Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-11-2014 01 Ran by dom (administrator) on Z on 26-11-2014 18:53:15 Running from C:\Users\dom\Desktop\przegladarki\Palemoon_download Loaded Profile: dom (Available profiles: dom) Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Polski (Polska) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe () C:\Windows\System32\Rezip.exe (SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Flux Software LLC) C:\Users\dom\AppData\Local\FluxSoftware\Flux\flux.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (MagicISO, Inc.) C:\Program Files\MagicDisc\MagicDisc.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe (C. Ghisler & Co.) C:\Program Files\TC PowerPack 2\TOTALCMD.EXE (Moonchild Productions) C:\Program Files\Pale Moon\palemoon.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-14] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated) HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1225944 2014-03-25] (COMODO) HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation) HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\Run: [f.lux] => C:\Users\dom\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC) HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\Run: [] => [X] HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\MountPoints2: {59e56c3e-8cbc-11e2-8544-0026b6558b40} - F:\AutoRun.exe HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\MountPoints2: {59e56c4d-8cbc-11e2-8544-0026b6558b40} - F:\AutoRun.exe HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\...\MountPoints2: {59e56c5b-8cbc-11e2-8544-0026b6558b40} - F:\AutoRun.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk ShortcutTarget: MagicDisc.lnk -> C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.) BootExecute: autocheck autochk * sdnclean.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyServer: [S-1-5-21-3916604919-2912353607-3506189148-1000] => localhost:8080 HKU\S-1-5-21-3916604919-2912353607-3506189148-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = StartMenuInternet: IEXPLORE.EXE - BHO: HistoryTriggerBHO Class -> {21A88CB9-84D2-4020-A2D1-B25A21034884} -> C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAirBrowserHelper.dll (LG Electronics) BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Pomocnik rejestracji usługi Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> c:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKU\S-1-5-21-3916604919-2912353607-3506189148-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - c:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.111.1 FireFox: ======== FF ProfilePath: C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\af9g5q5i.default-1416422001587 FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32.dll () FF Plugin: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin: @real.com/nppl3260;version=16.0.3.51 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 -> c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF Plugin: @realnetworks.com/npdlplugin;version=1 -> c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3916604919-2912353607-3506189148-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\dom\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKU\S-1-5-21-3916604919-2912353607-3506189148-1000: @talk.google.com/O1DPlugin -> C:\Users\dom\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKU\S-1-5-21-3916604919-2912353607-3506189148-1000: @tools.google.com/Google Update;version=3 -> C:\Users\dom\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKU\S-1-5-21-3916604919-2912353607-3506189148-1000: @tools.google.com/Google Update;version=9 -> C:\Users\dom\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKU\S-1-5-21-3916604919-2912353607-3506189148-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\dom\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer) FF Plugin ProgramFiles/Appdata: C:\Users\dom\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google) FF Plugin ProgramFiles/Appdata: C:\Users\dom\AppData\Roaming\mozilla\plugins\npo1d.dll (Google) FF Extension: HTTPS-Everywhere - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\af9g5q5i.default-1416422001587\Extensions\https-everywhere@eff.org [2014-11-19] FF Extension: Eliminator Slajdów - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\af9g5q5i.default-1416422001587\Extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2014-11-19] FF Extension: Google™ Translator - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\af9g5q5i.default-1416422001587\Extensions\jid1-dgnIBwQga0SIBw@jetpack.xpi [2014-11-19] FF Extension: Adblock Plus - C:\Users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\af9g5q5i.default-1416422001587\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-19] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-11-16] FF HKLM\...\Firefox\Extensions: [{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}] - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B} FF Extension: LG Air Sync - C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B} [2012-10-22] FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-20] FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: No Name - {DF153AFF-6948-45d7-AC98-4FC4AF8A08E2} [Not Found] FF StartMenuInternet: FIREFOX.EXE - Chrome: ======= CHR Profile: C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Prezentacje Google) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-21] CHR Extension: (Dokumenty Google) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-11-21] CHR Extension: (Dysk Google) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-21] CHR Extension: (YouTube) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-21] CHR Extension: (Szukaj w Google) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-21] CHR Extension: (HTTPS Everywhere) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2014-11-21] CHR Extension: (AdBlock) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-11-21] CHR Extension: (RealDownloader) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-11-21] CHR Extension: (Skype Click to Call) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-11-21] CHR Extension: (Google Wallet) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-21] CHR Extension: (Gmail) - C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-21] CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - c:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - c:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 c2cautoupdatesvc; c:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation) S3 c2cpnrsvc; c:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation) S3 CLPSLS; C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [1052472 2011-11-23] (COMODO) R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5306504 2014-04-16] (COMODO) S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [1663192 2014-03-25] (COMODO) S3 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation) S3 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation) S3 Motorola Device Manager; C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-11-15] (Motorola Mobility LLC) S3 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1615192 2014-04-02] (NVIDIA Corporation) S3 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19405768 2014-04-02] (NVIDIA Corporation) S3 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] () S3 PST Service; c:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02] (Motorola) [File not signed] S3 RealNetworks Downloader Resolver Service; c:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] () [File not signed] S3 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] () S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 awUSB; C:\windows\System32\DRIVERS\USBDrv.sys [13824 2014-02-20] (Scott) R1 cmderd; C:\windows\System32\DRIVERS\cmderd.sys [20072 2014-04-16] (COMODO) R1 cmdGuard; C:\windows\System32\DRIVERS\cmdguard.sys [607168 2014-04-16] (COMODO) R1 cmdHlp; C:\windows\System32\DRIVERS\cmdhlp.sys [43728 2014-04-16] (COMODO) R1 inspect; C:\windows\System32\DRIVERS\inspect.sys [92656 2014-04-16] (COMODO) R3 LgBttPort; C:\windows\System32\DRIVERS\lgbtport.sys [12160 2009-09-29] (LG Electronics Inc.) R3 lgbusenum; C:\windows\System32\DRIVERS\lgbtbus.sys [10496 2009-09-29] (LG Electronics Inc.) R3 LGVMODEM; C:\windows\System32\DRIVERS\lgvmodem.sys [12928 2009-09-29] (LG Electronics Inc.) S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation) S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [114904 2014-11-25] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation) R3 mcdbus; C:\windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed] R3 nvvad_WaveExtensible; C:\windows\System32\drivers\nvvad32v.sys [34080 2014-03-21] (NVIDIA Corporation) S3 pwdrvio; C:\windows\system32\pwdrvio.sys [15688 2013-09-30] () S3 pwdspio; C:\windows\system32\pwdspio.sys [10320 2013-09-30] () R0 PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [36624 2006-11-02] (Sonic Solutions) [File not signed] S3 tapavpn; C:\windows\System32\DRIVERS\tapavpn.sys [24320 2009-07-03] (Steganos GmbH) [File not signed] R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] () S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S3 motccgp; system32\DRIVERS\motccgp.sys [X] S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [X] S3 MotDev; system32\DRIVERS\motodrv.sys [X] S3 motmodem; system32\DRIVERS\motmodem.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-26 18:52 - 2014-11-26 18:53 - 00000000 ____D () C:\FRST 2014-11-26 18:03 - 2014-11-26 18:03 - 01110016 _____ (Farbar) C:\Users\dom\Downloads\FRST (1).exe 2014-11-26 17:59 - 2014-11-26 17:59 - 01110016 _____ (Farbar) C:\Users\dom\Downloads\FRST.exe 2014-11-26 00:22 - 2014-11-26 00:22 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2014-11-25 23:56 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\windows\system32\infocardapi.dll 2014-11-25 23:55 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\windows\system32\icardres.dll 2014-11-25 23:55 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\windows\system32\TsWpfWrp.exe 2014-11-25 23:55 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\windows\system32\icardagt.exe 2014-11-25 23:29 - 2014-11-25 23:27 - 01188194 ____R () C:\Users\dom\Desktop\ProcessExplorer.zip 2014-11-25 23:15 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\windows\system32\dfshim.dll 2014-11-25 23:15 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\windows\system32\mscorier.dll 2014-11-25 23:15 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\windows\system32\mscories.dll 2014-11-25 22:47 - 2014-11-25 22:47 - 00000079 _____ () C:\windows\wininit.ini 2014-11-21 18:16 - 2014-11-21 18:16 - 00002211 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-11-21 18:16 - 2014-11-21 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-11-21 18:12 - 2014-11-26 18:17 - 00001030 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-21 18:12 - 2014-11-26 18:17 - 00001026 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-20 17:56 - 2014-11-20 17:56 - 00010329 _____ () C:\Users\dom\Desktop\chrome_bookmarks_20.11.2014.html 2014-11-20 17:10 - 2014-11-25 22:50 - 00114904 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2014-11-20 17:07 - 2014-11-20 17:07 - 19828376 _____ (Malwarebytes Corporation ) C:\mbam-setup-2.0.3.1025.exe 2014-11-20 17:07 - 2014-11-20 17:07 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2014-11-20 17:07 - 2014-11-20 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2014-11-20 17:07 - 2014-11-20 17:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-20 17:07 - 2014-11-20 17:07 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware 2014-11-20 17:07 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2014-11-20 17:07 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2014-11-20 17:07 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2014-11-19 23:57 - 2014-11-19 23:57 - 00000000 ____D () C:\Users\dom\Documents\ProcAlyzer Dumps 2014-11-19 23:34 - 2014-11-25 22:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-11-19 23:29 - 2014-11-19 23:29 - 46525608 _____ (Safer-Networking Ltd. ) C:\spybot-2.4.exe 2014-11-19 23:01 - 2014-11-26 17:27 - 00000179 _____ () C:\windows\fileinfo.ini 2014-11-19 21:50 - 2014-11-19 21:53 - 00000000 ____D () C:\Program Files\Pale Moon 2014-11-19 19:33 - 2014-11-19 19:33 - 00000000 ____D () C:\Users\dom\Desktop\Stare dane programu Firefox 2014-11-19 18:14 - 2014-11-19 18:14 - 00000000 ____D () C:\Program Files\predm 2014-11-19 18:01 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2014-11-19 18:01 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\pku2u.dll 2014-11-19 15:20 - 2014-11-19 15:20 - 00000000 ____D () C:\Users\dom\AppData\Roaming\moters 2014-11-19 15:16 - 2014-11-20 17:42 - 00000000 ____D () C:\Program Files\globalUpdate 2014-11-16 20:36 - 2014-11-16 20:37 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-11-15 20:44 - 2014-11-15 20:44 - 00000000 __SHD () C:\Users\dom\AppData\Roaming\.# 2014-11-15 20:44 - 2014-11-15 20:44 - 00000000 ____D () C:\Users\dom\AppData\Roaming\GameConsole 2014-11-15 20:44 - 2014-11-15 20:44 - 00000000 ____D () C:\Program Files\Common Files\SWF Studio 2014-11-14 18:16 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll 2014-11-14 17:58 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\windows\system32\msi.dll 2014-11-14 17:58 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2014-11-14 17:57 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll 2014-11-14 17:57 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2014-11-14 17:57 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll 2014-11-14 17:57 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2014-11-14 17:57 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2014-11-14 17:57 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll 2014-11-14 17:57 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2014-11-14 17:57 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2014-11-14 17:57 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2014-11-14 17:57 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2014-11-14 17:57 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2014-11-14 17:57 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2014-11-14 17:57 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe 2014-11-14 17:57 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe 2014-11-14 17:57 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll 2014-11-14 17:57 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe 2014-11-14 17:57 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll 2014-11-14 17:57 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll 2014-11-14 17:57 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2014-11-14 17:57 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2014-11-14 17:57 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2014-11-14 17:57 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2014-11-14 17:57 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2014-11-14 17:57 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2014-11-14 17:57 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2014-11-14 17:57 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll 2014-11-14 17:57 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2014-11-14 17:57 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2014-11-14 17:57 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2014-11-14 17:57 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2014-11-14 17:57 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll 2014-11-14 17:57 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2014-11-14 17:57 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2014-11-14 17:57 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\windows\system32\termsrv.dll 2014-11-14 17:57 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll 2014-11-14 17:57 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll 2014-11-14 17:57 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll 2014-11-14 17:57 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll 2014-11-14 17:56 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2014-11-14 17:56 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll 2014-11-14 17:56 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll 2014-11-14 17:56 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll 2014-11-14 17:56 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll 2014-11-14 17:56 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll 2014-11-14 17:56 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2014-11-14 17:56 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\windows\system32\rastls.dll 2014-11-14 17:56 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\windows\system32\IMJP10K.DLL 2014-11-14 17:56 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\windows\system32\winsta.dll 2014-11-14 17:56 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll 2014-11-14 17:56 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe 2014-11-14 17:56 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\windows\system32\winlogon.exe 2014-11-14 17:56 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll 2014-11-14 17:56 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\rdpcorekmts.dll 2014-11-14 17:56 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpwd.sys 2014-11-14 17:56 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys 2014-11-14 17:56 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDYAK.DLL 2014-11-14 17:56 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDTAT.DLL 2014-11-14 17:56 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDRU1.DLL 2014-11-14 17:56 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\windows\system32\KBDBASH.DLL 2014-11-14 17:56 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\windows\system32\KBDRU.DLL 2014-11-14 17:56 - 2014-07-08 23:30 - 00419992 _____ () C:\windows\system32\locale.nls 2014-11-14 17:55 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll 2014-11-14 17:54 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\packager.dll 2014-11-08 20:18 - 2014-11-09 00:31 - 1548550144 _____ () C:\The.Thirteenth.Floor.1999.PL.DVDRip.AC3.XviD-Xardas.avi 2014-11-08 20:15 - 2014-11-08 23:40 - 734765056 _____ () C:\Maleficent.2014.PLDUB.DVDRip.XviD-GR4PE.avi 2014-11-08 19:59 - 2014-11-08 22:38 - 1467887616 _____ () C:\Transformers.Age.of.Extinction.2014.PLDUB.BRRiP.XViD-K12.avi 2014-10-30 10:08 - 2014-10-30 10:08 - 00000000 ____D () C:\Users\dom\Desktop\AdventureCraft 2014-10-30 10:07 - 2014-10-30 10:07 - 00000000 ____D () C:\Users\dom\AppData\Roaming\QuickScan ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-26 18:54 - 2012-09-09 16:24 - 00000000 ____D () C:\TEMP 2014-11-26 18:49 - 2012-08-28 19:46 - 01474832 _____ () C:\windows\system32\Drivers\sfi.dat 2014-11-26 18:36 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET 2014-11-26 18:17 - 2009-07-14 05:34 - 00014736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-26 18:17 - 2009-07-14 05:34 - 00014736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-26 18:16 - 2013-03-02 10:03 - 00001050 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3916604919-2912353607-3506189148-1000UA.job 2014-11-26 18:10 - 2009-07-14 05:39 - 00235907 _____ () C:\windows\setupact.log 2014-11-26 18:09 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT 2014-11-26 00:50 - 2009-12-12 04:31 - 02063088 _____ () C:\windows\WindowsUpdate.log 2014-11-26 00:50 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\pl-PL 2014-11-26 00:41 - 2010-01-09 19:33 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-11-26 00:17 - 2009-12-11 01:35 - 00740234 _____ () C:\windows\system32\perfh015.dat 2014-11-26 00:17 - 2009-12-11 01:35 - 00155776 _____ () C:\windows\system32\perfc015.dat 2014-11-26 00:17 - 2009-07-26 21:06 - 01641336 _____ () C:\windows\system32\PerfStringBackup.INI 2014-11-25 23:54 - 2009-07-14 03:04 - 00000510 _____ () C:\windows\win.ini 2014-11-25 23:02 - 2009-12-11 12:17 - 00887758 _____ () C:\windows\PFRO.log 2014-11-24 21:48 - 2014-04-10 20:43 - 00000000 ___HD () C:\VTRoot 2014-11-22 14:14 - 2014-04-10 20:43 - 00075302 _____ () C:\windows\system32\Drivers\fvstore.dat 2014-11-22 13:49 - 2013-09-22 15:20 - 00000000 ____D () C:\Users\dom\AppData\Roaming\.minecraft 2014-11-22 00:20 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\IME 2014-11-21 18:14 - 2013-06-18 21:01 - 00000000 ____D () C:\Program Files\Google 2014-11-20 17:45 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\schemas 2014-11-19 23:28 - 2013-12-08 14:24 - 00000000 ____D () C:\DAWID P 2014-11-19 20:10 - 2012-08-28 17:17 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-19 19:50 - 2010-01-09 19:42 - 00001425 _____ () C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-19 19:24 - 2010-01-09 19:24 - 00000000 ____D () C:\Users\dom 2014-11-19 15:16 - 2013-03-02 10:03 - 00000998 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3916604919-2912353607-3506189148-1000Core.job 2014-11-19 15:16 - 2012-08-28 18:36 - 00000000 ____D () C:\Program Files\Adobe 2014-11-18 19:46 - 2013-01-13 22:13 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Notepad++ 2014-11-17 23:28 - 2014-08-31 20:49 - 00000000 ____D () C:\Users\dom\Documents\MapView 2014-11-17 23:27 - 2013-01-13 22:13 - 00000000 ____D () C:\Program Files\Notepad++ 2014-11-17 23:11 - 2012-10-22 21:46 - 00000000 ____D () C:\_tmp 2014-11-17 22:59 - 2012-08-28 20:08 - 00000000 ___HD () C:\VritualRoot 2014-11-17 18:20 - 2013-04-20 08:16 - 00000000 ____D () C:\_nowe 2014-11-17 13:31 - 2012-08-28 17:17 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-11-14 22:22 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\rescache 2014-11-14 20:03 - 2009-07-14 05:33 - 00425296 _____ () C:\windows\system32\FNTCACHE.DAT 2014-11-14 18:14 - 2013-08-14 17:32 - 00000000 ____D () C:\windows\system32\MRT 2014-11-11 20:29 - 2012-08-28 17:17 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Mozilla 2014-11-09 12:39 - 2013-12-08 14:22 - 00000000 ____D () C:\weronika 2014-11-08 21:29 - 2012-08-28 22:44 - 00000000 ____D () C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth 2014-11-03 23:05 - 2012-08-28 18:49 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird 2014-11-03 20:11 - 2012-12-09 13:04 - 00000000 ____D () C:\Users\dom\Desktop\egzamin 2014-11-03 19:32 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\NDF 2014-10-31 23:25 - 2012-08-29 21:48 - 100445232 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\windows\explorer.exe => File is digitally signed C:\windows\system32\winlogon.exe => File is digitally signed C:\windows\system32\wininit.exe => File is digitally signed C:\windows\system32\svchost.exe => File is digitally signed C:\windows\system32\services.exe => File is digitally signed C:\windows\system32\User32.dll => File is digitally signed C:\windows\system32\userinit.exe => File is digitally signed C:\windows\system32\rpcss.dll => File is digitally signed C:\windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-25 22:22 ==================== End Of Log ============================