Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-02-2015 01
Ran by PC (administrator) on PC-KOMPUTER on 25-02-2015 21:56:28
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available profiles: PC)
Platform: Windows 7 Professional (X64) OS Language: Polski (Polska)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(AppEx Networks Corporation) C:\Program Files\AMD Quick Stream\AppexAcceleratorUI.exe
(Fly Project Blood) C:\Users\PC\AppData\Local\Ubqjmedia\tmp175A.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(©Ceysajolxofat) C:\Users\PC\AppData\Roaming\Microsoft\Protect\conhost.exe
(©Wyebugur) C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe
() C:\Users\PC\Desktop\putty.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-26] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [AppEx Accelerator UI] => C:\Program Files\AMD Quick Stream\AppexAcceleratorUI.exe [1000288 2012-05-22] (AppEx Networks Corporation)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [uTorrent] => C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe [1740880 2015-02-01] (BitTorrent Inc.)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [Ubqjmedia] => C:\Users\PC\AppData\Local\Ubqjmedia\tmp175A.exe [430080 2015-02-23] (Fly Project Blood)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [UPHmedia] => regsvr32.exe C:\Users\PC\AppData\Local\UPHmedia\WMP.DLL <===== ATTENTION
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [Ofvics] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\PC\AppData\Local\Ubqjmedia\mDNSResponder.dll
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [rasautou] => C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe [290304 2009-07-14] (©Wyebugur)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [Console Protect Service] => C:\Users\PC\AppData\Roaming\Microsoft\Protect\conhost.exe [360960 2015-02-24] (©Ceysajolxofat)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [Actisapi] => C:\Users\PC\AppData\Local\Temp\DHCPplay.exe <===== ATTENTION
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Run: [68668FD2] => C:\Users\PC\AppData\Roaming\68668FD2\bin.exe [77824 2015-02-25] (ForceCausally # CockiestDisassociateDisarmament FireguardConviction)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\RunOnce: [rasautou] => C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe [290304 2009-07-14] (©Wyebugur)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Policies\Explorer: [Run] "C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe"
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\...\Command Processor: "C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe" <===== ATTENTION!
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.HTML ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.PNG ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.TXT ()
InternetURL: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HELP_DECRYPT.URL -> hxxp://paytoc4gtpn5czl2.torconnectpaycom/1js9p30
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rasautou.lnk
ShortcutTarget: rasautou.lnk -> C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe (©Wyebugur)
ShellIconOverlayIdentifiers: [0WinSecurityProvider] -> {F76FA5C2-3B6A-451E-8CA5-34C8D0AE0637} => C:\ProgramData\Microsoft\Security\Client\SecurityProvider.dll ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{9a1954fa-5db4-40e5-8397-013295993819} <======= ATTENTION (Policy Restriction on IP)
HKU\S-1-5-21-2334750493-3877686894-2274872293-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 158.75.88.5

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-01]
CHR Extension: (Google Docs) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-01]
CHR Extension: (Google Drive) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-01]
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-01]
CHR Extension: (Google Search) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-01]
CHR Extension: (Google Sheets) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-01]
CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-01]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242912 2014-09-11] (Foxit Software Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2015-02-25] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
U3 uglcraoc; \??\C:\Users\PC\AppData\Local\Temp\uglcraoc.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 21:56 - 2015-02-25 21:57 - 00012033 _____ () C:\Users\PC\Desktop\FRST.txt
2015-02-25 21:52 - 2015-02-25 21:56 - 00000000 ____D () C:\FRST
2015-02-25 21:49 - 2015-02-25 21:48 - 02087936 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2015-02-25 15:49 - 2015-02-25 15:49 - 00380416 _____ () C:\Users\PC\Downloads\ur0fds5k.exe
2015-02-25 11:56 - 2015-02-25 11:56 - 00000000 ___HD () C:\Users\PC\AppData\Roaming\68668FD2
2015-02-24 22:39 - 2015-02-24 22:39 - 00000512 _____ () C:\Users\PC\Downloads\C5D8D000
2015-02-24 22:27 - 2015-02-24 22:27 - 00125952 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-23-february-2015).xls
2015-02-24 18:42 - 2015-02-24 18:43 - 00276168 _____ () C:\Windows\Minidump\022415-23805-01.dmp
2015-02-24 12:54 - 2015-02-24 12:54 - 00000000 ____H () C:\Users\PC\AppData\Local\BITD91F.tmp
2015-02-24 12:53 - 2015-02-24 12:53 - 00000000 _____ () C:\Users\PC\AppData\Local\{75A2DCDF-222F-4890-AC46-4C6C3C589A80}
2015-02-24 11:43 - 2015-02-24 18:42 - 479311302 _____ () C:\Windows\MEMORY.DMP
2015-02-24 11:43 - 2015-02-24 18:42 - 00000000 ____D () C:\Windows\Minidump
2015-02-24 11:43 - 2015-02-24 11:43 - 00276168 _____ () C:\Windows\Minidump\022415-17706-01.dmp
2015-02-24 10:30 - 2015-02-25 15:34 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-24 10:30 - 2015-02-24 10:30 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-02-24 10:30 - 2015-02-24 10:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-24 10:29 - 2015-02-24 10:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-24 10:29 - 2015-02-24 10:29 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-02-24 10:29 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-02-24 10:29 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-02-24 10:29 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-02-24 10:28 - 2015-02-24 10:28 - 00000000 ____D () C:\Users\PC\Downloads\Malwarebytes Anti-Malware Premium 2.0.2.1012 Final + Keys [ATOM]
2015-02-24 10:22 - 2015-02-24 10:22 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\PC\Downloads\SpyHunter-Installer.exe
2015-02-23 16:13 - 2015-02-24 10:18 - 00000292 _____ () C:\Users\PC\Desktop\HELP_DECRYPT.URL
2015-02-23 16:13 - 2015-02-23 16:13 - 00008630 _____ () C:\Users\PC\HELP_DECRYPT.HTML
2015-02-23 16:13 - 2015-02-23 16:13 - 00008630 _____ () C:\Users\PC\Downloads\HELP_DECRYPT.HTML
2015-02-23 16:13 - 2015-02-23 16:13 - 00004258 _____ () C:\Users\PC\HELP_DECRYPT.TXT
2015-02-23 16:13 - 2015-02-23 16:13 - 00004258 _____ () C:\Users\PC\Downloads\HELP_DECRYPT.TXT
2015-02-23 16:13 - 2015-02-23 16:13 - 00000292 _____ () C:\Users\PC\HELP_DECRYPT.URL
2015-02-23 16:13 - 2015-02-23 16:13 - 00000292 _____ () C:\Users\PC\Downloads\HELP_DECRYPT.URL
2015-02-23 16:10 - 2015-02-23 16:10 - 00008630 _____ () C:\Users\PC\Documents\HELP_DECRYPT.HTML
2015-02-23 16:10 - 2015-02-23 16:10 - 00008630 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-23 16:10 - 2015-02-23 16:10 - 00008630 _____ () C:\Users\PC\AppData\HELP_DECRYPT.HTML
2015-02-23 16:10 - 2015-02-23 16:10 - 00004258 _____ () C:\Users\PC\Documents\HELP_DECRYPT.TXT
2015-02-23 16:10 - 2015-02-23 16:10 - 00004258 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-23 16:10 - 2015-02-23 16:10 - 00004258 _____ () C:\Users\PC\AppData\HELP_DECRYPT.TXT
2015-02-23 16:10 - 2015-02-23 16:10 - 00000292 _____ () C:\Users\PC\Documents\HELP_DECRYPT.URL
2015-02-23 16:10 - 2015-02-23 16:10 - 00000292 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.URL
2015-02-23 16:10 - 2015-02-23 16:10 - 00000292 _____ () C:\Users\PC\AppData\HELP_DECRYPT.URL
2015-02-23 16:09 - 2015-02-23 16:09 - 00008630 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.HTML
2015-02-23 16:09 - 2015-02-23 16:09 - 00008630 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-23 16:09 - 2015-02-23 16:09 - 00004258 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.TXT
2015-02-23 16:09 - 2015-02-23 16:09 - 00004258 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-23 16:09 - 2015-02-23 16:09 - 00000292 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.URL
2015-02-23 16:09 - 2015-02-23 16:09 - 00000292 _____ () C:\ProgramData\HELP_DECRYPT.URL
2015-02-23 15:43 - 2015-02-23 15:43 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Macromedia
2015-02-23 15:36 - 2015-02-23 15:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSPaudioware
2015-02-23 15:36 - 2015-02-23 15:36 - 00000000 ____D () C:\Program Files\Steinberg
2015-02-23 15:36 - 2015-02-23 15:36 - 00000000 ____D () C:\Program Files\Common Files\Avid
2015-02-23 15:36 - 2015-02-23 15:36 - 00000000 ____D () C:\Program Files (x86)\PSPaudioware
2015-02-23 15:35 - 2015-02-23 15:35 - 00575488 _____ () C:\Windows\SysWOW64\PSP PianoVerb.dll
2015-02-23 15:30 - 2015-02-25 21:01 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-23 15:30 - 2015-02-23 15:30 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-23 15:30 - 2015-02-23 15:30 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-23 15:30 - 2015-02-23 15:30 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-23 15:30 - 2015-02-23 15:30 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-02-23 15:30 - 2015-02-23 15:30 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-23 15:30 - 2015-02-23 15:30 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Adobe
2015-02-23 15:29 - 2015-02-25 21:58 - 00003628 _____ () C:\Windows\System32\Tasks\rasautou
2015-02-23 15:22 - 2015-02-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Pianoteq 2.3
2015-02-23 15:22 - 2015-02-23 15:22 - 00001081 _____ () C:\Users\Public\Desktop\Pianoteq 2.3.lnk
2015-02-23 15:22 - 2015-02-23 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Modartt
2015-02-23 15:20 - 2015-02-23 16:12 - 00000000 ____D () C:\Users\PC\Downloads\PianoTeq v2.3 + Addons + Presets
2015-02-23 15:15 - 2015-02-23 15:15 - 00015825 _____ () C:\Users\PC\Downloads\Pianoteq (1).torrent
2015-02-23 15:13 - 2015-02-23 15:14 - 00000000 ____D () C:\Users\PC\AppData\Local\UPHmedia
2015-02-23 15:13 - 2015-02-23 15:13 - 00000000 ____D () C:\Users\PC\AppData\Local\Ubqjmedia
2015-02-23 15:12 - 2015-02-23 15:12 - 00000000 _____ () C:\Users\PC\Desktop\Nowy dokument tekstowy (2).txt
2015-02-23 15:11 - 2015-02-23 15:11 - 00015819 _____ () C:\Users\PC\Downloads\Pianoteq.torrent
2015-02-23 15:11 - 2015-02-23 15:11 - 00000000 ____D () C:\Users\PC\Downloads\Pianoteq
2015-02-23 15:04 - 2015-02-23 15:04 - 03150647 _____ () C:\Users\PC\Downloads\PSP_PianoVerb_1.8.0.exe
2015-02-20 14:01 - 2015-02-20 14:01 - 00000000 _____ () C:\Users\PC\Desktop\Nowy dokument tekstowy.txt
2015-02-18 12:40 - 2015-02-23 16:12 - 00000000 ____D () C:\Users\PC\Downloads\Dungeon Keeper 2 2.0.0.32
2015-02-18 12:39 - 2015-02-18 12:39 - 00055029 _____ () C:\Users\PC\Downloads\Dungeon_Keeper_2_[Version_2_0_0_32][GOG].torrent
2015-02-18 12:35 - 2015-02-18 12:35 - 00017603 _____ () C:\Users\PC\Downloads\[www.tnt24.info] Dungeon-Keeper-2--PL---Retial.torrent
2015-02-18 12:30 - 2015-02-23 16:12 - 00000000 ____D () C:\Users\PC\Downloads\DK2_PL_FIRST_PERSON
2015-02-18 12:29 - 2015-02-18 12:29 - 00017603 _____ () C:\Users\PC\Downloads\Dungeon_Keeper_2_[PL]_[Retial]_[www.torrenty.org].torrent
2015-02-18 11:03 - 2015-02-18 11:03 - 00029472 _____ () C:\Users\PC\Downloads\plan_lektoratow_2014_15_lato.xls
2015-02-17 21:25 - 2015-02-17 21:25 - 00046016 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-12-february-2015) (3).xlsx
2015-02-17 21:25 - 2015-02-17 21:25 - 00046016 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-12-february-2015) (2).xlsx
2015-02-17 21:19 - 2015-02-17 21:19 - 00046016 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-12-february-2015) (1).xlsx
2015-02-17 21:11 - 2015-02-17 21:11 - 00046016 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-12-february-2015).xlsx
2015-02-17 13:04 - 2015-02-20 12:05 - 00063067 _____ () C:\Users\PC\Desktop\project.cpr
2015-02-16 19:04 - 2015-02-20 11:48 - 00066320 _____ () C:\Users\PC\Desktop\project-02.bak
2015-02-16 19:04 - 2015-02-20 11:33 - 00066320 _____ () C:\Users\PC\Desktop\project-03.bak
2015-02-16 19:04 - 2015-02-20 11:18 - 00063872 _____ () C:\Users\PC\Desktop\project-04.bak
2015-02-16 19:04 - 2015-02-20 11:03 - 00063648 _____ () C:\Users\PC\Desktop\project-05.bak
2015-02-16 19:04 - 2015-02-20 10:48 - 00062624 _____ () C:\Users\PC\Desktop\project-06.bak
2015-02-16 19:04 - 2015-02-18 10:21 - 00065808 _____ () C:\Users\PC\Desktop\project-07.bak
2015-02-16 19:04 - 2015-02-17 12:59 - 00060768 _____ () C:\Users\PC\Desktop\project-08.bak
2015-02-16 19:04 - 2015-02-17 12:44 - 00059200 _____ () C:\Users\PC\Desktop\project-09.bak
2015-02-16 19:04 - 2015-02-17 12:29 - 00059328 _____ () C:\Users\PC\Desktop\project-10.bak
2015-02-12 16:32 - 2015-02-17 18:06 - 00000000 ____D () C:\Users\PC\Downloads\AC 3 RePack
2015-02-11 22:05 - 2015-02-23 16:10 - 00000000 ____D () C:\Users\PC\Documents\Universe Sandbox
2015-02-11 22:05 - 2015-02-11 22:05 - 00000000 __SHD () C:\Users\PC\wc
2015-02-11 22:05 - 2015-02-11 22:05 - 00000000 __SHD () C:\Users\PC\AppData\Roaming\wyUpdate AU
2015-02-11 22:05 - 2015-02-11 22:05 - 00000000 ____D () C:\Users\PC\AppData\Local\Universe Sandbox
2015-02-11 22:04 - 2015-02-11 22:04 - 00000898 _____ () C:\Users\PC\Desktop\Universe Sandbox.lnk
2015-02-11 22:04 - 2015-02-11 22:04 - 00000898 _____ () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Universe Sandbox.lnk
2015-02-11 21:59 - 2015-02-23 16:13 - 00000000 ____D () C:\Users\PC\Downloads\Universe.Sandbox.RIP-Unleashed
2015-02-05 16:12 - 2015-02-05 16:12 - 00000000 ____D () C:\Users\PC\Desktop\Nowy folder
2015-02-04 22:50 - 2015-02-04 22:50 - 00046080 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-2-february-2015) (2).xlsx
2015-02-04 22:49 - 2015-02-04 22:49 - 00046080 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-2-february-2015) (1).xlsx
2015-02-04 22:48 - 2015-02-04 22:48 - 00046080 _____ () C:\Users\PC\Downloads\summer-timetable-2014-2015-(ver.-2-february-2015).xlsx
2015-02-04 22:34 - 2015-02-04 22:34 - 00001056 _____ () C:\Users\PC\Downloads\alice roberts recording 2.rar
2015-02-04 22:33 - 2015-02-04 22:33 - 01766152 _____ () C:\Users\PC\Downloads\wrar520.exe
2015-02-04 22:33 - 2015-02-04 22:33 - 00001056 _____ () C:\Users\PC\Desktop\alice roberts recording 2.rar
2015-02-04 22:27 - 2015-02-04 22:27 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Mael
2015-02-04 22:26 - 2015-02-04 22:26 - 00872304 _____ () C:\Users\PC\Downloads\HxDSetupEN.zip
2015-02-04 22:26 - 2015-02-04 22:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor
2015-02-04 22:26 - 2015-02-04 22:26 - 00000000 ____D () C:\Program Files (x86)\HxD
2015-02-04 22:19 - 2015-02-04 22:27 - 01334768 _____ () C:\Users\PC\Desktop\alice roberts recording 2.mp3.bak
2015-02-04 22:19 - 2015-02-04 22:19 - 00193200 _____ () C:\Users\PC\Downloads\lame_enc.zip
2015-02-04 22:19 - 2011-11-02 13:35 - 00380928 _____ () C:\Users\PC\Desktop\lame_enc.dll
2015-02-04 22:18 - 2015-02-04 22:18 - 15398720 _____ () C:\Users\PC\Desktop\recording alice roberts.wav
2015-02-04 22:16 - 2015-02-22 12:04 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Audacity
2015-02-04 22:16 - 2015-02-04 22:16 - 00001023 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-02-04 22:16 - 2015-02-04 22:16 - 00001011 _____ () C:\Users\Public\Desktop\Audacity.lnk
2015-02-04 22:16 - 2015-02-04 22:16 - 00000000 ____D () C:\Program Files (x86)\Audacity
2015-02-04 22:15 - 2015-02-04 22:15 - 22892794 _____ (Audacity Team ) C:\Users\PC\Downloads\audacity-win-2.0.6.exe
2015-02-04 22:08 - 2015-02-04 22:09 - 00736064 _____ ( ) C:\Users\PC\Downloads\pobierz_audacity-win-2.0.6.exe
2015-02-02 23:34 - 2015-02-02 23:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-02 23:30 - 2015-02-02 23:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2015-02-02 23:30 - 2015-02-02 23:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2015-02-02 17:59 - 2015-02-23 16:10 - 00000000 ____D () C:\Users\PC\Desktop\bioshock
2015-02-02 17:49 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-02-02 17:49 - 2011-04-09 07:45 - 05509504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-02 17:49 - 2011-04-09 07:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-02 17:49 - 2011-04-09 07:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-02 17:49 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-02-02 17:41 - 2014-09-15 01:44 - 03195392 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-02 17:22 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-02-02 17:22 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-02-02 17:22 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-02-02 17:22 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-02-02 17:22 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-02-02 17:22 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-02-02 17:22 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-02-02 17:21 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-02-02 17:21 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-02-02 17:03 - 2015-02-02 17:03 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-02-02 17:02 - 2015-02-02 23:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-02 17:02 - 2015-02-02 17:02 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2015-02-02 17:01 - 2015-02-02 17:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-02-02 17:00 - 2015-02-02 17:01 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-02-02 17:00 - 2015-02-02 17:00 - 00000000 ____D () C:\Windows\PCHEALTH
2015-02-02 16:57 - 2015-02-03 00:02 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-02 16:57 - 2015-02-02 17:00 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-02-02 16:57 - 2015-02-02 16:57 - 00000000 ____D () C:\Users\PC\AppData\Local\Microsoft Help
2015-02-02 16:57 - 2015-02-02 16:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2015-02-02 16:57 - 2015-02-02 16:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-02-02 16:57 - 2015-02-02 16:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-02-02 16:56 - 2015-02-02 16:56 - 00000000 __RHD () C:\MSOCache
2015-02-02 16:36 - 2015-02-23 16:13 - 00000000 ____D () C:\Users\PC\Downloads\[]Microsoft Office Professional Plus (x64) 2013 Incl  Activator  P2P
2015-02-02 08:36 - 2015-02-03 08:18 - 00009904 _____ () C:\Windows\PFRO.log
2015-02-01 23:09 - 2015-02-01 23:09 - 00000000 ____D () C:\Users\PC\Desktop\Audio
2015-02-01 23:08 - 2009-10-11 21:58 - 01177600 _____ (AD) C:\Windows\SysWOW64\SYNSOEMU.DLL
2015-02-01 23:07 - 2015-02-01 23:07 - 00000000 ____D () C:\ProgramData\VST3 Presets
2015-02-01 23:06 - 2015-02-01 23:06 - 00000000 ____D () C:\Users\PC\AppData\Local\eLicenser
2015-02-01 23:05 - 2015-02-01 23:05 - 00000000 ____D () C:\ProgramData\Syncrosoft
2015-02-01 23:04 - 2015-02-01 23:04 - 00004534 _____ () C:\Windows\DPINST.LOG
2015-02-01 23:04 - 2015-02-01 23:04 - 00000049 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe.cfg
2015-02-01 23:04 - 2015-02-01 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser
2015-02-01 23:04 - 2015-02-01 23:04 - 00000000 ____D () C:\Program Files (x86)\Syncrosoft
2015-02-01 23:04 - 2011-12-14 20:21 - 00086016 _____ () C:\Windows\SysWOW64\SYNSOPOS.exe
2015-02-01 23:03 - 2015-02-01 23:05 - 00000000 ____D () C:\ProgramData\eLicenser
2015-02-01 23:03 - 2015-02-01 23:04 - 00000000 ____D () C:\Program Files (x86)\eLicenser
2015-02-01 23:03 - 2015-02-01 23:03 - 00000000 ____D () C:\Program Files\eLicenser
2015-02-01 23:03 - 2012-12-07 16:48 - 01714176 _____ (Steinberg Media Technologies GmbH) C:\Windows\system32\SYNSOACC.dll
2015-02-01 23:03 - 2012-12-07 16:48 - 01277952 _____ (Steinberg Media Technologies GmbH) C:\Windows\SysWOW64\SYNSOACC.dll
2015-02-01 23:01 - 2015-02-01 23:02 - 34294936 _____ (Steinberg Media Technologies GmbH) C:\Users\PC\Downloads\eLicenserControlSetup.exe
2015-02-01 22:59 - 2015-02-01 22:59 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne
2015-02-01 22:59 - 2015-02-01 22:59 - 00000000 ____D () C:\ProgramData\Steinberg
2015-02-01 22:58 - 2015-02-01 22:58 - 00002128 _____ () C:\Users\PC\Desktop\Cubase 5.lnk
2015-02-01 22:57 - 2015-02-23 16:10 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Steinberg
2015-02-01 22:57 - 2015-02-23 15:22 - 00000000 ____D () C:\Program Files (x86)\Steinberg
2015-02-01 22:57 - 2015-02-01 23:08 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5
2015-02-01 22:46 - 2015-02-05 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2015-02-01 22:46 - 2015-02-04 22:33 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 22:46 - 2015-02-04 22:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-01 22:46 - 2015-02-01 22:46 - 01938744 _____ () C:\Users\PC\Downloads\wrar520pl.exe
2015-02-01 22:46 - 2015-02-01 22:46 - 00736064 _____ ( ) C:\Users\PC\Downloads\pobierz_WinRAR-32bit (1).exe
2015-02-01 22:46 - 2015-02-01 22:46 - 00000000 ____D () C:\Users\PC\AppData\Roaming\WinRAR
2015-02-01 22:45 - 2015-02-01 22:46 - 00736064 _____ ( ) C:\Users\PC\Downloads\pobierz_WinRAR-32bit.exe
2015-02-01 21:07 - 2015-02-23 16:13 - 00000000 ____D () C:\Users\PC\Downloads\Steinberg.Cubase.v5.1.DVDR-AiRISO
2015-02-01 21:06 - 2015-02-23 16:13 - 00000000 ____D () C:\Users\PC\Downloads\Red Army
2015-02-01 21:06 - 2015-02-01 21:06 - 00000810 _____ () C:\Users\PC\Desktop\µTorrent.lnk
2015-02-01 21:06 - 2015-02-01 21:06 - 00000790 _____ () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-02-01 21:06 - 2015-02-01 21:06 - 00000000 ____D () C:\ProgramData\APN
2015-02-01 21:05 - 2015-02-25 15:39 - 00000000 ____D () C:\Users\PC\AppData\Roaming\uTorrent
2015-02-01 21:05 - 2015-02-01 21:05 - 01740880 _____ (BitTorrent Inc.) C:\Users\PC\Downloads\uTorrent.exe
2015-02-01 19:28 - 2015-02-23 16:12 - 00000000 ____D () C:\Users\PC\Downloads\literaturaw
2015-02-01 19:17 - 2015-02-24 22:27 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Foxit Software
2015-02-01 19:17 - 2015-02-01 19:17 - 00001355 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk
2015-02-01 19:17 - 2015-02-01 19:17 - 00000000 ____D () C:\Users\Public\Foxit Software
2015-02-01 19:17 - 2015-02-01 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2015-02-01 19:17 - 2015-02-01 19:17 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2015-02-01 19:13 - 2015-02-01 19:15 - 37963088 _____ (Foxit Software Inc. ) C:\Users\PC\Downloads\FoxitReader703.0916_prom_enu_Setup.exe
2015-02-01 19:10 - 2015-02-01 19:10 - 00031328 _____ () C:\Users\PC\Downloads\Juliusz-Pastucha-Wypracowanie-wykład-ogólnouniwersytecki.odt
2015-02-01 19:09 - 2015-02-01 19:10 - 51456112 _____ () C:\Users\PC\Downloads\literaturaw.zip
2015-02-01 13:46 - 2015-02-23 12:58 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-01 13:46 - 2015-02-01 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-01 13:45 - 2015-02-25 21:56 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-01 13:45 - 2015-02-25 20:56 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-01 13:45 - 2015-02-23 16:09 - 00000000 ____D () C:\Users\PC\AppData\Local\Google
2015-02-01 13:45 - 2015-02-04 20:51 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-01 13:45 - 2015-02-04 20:51 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-01 13:45 - 2015-02-01 13:46 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-01 13:45 - 2015-02-01 13:45 - 00000000 ____D () C:\Users\PC\AppData\Local\Deployment
2015-02-01 13:45 - 2015-02-01 13:45 - 00000000 ____D () C:\Users\PC\AppData\Local\Apps\2.0
2015-02-01 13:20 - 2014-12-23 00:41 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-01 13:10 - 2015-02-25 12:09 - 00000600 _____ () C:\Users\PC\PUTTY.RND
2015-01-31 11:19 - 2015-01-31 11:19 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-31 11:19 - 2015-01-31 11:19 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-31 11:19 - 2011-08-23 21:57 - 00565352 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-01-31 11:19 - 2011-08-23 21:57 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-01-31 11:19 - 2011-08-23 21:57 - 00074272 _____ () C:\Windows\system32\RtNicProp64.dll
2015-01-31 11:14 - 2015-01-31 11:14 - 00000000 _____ () C:\Windows\ativpsrm.bin
2015-01-31 11:13 - 2015-01-31 11:13 - 00000000 ____D () C:\Program Files\AMD
2015-01-31 11:13 - 2015-01-31 11:13 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-31 10:57 - 2013-10-06 17:05 - 00421888 _____ () C:\Users\PC\Desktop\putty.exe
2015-01-31 10:55 - 2015-01-31 10:55 - 00000000 ____D () C:\Program Files\AMD Quick Stream
2015-01-31 10:54 - 2015-01-31 10:54 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2015-01-31 10:49 - 2015-02-03 08:19 - 00111520 _____ () C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-31 10:49 - 2015-01-31 10:49 - 00000000 ____D () C:\Users\PC\AppData\Roaming\ATI
2015-01-31 10:49 - 2015-01-31 10:49 - 00000000 ____D () C:\Users\PC\AppData\Local\ATI
2015-01-31 10:49 - 2015-01-31 10:49 - 00000000 ____D () C:\ProgramData\ATI
2015-01-31 10:30 - 2015-01-31 10:30 - 00000000 ____D () C:\Users\PC\AppData\Local\AppEx Networks
2015-01-31 10:28 - 2015-01-31 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-31 10:28 - 2015-01-31 10:28 - 00000000 ____D () C:\ProgramData\AMD
2015-01-31 10:28 - 2015-01-31 10:28 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2015-01-31 10:28 - 2015-01-31 10:28 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-31 10:28 - 2012-06-23 06:23 - 00199008 _____ (AppEx Networks Corporation) C:\Windows\system32\Drivers\appexDrv.sys
2015-01-31 10:27 - 2015-01-31 10:27 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-01-31 10:26 - 2015-01-31 10:26 - 01607202 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-31 10:23 - 2009-11-25 11:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2015-01-31 10:23 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2015-01-31 10:23 - 2009-11-25 11:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2015-01-31 10:23 - 2009-11-25 11:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2015-01-31 10:21 - 2015-01-31 10:28 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-31 10:21 - 2015-01-31 10:27 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-31 10:21 - 2015-01-31 10:21 - 00000000 ____D () C:\Program Files\ATI
2015-01-31 10:20 - 2015-01-31 10:20 - 00000000 ____D () C:\Users\PC\AppData\Roaming\WinBatch
2015-01-31 09:52 - 2015-01-31 09:52 - 00001455 _____ () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-31 09:52 - 2015-01-31 09:52 - 00001421 _____ () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-01-31 09:51 - 2015-02-23 16:13 - 00000000 ____D () C:\Users\PC
2015-01-31 09:51 - 2015-02-23 15:13 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-31 09:51 - 2015-01-31 09:51 - 00000020 ___SH () C:\Users\PC\ntuser.ini
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Public\Documents\Moje wideo
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Public\Documents\Moje obrazy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Public\Documents\Moja muzyka
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Ustawienia lokalne
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Szablony
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Moje dokumenty
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Menu Start
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Documents\Moje wideo
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Documents\Moje obrazy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Documents\Moja muzyka
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\AppData\Local\Historia
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\PC\AppData\Local\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Ustawienia lokalne
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Szablony
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Moje dokumenty
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Menu Start
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Documents\Moje wideo
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Documents\Moje obrazy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Documents\Moja muzyka
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Historia
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje wideo
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Moje obrazy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Moja muzyka
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Historia
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Ulubione
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Szablony
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Pulpit
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Menu Start
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Dokumenty
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 _SHDL () C:\ProgramData\Dane aplikacji
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 __SHD () C:\Recovery
2015-01-31 09:51 - 2015-01-31 09:51 - 00000000 ____D () C:\Users\PC\AppData\Local\VirtualStore
2015-01-31 09:51 - 2009-07-14 05:54 - 00001304 _____ () C:\Users\PC\Desktop\Notepad.lnk
2015-01-31 09:51 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-31 09:48 - 2015-01-31 09:48 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-01-31 09:48 - 2015-01-31 09:48 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-01-31 09:47 - 2015-01-31 09:47 - 00001313 _____ () C:\Windows\TSSysprep.log
2015-01-31 09:46 - 2015-01-31 09:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-01-31 09:45 - 2015-02-25 15:36 - 01367468 _____ () C:\Windows\WindowsUpdate.log
2015-01-31 09:41 - 2015-01-31 09:51 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-25 21:51 - 2009-07-14 18:55 - 00739932 _____ () C:\Windows\system32\perfh015.dat
2015-02-25 21:51 - 2009-07-14 18:55 - 00155474 _____ () C:\Windows\system32\perfc015.dat
2015-02-25 21:51 - 2009-07-14 06:13 - 01668226 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-25 15:40 - 2009-07-14 05:45 - 00020688 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-25 15:40 - 2009-07-14 05:45 - 00020688 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-25 15:33 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-25 15:33 - 2009-07-14 05:51 - 00021357 _____ () C:\Windows\setupact.log
2015-02-23 16:10 - 2014-11-27 03:12 - 00000000 ____D () C:\Users\PC\AppData\Roaming\System
2015-02-07 13:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-04 11:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-02-03 08:19 - 2009-07-14 05:45 - 00433480 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-03 00:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-02-03 00:01 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-02-02 23:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-02-02 17:02 - 2009-07-14 19:09 - 00000000 ____D () C:\Windows\ShellNew
2015-02-02 08:36 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-01-31 10:21 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2015-01-31 09:51 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-31 09:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-31 09:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-31 09:48 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-31 09:47 - 2009-07-14 05:46 - 00001774 _____ () C:\Windows\DtcInstall.log
2015-01-31 09:47 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-01-31 09:42 - 2009-07-14 19:09 - 00000000 ____D () C:\Windows\CSC
2015-01-31 09:40 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2015-01-31 09:40 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

==================== Files in the root of some directories =======

2015-01-07 15:27 - 2015-01-07 15:27 - 0000120 _____ () C:\Users\PC\AppData\Roaming\20dc23ac.dat
2015-02-23 16:10 - 2015-02-23 16:10 - 0008630 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.HTML
2015-02-23 16:10 - 2015-02-23 16:10 - 0046005 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.PNG
2015-02-23 16:10 - 2015-02-23 16:10 - 0004258 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.TXT
2015-02-23 16:10 - 2015-02-23 16:10 - 0000292 _____ () C:\Users\PC\AppData\Roaming\HELP_DECRYPT.URL
2015-02-24 12:54 - 2015-02-24 12:54 - 0000000 ____H () C:\Users\PC\AppData\Local\BITD91F.tmp
2015-02-23 16:09 - 2015-02-23 16:09 - 0008630 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.HTML
2015-02-23 16:09 - 2015-02-23 16:09 - 0046005 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.PNG
2015-02-23 16:09 - 2015-02-23 16:09 - 0004258 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.TXT
2015-02-23 16:09 - 2015-02-23 16:09 - 0000292 _____ () C:\Users\PC\AppData\Local\HELP_DECRYPT.URL
2015-02-24 12:53 - 2015-02-24 12:53 - 0000000 _____ () C:\Users\PC\AppData\Local\{75A2DCDF-222F-4890-AC46-4C6C3C589A80}
2015-02-23 16:09 - 2015-02-23 16:09 - 0008630 _____ () C:\ProgramData\HELP_DECRYPT.HTML
2015-02-23 16:09 - 2015-02-23 16:09 - 0046005 _____ () C:\ProgramData\HELP_DECRYPT.PNG
2015-02-23 16:09 - 2015-02-23 16:09 - 0004258 _____ () C:\ProgramData\HELP_DECRYPT.TXT
2015-02-23 16:09 - 2015-02-23 16:09 - 0000292 _____ () C:\ProgramData\HELP_DECRYPT.URL

Files to move or delete:
====================
C:\Users\PC\AppData\Roaming\Microsoft\Windows\IEUpdate\rasautou.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-23 12:37

==================== End Of Log ============================