: [LG Intelligent Update] => C:\Program Files\lg_swupdate\giljabistart.exe [247088 2007-09-28] (BIT LEADER) HKLM\...\Run: [MGSysCtrl] => C:\Program Files\LG Software\System Control Manager\MGSysCtrl.exe [565248 2007-07-06] (MSI) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-04-03] (CANON INC.) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1603152 2007-04-03] (CANON INC.) HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM\...\Run: [OpwareSE4] => C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [Jet Screenshot] => C:\Program Files\Jet Screenshot\jetScreenshot.exe [1954056 2013-01-11] (ArcticLine Software) HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-08-17] (Google Inc.) HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [IPLA!] => C:\Program Files\ipla\ipla.exe [21421664 2014-08-12] (Redefine Sp z o.o.) HKU\S-1-5-21-559585761-812252448-234664116-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=41460&tid=2938&st=bs&q= HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.certified-toolbar.com?si=41460&st=home&tid=2938 HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=41460&tid=2938&st=bs&q= HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=41460&tid=2938&st=bs&q= HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=D6E10015AF704DD2&affID=119357&tsp=5009 HKU\S-1-5-21-559585761-812252448-234664116-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1394463553&from=cor&uid=HitachiXHTS542516K9A300_071224BB0300WCJ7HXUCX HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm URLSearchHook: HKU\S-1-5-21-559585761-812252448-234664116-1000 - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394463553&from=cor&uid=HitachiXHTS542516K9A300_071224BB0300WCJ7HXUCX&q={searchTerms} SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=D6E10015AF704DD2&affID=127886&tsp=5180 SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = http://www.search.ask.com/web?tpid=ORJ-V7-SAT&o=APN11461&pf=V7&p2=%5EBE7%5EOSJ000%5EYY%5EPL&gct=sb&itbv=12.10.6.53&apn_uid=6AAFB0B1-AC35-474F-9FB3-0551CF6D6FF4&apn_ptnrs=BE7&apn_dtid=%5EOSJ000%5EYY%5EPL&apn_dbr=Opera.exe_0_12.17.1863.0&doi=2014-05-22&trgb=IE&q={searchTerms}&psv= SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1394463553&from=cor&uid=HitachiXHTS542516K9A300_071224BB0300WCJ7HXUCX&q={searchTerms} SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://www.yd.delta-search.com/?q={searchTerms}&affID=119535&tt=030213_yd&babsrc=SP_ss&mntrId=d6e1c958000000000000000000000000 BHO: No Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> No File BHO: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files\SupTab\SupTab.dll No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Toolbar: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> No Name - {434D452D-5637-006A-76A7-7A786E7484D7} - No File Toolbar: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKU\S-1-5-21-559585761-812252448-234664116-1000 -> No Name - {4F524A2D-5637-2D53-4154-7A786E7484D7} - No File DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 62.179.1.63 62.179.1.62 FireFox: ======== Chrome: ======= CHR Profile: C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-10] CHR Extension: (Google Docs) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-10] CHR Extension: (Google Drive) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-10] CHR Extension: (YouTube) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-10] CHR Extension: (Google Search) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-10] CHR Extension: (HDvid Codec 3) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo [2014-09-29] CHR Extension: (Google Sheets) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-10] CHR Extension: (Google Wallet) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-09] CHR Extension: (Gmail) - C:\Users\Gosia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-10] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [97432 2007-04-13] () [File not signed] R2 NishService; C:\Program Files\LG Software\System Control Manager\edd.exe [40960 2006-03-02] () [File not signed] R2 o2flash; C:\Program Files\O2Micro Oz128 Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [File not signed] S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe -service [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 E4LOADER; C:\Windows\System32\Drivers\e4ldr.sys [69656 2007-01-04] (Analog Deivces) S3 e4usbaw; C:\Windows\System32\DRIVERS\e4usbaw.sys [104344 2007-01-04] (Analog Devices Inc.) R3 MGHwCtrl; C:\Windows\system32\drivers\MGHwCtrl.sys [9088 2006-07-03] (Windows (R) 2000 DDK provider) [File not signed] S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-23 00:42 - 2014-11-23 00:55 - 00637301 _____ () C:\Users\Gosia\Downloads\avgremover.log 2014-11-23 00:20 - 2014-11-23 00:20 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Gosia\Downloads\avg_remover_stf_x86_2015_5501.exe 2014-11-22 23:58 - 2014-11-22 23:58 - 00896048 _____ () C:\Users\Gosia\Downloads\Norton_Removal_Tool.exe 2014-11-22 23:37 - 2014-11-22 23:38 - 01109504 _____ (Farbar) C:\Users\Gosia\Downloads\FRST.exe 2014-11-18 18:55 - 2014-11-18 18:55 - 00138504 _____ () C:\Windows\Minidump\Mini111814-01.dmp 2014-11-18 18:53 - 2014-11-18 18:53 - 06000640 _____ () C:\Program Files\GUTD623.tmp 2014-11-18 18:53 - 2014-11-18 18:53 - 00000000 ____D () C:\Program Files\GUMD622.tmp 2014-10-28 20:12 - 2014-11-23 00:15 - 00000000 ____D () C:\Users\Gosia\Desktop\diagnostyka 2014-10-28 18:47 - 2014-10-28 18:47 - 00039970 _____ () C:\Users\Gosia\Downloads\Extras.Txt 2014-10-28 18:44 - 2014-10-28 18:44 - 00162042 _____ () C:\Users\Gosia\Downloads\OTL.Txt 2014-10-28 18:28 - 2014-10-28 18:28 - 00053093 _____ () C:\Users\Gosia\Downloads\Shortcut.txt 2014-10-28 18:27 - 2014-10-28 18:28 - 00077355 _____ () C:\Users\Gosia\Downloads\Addition.txt 2014-10-28 18:26 - 2014-11-23 00:57 - 00012521 _____ () C:\Users\Gosia\Downloads\FRST.txt 2014-10-28 18:24 - 2014-11-23 00:57 - 00000000 ____D () C:\FRST 2014-10-28 17:30 - 2014-10-28 17:30 - 00000000 ____D () C:\Program Files\Common Files\Java(47) 2014-10-28 17:28 - 2014-10-28 17:28 - 00000000 ____D () C:\Program Files\Java(73) ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-23 00:56 - 2013-02-04 00:02 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\ipla 2014-11-23 00:56 - 2013-01-22 23:32 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\Skype 2014-11-23 00:55 - 2013-07-10 21:42 - 00001032 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-23 00:55 - 2013-06-23 23:33 - 00065536 _____ () C:\Windows\system32\Ikeext.etl 2014-11-23 00:55 - 2006-11-02 13:45 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-23 00:55 - 2006-11-02 13:45 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-23 00:54 - 2013-01-22 02:17 - 00248190 _____ () C:\Windows\PFRO.log 2014-11-23 00:54 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-23 00:53 - 2007-02-04 04:32 - 00000012 _____ () C:\Windows\bthservsdp.dat 2014-11-23 00:53 - 2006-11-02 13:58 - 00032508 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-11-23 00:53 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\tracing 2014-11-23 00:48 - 2013-01-23 09:20 - 00000000 ____D () C:\Users\Gosia\Desktop\Programy 2014-11-23 00:48 - 2013-01-22 01:55 - 00000000 ____D () C:\Users\Gosia 2014-11-23 00:36 - 2013-01-22 11:06 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-11-23 00:32 - 2013-01-22 10:43 - 01727432 _____ () C:\Windows\WindowsUpdate.log 2014-11-23 00:12 - 2013-07-10 21:42 - 00001036 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-22 23:49 - 2013-01-22 02:30 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-22 23:46 - 2014-08-26 15:30 - 00000000 ____D () C:\Users\Gosia\AppData\Local\Adobe 2014-11-22 23:46 - 2013-01-24 18:58 - 00000000 ____D () C:\ProgramData\Adobe 2014-11-22 23:46 - 2013-01-22 02:01 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2014-11-22 23:46 - 2013-01-22 02:01 - 00000000 ____D () C:\Program Files\Adobe 2014-11-22 23:36 - 2013-03-17 21:32 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\vlc 2014-11-19 19:59 - 2013-01-22 04:06 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-11-19 19:57 - 2013-07-11 04:49 - 00000000 ____D () C:\Windows\system32\MRT 2014-11-19 19:47 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-11-19 19:25 - 2014-02-06 15:41 - 00000000 ____D () C:\ProgramData\ipla 2014-11-18 18:55 - 2013-09-06 07:28 - 00000000 ____D () C:\Windows\Minidump 2014-11-18 18:55 - 2013-09-06 07:27 - 202131909 _____ () C:\Windows\MEMORY.DMP 2014-11-18 18:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool 2014-11-18 18:46 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration 2014-11-18 18:46 - 2006-11-02 11:22 - 29097984 _____ () C:\Windows\system32\config\software_previous 2014-11-18 18:46 - 2006-11-02 11:22 - 23068672 _____ () C:\Windows\system32\config\components_previous 2014-11-18 18:46 - 2006-11-02 11:22 - 14680064 _____ () C:\Windows\system32\config\system_previous 2014-11-18 18:46 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\default_previous 2014-11-18 18:46 - 2006-11-02 11:22 - 00053248 _____ () C:\Windows\system32\config\sam_previous 2014-11-18 18:46 - 2006-11-02 11:22 - 00020480 _____ () C:\Windows\system32\config\security_previous 2014-11-12 23:49 - 2013-01-22 02:30 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-11-12 23:49 - 2013-01-22 02:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-11-12 08:09 - 2007-02-03 11:20 - 00535568 _____ () C:\Windows\system32\perfh015.dat 2014-11-12 08:09 - 2007-02-03 11:20 - 00086416 _____ () C:\Windows\system32\perfc015.dat 2014-11-12 08:09 - 2006-11-02 11:33 - 01326240 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-10 20:31 - 2014-09-29 06:03 - 00001983 _____ () C:\Users\Gosia\Desktop\Google Chrome.lnk 2014-11-09 05:23 - 2014-09-29 21:39 - 00000000 ___RD () C:\Program Files\Skype 2014-11-09 05:23 - 2014-09-29 06:03 - 00000000 ____D () C:\Users\Gosia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-11-09 05:23 - 2014-09-29 05:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-11-09 05:23 - 2014-09-29 05:28 - 00000000 ____D () C:\Program Files\Common Files\Java 2014-11-09 05:23 - 2013-10-05 23:13 - 00000000 ____D () C:\Program Files\Java 2014-11-09 05:23 - 2013-07-10 21:41 - 00000000 ____D () C:\Users\Gosia\AppData\Local\Google 2014-11-09 05:23 - 2013-07-10 21:41 - 00000000 ____D () C:\Program Files\Google 2014-11-09 05:23 - 2006-11-02 12:18 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-09 05:10 - 2013-01-22 01:55 - 00001356 _____ () C:\Users\Gosia\AppData\Local\d3d9caps.dat 2014-11-09 04:25 - 2013-02-04 00:01 - 00000000 ____D () C:\Program Files\ipla 2014-11-04 05:50 - 2013-09-06 11:29 - 00000000 ____D () C:\Users\Gosia\Documents\Zdjęcia 2014-11-04 05:49 - 2013-02-25 10:29 - 00000000 ____D () C:\Users\Gosia\Documents\Kościół 2014-11-02 22:28 - 2013-01-22 02:01 - 00000000 ____D () C:\Users\Gosia\Documents\Dokumenty moje 2014-10-28 17:31 - 2013-10-05 23:16 - 00000000 ____D () C:\ProgramData\Oracle 2014-10-28 15:19 - 2013-03-04 12:12 - 00000000 ____D () C:\ProgramData\CanonIJPLM ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-22 23:33 ==================== End Of Log ============================