Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by Marcin (administrator) on MARCIN-KOMPUTER on 12-02-2015 11:15:14
Running from C:\Users\Marcin\Desktop
Loaded Profiles: Marcin (Available profiles: Marcin)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(COMODO) E:\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(COMODO) E:\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(COMODO) E:\COMODO\COMODO Internet Security\cis.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(COMODO) E:\COMODO\COMODO Internet Security\cmdvirth.exe
(COMODO) E:\COMODO\COMODO Internet Security\cavwp.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Dominik Reichl) E:\PROGRAMY\KeePass Password Safe 2\KeePass.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [835072 2011-01-27] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [COMODO Internet Security] => E:\COMODO\COMODO Internet Security\cistray.exe [1297112 2014-12-09] (COMODO)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [299576 2011-01-28] (Hewlett-Packard Company)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-01-03] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2015-02-11] (Oracle Corporation)
HKU\S-1-5-21-881178866-503871817-2651816399-1000\...\MountPoints2: F - F:\vs_professional.exe
HKU\S-1-5-21-881178866-503871817-2651816399-1000\...\MountPoints2: {718e62cd-605c-11e4-b6e3-806e6f6e6963} - D:\SWSETUP\APPINSTL\hpsoftwaresetup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-11-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-881178866-503871817-2651816399-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Hosts: 127.0.0.1       LMUC393007.europe.bmw.corp # LMS GENERATED LINE
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B5C11230-26A2-4732-A667-5C570990B03C}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{C570714D-F868-46FD-8305-C57123DB2B32}: [NameServer] 156.154.70.25,156.154.71.25

FireFox:
========
FF ProfilePath: C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\lsd4v9uc.default
FF Homepage: about:newtab
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> E:\PROGRAMY\PDF-XChange Viever\PDF Viewer\npPDFXCviewNPPlugin.dll No File
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> E:\PROGRAMY\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> E:\PROGRAMY\PDF-XChange Viever\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> E:\PROGRAMY\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-881178866-503871817-2651816399-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> E:\PROGRAMY\PDF-XChange Viever\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Extension: Ghostery - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\lsd4v9uc.default\Extensions\firefox@ghostery.com.xpi [2014-11-29]
FF Extension: Always on Top - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\lsd4v9uc.default\Extensions\{E6C93316-271E-4b3d-8D7E-FE11B4350AEB}.xpi [2014-12-04]
FF Extension: FXOpera - C:\Users\Marcin\AppData\Roaming\Mozilla\Firefox\Profiles\lsd4v9uc.default\Extensions\{e7c7d1b3-5984-410e-9f1e-54e3f8490e8e}.xpi [2014-11-22]

Opera: 
=======
OPR StartupUrls: "hxxp://bialostockiedupeczki.pl/"
OPR Extension: (Add Bookmark) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\afefffbbjobefahecmgjlanoemlipbkj [2014-10-30]
OPR Extension: (Ghostery) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2014-10-31]
OPR Extension: (PDF Viewer) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\encfpfilknmenlmjemepncnlbbjlabkc [2014-11-04]
OPR Extension: (Local pass store) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\jbeklacpgjfpeakekgoingidodbpdagl [2014-11-04]
OPR Extension: (cleanPages) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kgpkcoplbemkfoacdhpjhgdokcagnhkg [2014-10-31]
OPR Extension: (Download Chrome Extension) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2014-10-30]
OPR Extension: (To-Read sites) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\ocjdcfknlmpoicmjpklcofjlpnegobbb [2014-12-23]
OPR Extension: (Neater Bookmarks) - C:\Users\Marcin\AppData\Roaming\Opera Software\Opera Stable\Extensions\ofgjggbjanlhbgaemjbkiegeebmccifi [2014-10-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
R2 CmdAgent; E:\COMODO\COMODO Internet Security\cmdagent.exe [7618952 2014-12-09] (COMODO)
R3 cmdvirth; E:\COMODO\COMODO Internet Security\cmdvirth.exe [2265304 2014-12-09] (COMODO)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [281656 2011-01-28] (Hewlett-Packard Company)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22768 2014-04-17] (Microsoft Corporation)
S2 SkypeUpdate; E:\PROGRAMY\Skype\Updater\Updater.exe [315008 2014-04-03] (Skype Technologies)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87736 2014-04-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20184 2014-12-09] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [792648 2014-12-09] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45880 2014-12-09] (COMODO)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed]
S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed]
S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [104608 2014-12-09] (COMODO)
S0 johci; C:\Windows\System32\DRIVERS\johci.sys [26712 2011-01-18] (JMicron Technology Corp.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2611704 2011-01-12] (Sunplus Technology)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [116296 2015-01-11] (Oracle Corporation)
S4 sptd; \SystemRoot\System32\Drivers\sptd.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 11:15 - 2015-02-12 11:15 - 00017631 _____ () C:\Users\Marcin\Desktop\FRST.txt
2015-02-12 11:13 - 2015-02-12 11:13 - 02134016 _____ (Farbar) C:\Users\Marcin\Desktop\FRST64.exe
2015-02-11 14:25 - 2015-02-11 14:35 - 00000000 ____D () C:\Users\Marcin\pdfscissors
2015-02-11 14:25 - 2015-02-11 14:25 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Scrissors
2015-02-11 14:09 - 2015-02-11 14:09 - 00000000 ____D () C:\Program Files\Java
2015-02-11 14:06 - 2015-02-11 14:06 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Oracle
2015-02-08 23:37 - 2015-02-10 15:35 - 00000842 _____ () C:\Windows\setupact.log
2015-02-08 23:37 - 2015-02-08 23:37 - 00001296 _____ () C:\Windows\PFRO.log
2015-02-08 23:37 - 2015-02-08 23:37 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-08 21:12 - 2015-02-08 21:12 - 00003078 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2015-02-08 21:12 - 2015-02-08 21:12 - 00000000 ____D () C:\ProgramData\Panda Security
2015-02-08 21:12 - 2015-02-08 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2015-02-08 21:12 - 2015-02-08 21:12 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2015-01-31 13:27 - 2015-01-31 13:27 - 00000000 ____D () C:\Users\Marcin\Documents\Lightshot
2015-01-31 13:26 - 2015-02-12 10:48 - 00000390 _____ () C:\Windows\Tasks\update-sys.job
2015-01-31 13:26 - 2015-02-12 10:48 - 00000390 _____ () C:\Windows\Tasks\update-S-1-5-21-881178866-503871817-2651816399-1000.job
2015-01-31 13:26 - 2015-02-08 18:44 - 00000059 _____ () C:\Users\Marcin\AppData\Local\UserProducts.xml
2015-01-31 13:26 - 2015-02-08 18:44 - 00000000 ____D () C:\Program Files (x86)\Skillbrains
2015-01-31 13:26 - 2015-01-31 13:26 - 00003286 _____ () C:\Windows\System32\Tasks\update-sys
2015-01-31 13:26 - 2015-01-31 13:26 - 00003266 _____ () C:\Windows\System32\Tasks\update-S-1-5-21-881178866-503871817-2651816399-1000
2015-01-31 13:26 - 2015-01-31 13:26 - 00000003 _____ () C:\Users\Marcin\AppData\Local\updater.log
2015-01-26 20:04 - 2015-01-26 20:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-26 19:41 - 2015-01-26 19:41 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-26 19:41 - 2015-01-26 19:41 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-25 20:56 - 2015-01-25 20:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3nity CD DVD Burner
2015-01-21 19:45 - 2015-02-12 11:15 - 00000000 ____D () C:\FRST
2015-01-21 17:35 - 2015-01-21 17:35 - 00001421 _____ () C:\Users\Marcin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-17 13:42 - 2015-01-17 13:42 - 00382357 _____ () C:\Users\Marcin\Documents\zadania_analityczna_01.tif
2015-01-14 22:10 - 2015-01-14 22:10 - 00000044 _____ () C:\Users\Marcin\Documents\yui.txt
2015-01-14 15:44 - 2015-01-14 15:44 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 15:44 - 2015-01-14 15:44 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-14 15:44 - 2015-01-14 15:44 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-14 15:44 - 2015-01-14 15:44 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-14 15:44 - 2015-01-14 15:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 15:44 - 2015-01-14 15:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 15:44 - 2015-01-14 15:44 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-14 15:44 - 2015-01-14 15:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 11:08 - 2014-10-30 20:00 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2015-02-12 10:59 - 2014-10-30 17:50 - 01615192 _____ () C:\Windows\WindowsUpdate.log
2015-02-11 14:25 - 2014-10-30 17:50 - 00000000 ____D () C:\Users\Marcin
2015-02-11 14:09 - 2014-11-04 20:13 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-02-10 17:58 - 2010-05-16 00:28 - 00896652 _____ () C:\Windows\system32\perfh015.dat
2015-02-10 17:58 - 2010-05-16 00:28 - 00206722 _____ () C:\Windows\system32\perfc015.dat
2015-02-10 17:58 - 2009-07-14 06:13 - 01879548 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-09 21:36 - 2014-12-14 20:15 - 00011490 _____ () C:\Windows\system32\Drivers\fvstore.dat
2015-02-09 14:54 - 2009-07-14 05:45 - 00010112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-09 14:54 - 2009-07-14 05:45 - 00010112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-08 23:37 - 2014-12-10 14:50 - 00000000 ____D () C:\Users\Marcin\AppData\Local\TSVNCache
2015-02-08 23:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-08 20:41 - 2014-10-30 21:13 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\KeePass
2015-02-08 20:17 - 2014-11-19 21:45 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\DAEMON Tools Lite
2015-02-08 20:17 - 2014-10-31 03:44 - 00000000 ____D () C:\Windows\Panther
2015-02-08 19:00 - 2014-10-30 22:53 - 00000000 ____D () C:\Users\Marcin\VirtualBox VMs
2015-02-08 19:00 - 2014-10-30 22:33 - 00000000 ____D () C:\Users\Marcin\.VirtualBox
2015-02-08 18:45 - 2014-10-30 22:48 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-02-08 01:12 - 2014-10-30 18:44 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-04 10:34 - 2014-10-30 18:44 - 00003886 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1414691078
2015-02-03 19:43 - 2014-11-19 22:12 - 00000000 ____D () C:\Users\Marcin\Documents\Visual Studio 2013
2015-01-28 18:09 - 2014-11-03 13:58 - 00000000 ____D () C:\Users\Marcin\AppData\Local\Adobe
2015-01-28 18:08 - 2014-11-03 13:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-28 18:08 - 2014-11-03 13:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-27 10:13 - 2014-10-30 19:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-25 23:32 - 2014-11-04 21:18 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\CodeBlocks
2015-01-25 22:28 - 2014-11-09 19:22 - 00000000 ____D () C:\Users\Marcin\AppData\Roaming\Skype
2015-01-21 15:38 - 2014-10-30 23:51 - 00004000 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{645EEF24-B079-4DF5-B0D0-B3122EC9FC24}
2015-01-15 20:31 - 2014-11-11 20:39 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-15 20:29 - 2014-11-11 20:39 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-15 19:28 - 2014-10-30 18:35 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-14 10:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2015-01-31 13:26 - 2015-01-31 13:26 - 0000003 _____ () C:\Users\Marcin\AppData\Local\updater.log
2015-01-31 13:26 - 2015-02-08 18:44 - 0000059 _____ () C:\Users\Marcin\AppData\Local\UserProducts.xml

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-25 16:11

==================== End Of Log ============================