Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by ania (administrator) on ANIA-KOMPUTER on 27-11-2014 17:05:10
Running from C:\Users\ania\Downloads
Loaded Profiles: UpdatusUser & ania (Available profiles: UpdatusUser & ania & anuśka)
Platform: Windows 7 Home Premium (X64) OS Language: Polski (Polska)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Agnitum Ltd.) C:\Program Files (x86)\Agnitum\Outpost Firewall\outpost.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
() C:\Windows\SysWOW64\Rezip.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\Netia\Mobilny Internet\AssistantServices.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Netia\Mobilny Internet\UIExec.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe
(Google Inc.) C:\Users\anuśka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\anuśka\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\anuśka\AppData\Local\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10144288 2010-04-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2074408 2010-02-26] (Synaptics Incorporated)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePDRShortCut] => C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl8] => C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD8LanguageShortcut] => C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe [50472 2009-04-15] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2009-07-21] (CyberLink Corp.)
HKLM-x32\...\Run: [Microsoft Default Manager] => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
HKLM-x32\...\Run: [mcagent_exe] => C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe [1218008 2010-06-10] (McAfee, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2011-06-09] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [UIExec] => C:\Program Files (x86)\Netia\Mobilny Internet\UIExec.exe [138072 2010-03-02] ()
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [74752 2010-07-12] (Nullsoft, Inc.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [58602] => C:\PROGRA~3\LOCALS~1\Temp\mszfhxow.scr No File
HKU\S-1-5-21-1414786907-1554109764-266369702-1001\...\MountPoints2: {202a3df1-4232-11e3-aa1c-00a0c6000000} - H:\AutoRun.exe
HKU\S-1-5-21-1414786907-1554109764-266369702-1001\...\MountPoints2: {d2602893-a709-11e3-89c9-b4749f67458d} - F:\AutoRun.exe
HKU\S-1-5-21-1414786907-1554109764-266369702-1001\...\MountPoints2: {d26028aa-a709-11e3-89c9-b4749f67458d} - F:\AutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [95848 2010-05-06] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [90216 2010-05-06] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyEnable: [S-1-5-21-1414786907-1554109764-266369702-1001] => Internet Explorer proxy is enabled.
HKU\S-1-5-21-1414786907-1554109764-266369702-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://samsung.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-21-1414786907-1554109764-266369702-1001 -> DefaultScope {3505109F-BF6A-495E-881E-3499008A8BB2} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKU\S-1-5-21-1414786907-1554109764-266369702-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1414786907-1554109764-266369702-1001 -> {3505109F-BF6A-495E-881E-3499008A8BB2} URL = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{815D7EB4-B77E-43EF-B589-7639EED1296F}: [NameServer] 213.158.199.1 213.158.199.5

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-24]
CHR Extension: (Dysk Google) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-24]
CHR Extension: (YouTube) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-07]
CHR Extension: (Szukaj w Google) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-07]
CHR Extension: (Google Wallet) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-27]
CHR Extension: (Gmail) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-07]
CHR Profile: C:\Users\ania\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Wallet) - C:\Users\ania\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-31]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
U2 OutpostFirewall; C:\Program Files (x86)\Agnitum\Outpost Firewall\outpost.exe [94720 2007-01-19] (Agnitum Ltd.) [File not signed]
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [246112 2014-03-10] ()
R2 Rezip; C:\Windows\SysWOW64\Rezip.exe [311296 2009-03-05] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
R2 UI Assistant Service; C:\Program Files (x86)\Netia\Mobilny Internet\AssistantServices.exe [247152 2010-03-02] ()
S2 McShield; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [X]
S3 McSysmon; C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe [X]
R3 WinHttpAutoProxySvc; winhttp.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 ADBLOCK.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\ADBLOCK.DLL [33568 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 ARP.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\ARP.DLL [17408 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 CONTENT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\CONTENT.DLL [4896 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 DNSCACHE.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\DNSCACHE.DLL [14464 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 FTPFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\FTPFILT.DLL [9248 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 HTMLFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\HTMLFILT.DLL [11552 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 HTTPFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\HTTPFILT.DLL [13216 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 IMAPFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\IMAPFILT.DLL [7168 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 MAILFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\MAILFILT.DLL [14880 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [102472 2010-02-17] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [308296 2010-02-17] (McAfee, Inc.)
S3 mferkdk; C:\Windows\System32\drivers\mferkdk.sys [40904 2010-02-17] (McAfee, Inc.)
S3 mfesmfk; C:\Windows\System32\drivers\mfesmfk.sys [49480 2010-02-17] (McAfee, Inc.)
R1 MPFP; C:\Windows\System32\Drivers\Mpfp.sys [176144 2010-07-15] (McAfee, Inc.)
S3 NNTPFILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\NNTPFILT.DLL [6752 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 POP3FILT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\POP3FILT.DLL [10048 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 PROTECT.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\PROTECT.DLL [15200 2007-01-19] (Agnitum Ltd.) [File not signed]
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-04-08] (Windows (R) 2003 DDK 3790 provider)
S3 SECRET.DLL; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\SECRET.DLL [12928 2007-01-19] (Agnitum Ltd.) [File not signed]
S1 VFILT; C:\Program Files (x86)\Agnitum\Outpost Firewall\kernel\FILTNT.SYS [163328 2007-01-19] (Agnitum Ltd.) [File not signed]
S1 SandBox; \??\C:\Program Files (x86)\Agnitum\Outpost Firewall\Sandbox64.SYS [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 17:05 - 2014-11-27 17:05 - 00016454 _____ () C:\Users\ania\Downloads\FRST.txt
2014-11-27 17:02 - 2014-11-27 17:03 - 02117632 _____ (Farbar) C:\Users\ania\Downloads\FRST64.exe
2014-11-27 16:55 - 2014-11-27 16:56 - 00000000 ____D () C:\Users\ania\Desktop\muzik
2014-11-27 12:51 - 2014-11-27 12:52 - 00000000 ____D () C:\Users\ania\Desktop\2014
2014-11-27 05:23 - 2014-11-27 05:23 - 00000000 __SHD () C:\found.000
2014-11-26 19:42 - 2014-11-27 17:05 - 00000000 ____D () C:\FRST

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-27 17:00 - 2010-11-18 23:33 - 01346272 _____ () C:\Windows\WindowsUpdate.log
2014-11-27 16:59 - 2014-03-06 22:11 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-27 16:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-11-27 16:17 - 2014-05-23 10:30 - 00001062 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1414786907-1554109764-266369702-1004UA.job
2014-11-27 13:17 - 2014-05-23 10:29 - 00001010 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1414786907-1554109764-266369702-1004Core.job
2014-11-27 12:48 - 2011-08-07 06:16 - 00000000 ____D () C:\Users\ania\Desktop\ania zdjęcia
2014-11-27 12:45 - 2011-08-12 01:24 - 00000000 ____D () C:\Users\ania\Desktop\mp3 i foto
2014-11-27 12:36 - 2013-11-20 08:20 - 00000000 ____D () C:\Users\ania\AppData\Roaming\Winamp
2014-11-27 12:35 - 2009-07-14 05:51 - 00144219 _____ () C:\Windows\setupact.log
2014-11-26 22:11 - 2010-11-19 00:05 - 00698356 _____ () C:\Windows\system32\perfh015.dat
2014-11-26 22:11 - 2010-11-19 00:05 - 00135176 _____ () C:\Windows\system32\perfc015.dat
2014-11-26 22:11 - 2009-07-14 06:13 - 01551208 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-26 21:39 - 2014-01-24 14:14 - 00000000 ____D () C:\Users\ania\Desktop\Odebrane pliki
2014-11-26 21:27 - 2014-03-08 12:42 - 00000000 ____D () C:\Users\ania\Desktop\parov stelar
2014-11-26 21:26 - 2014-02-23 05:35 - 00000000 ____D () C:\Users\ania\Desktop\Nowy folder (5)
2014-11-26 21:20 - 2014-02-25 11:39 - 00000000 ____D () C:\Users\ania\Desktop\genesis
2014-11-26 21:04 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-26 21:04 - 2009-07-14 05:45 - 00014144 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 20:53 - 2014-03-25 11:26 - 00000150 _____ () C:\Windows\ODBC.INI
2014-11-26 20:53 - 2011-11-01 07:44 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-11-26 20:53 - 2011-04-26 15:40 - 00000000 ____D () C:\Users\ania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2014-11-26 20:53 - 2010-11-18 07:43 - 00663980 _____ () C:\Windows\PFRO.log
2014-11-26 20:53 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 20:20 - 2011-04-26 15:40 - 00000000 ____D () C:\Users\ania
2014-11-26 13:30 - 2013-10-31 22:27 - 00003982 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C48DC1FC-A6EE-4B92-956B-96C0F5EFE56E}
2014-11-26 13:12 - 2014-05-23 10:30 - 00004034 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414786907-1554109764-266369702-1004UA
2014-11-26 13:12 - 2014-05-23 10:29 - 00003638 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414786907-1554109764-266369702-1004Core
2014-11-26 13:10 - 2013-11-15 16:45 - 00000000 ____D () C:\Users\anuśka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2014-11-03 11:05 - 2014-04-29 06:43 - 00000000 ____D () C:\Users\ania\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth

Some content of TEMP:
====================
C:\Users\anuśka\AppData\Local\Temp\GDM15E3.exe
C:\Users\anuśka\AppData\Local\Temp\GUR54D.exe
C:\Users\anuśka\AppData\Local\Temp\GURB2DA.exe
C:\Users\anuśka\AppData\Local\Temp\GURE9D1.exe
C:\Users\anuśka\AppData\Local\Temp\GUREDB7.exe
C:\Users\anuśka\AppData\Local\Temp\_isA4F9.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-26 22:28

==================== End Of Log ============================