Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-04-2015 01
Ran by Piotr (administrator) on KROKODYL on 23-04-2015 10:54:08
Running from C:\Users\Piotr\Desktop
Loaded Profiles: Piotr & MSSQL$SQLEXPRESS (Available profiles: Piotr & Administrator & MSSQL$SQLEXPRESS)
Platform: Windows 8.1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Simnet Ltd.                                                 ) C:\Program Files (x86)\Sticky Notes\ssn.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
() C:\Program Files (x86)\FastStone Capture\FSCapture.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\setup\instup.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [59923440 2015-01-01] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2015-01-01] (Lenovo(beijing) Limited)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-11] (IDT, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2777840 2013-08-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-17] (Avast Software s.r.o.)
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\Run: [Simple Sticky Notes] => C:\Program Files (x86)\Sticky Notes\ssn.exe [683048 2015-04-06] (Simnet Ltd.                                                 )
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\MountPoints2: {1423a989-dedb-11e4-8345-a0a8cd1ba8ae} - "F:\AutoRun.exe" 
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\MountPoints2: {1423a9c2-dedb-11e4-8345-a0a8cd1ba8ae} - "F:\AutoRun.exe" 
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\MountPoints2: {1423aad0-dedb-11e4-8345-a0a8cd1ba8ae} - "G:\AutoRun.exe" 
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\MountPoints2: {ae1df94d-dc44-11e4-833d-a0a8cd1ba8ae} - "F:\AutoRun.exe" 
HKU\S-1-5-21-394100221-3083635422-585930115-1001\...\MountPoints2: {ae1dfa00-dc44-11e4-833d-a0a8cd1ba8ae} - "F:\AutoRun.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird.lnk [2015-01-12]
ShortcutTarget: Mozilla Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-17] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (http://tortoisesvn.net)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

URLSearchHook: [S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133] ATTENTION ==> Default URLSearchHook is missing.
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-17] (Avast Software s.r.o.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-17] (Avast Software s.r.o.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{901EC6E0-3167-46BC-A454-B7BCC20EBEC7}: [NameServer] 212.2.96.51 212.2.96.52

FireFox:
========
FF ProfilePath: C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ffor1wia.default-1423942391988
FF Homepage: hxxp://interia.pl/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Translate This! - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ffor1wia.default-1423942391988\Extensions\jid0-k75TfRGfOXPHfEZmJ9cKu5eCgLc@jetpack.xpi [2015-02-16]
FF Extension: Adblock Plus - C:\Users\Piotr\AppData\Roaming\Mozilla\Firefox\Profiles\ffor1wia.default-1423942391988\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-05]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-17] (Avast Software s.r.o.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2228440 2013-04-24] (Broadcom Corporation.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [351824 2013-10-28] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [326760 2014-09-01] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156104 2013-06-04] (Intel Corporation)
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [678480 2013-12-19] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [370368 2014-02-21] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S2 PLAY ONLINE. RunOuc; C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe [651856 2013-10-26] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL12.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2014-02-21] (Microsoft Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [338944 2013-08-11] (IDT, Inc.) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-17] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-17] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-17] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-17] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-17] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-17] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-17] ()
S3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [172760 2013-04-24] (Broadcom Corporation.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-03-25] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1366328 2013-03-28] (Motorola Solutions, Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-02-24] ()
S3 hwusb_cdcacm; C:\Windows\system32\DRIVERS\ew_cdcacm.sys [121728 2013-12-10] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\Windows\system32\DRIVERS\ew_wwanecm.sys [376704 2013-12-10] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-04] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [74344 2013-07-03] (Intel Corporation)
S3 lehidmini; C:\Windows\System32\drivers\leath_hid.sys [39704 2013-08-29] (Atheros)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S4 RsFx0300; C:\Windows\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-23 10:54 - 2015-04-23 10:54 - 00018476 _____ () C:\Users\Piotr\Desktop\FRST.txt
2015-04-23 10:43 - 2015-04-23 10:47 - 316230584 _____ (VMware, Inc.) C:\Users\Piotr\Desktop\VMware-workstation-full-11.1.0-2496824.exe
2015-04-22 12:06 - 2015-04-23 10:53 - 02099712 _____ (Farbar) C:\Users\Piotr\Desktop\FRST64.exe
2015-04-19 21:43 - 2015-04-19 21:43 - 00000635 _____ () C:\Users\Piotr\Desktop\mercedes_czesci.txt
2015-04-18 18:55 - 2015-04-18 18:55 - 00000103 _____ () C:\Users\Piotr\Documents\zmien_rozmiar.xbs
2015-04-18 18:07 - 2015-04-18 18:07 - 00002019 _____ () C:\Users\Public\Desktop\FileZilla Client.lnk
2015-04-18 18:05 - 2015-04-18 18:06 - 06420600 _____ (Tim Kosse) C:\Users\Piotr\Downloads\FileZilla_3.10.3_win64-setup.exe
2015-04-17 11:38 - 2015-04-17 11:38 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-17 11:38 - 2015-04-17 11:38 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-04-16 22:09 - 2015-04-22 09:12 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\uTorrent
2015-04-16 22:09 - 2015-04-16 22:09 - 00000866 _____ () C:\Users\Piotr\Desktop\µTorrent.lnk
2015-04-16 22:09 - 2015-04-16 22:09 - 00000846 _____ () C:\Users\Piotr\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2015-04-15 11:35 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 11:35 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 11:35 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-15 11:35 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-15 11:31 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 11:31 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 11:31 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-15 11:31 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 11:31 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 11:31 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 11:31 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 11:31 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 11:31 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-15 11:31 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 11:31 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-15 11:31 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 11:31 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 11:31 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 11:31 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 11:31 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-15 11:31 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 11:31 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 11:31 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 11:31 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 11:31 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 11:31 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-15 11:31 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 11:31 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 11:31 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 11:31 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 11:31 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-15 11:31 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 11:31 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 11:31 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 11:31 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 11:31 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 11:31 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 11:31 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 11:31 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 11:31 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 11:31 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 11:31 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 11:31 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-15 11:31 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-15 11:31 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-15 11:31 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-15 11:31 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-15 11:31 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-15 11:31 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-15 11:31 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-15 11:31 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-15 11:31 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-15 11:27 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 11:27 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 11:27 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 11:27 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 11:27 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 11:27 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 11:27 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 11:27 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 11:27 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 11:27 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-15 11:27 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-15 11:27 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 11:27 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 11:27 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 11:27 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 11:27 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 11:27 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 11:27 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 11:27 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-15 11:27 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 11:27 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 11:27 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 11:27 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-10 17:16 - 2015-04-10 17:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-09 20:53 - 2015-04-09 20:55 - 00000073 _____ () C:\Users\Piotr\Desktop\tapicer.txt
2015-04-09 19:46 - 2015-04-09 19:46 - 00001062 _____ () C:\Users\Public\Desktop\PLAY ONLINE.lnk
2015-04-09 19:46 - 2015-04-09 19:46 - 00000000 ____D () C:\ProgramData\PLAY ONLINE
2015-04-09 19:46 - 2015-04-09 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE
2015-04-09 19:44 - 2015-04-09 19:46 - 00000000 ____D () C:\Program Files (x86)\PLAY ONLINE
2015-04-08 21:56 - 2015-04-19 14:57 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\Weintek
2015-04-08 21:54 - 2015-04-08 21:54 - 00000000 ____D () C:\ProgramData\Package Cache
2015-04-08 21:53 - 2015-04-08 21:53 - 00000765 _____ () C:\Users\Public\Desktop\WEINTEK.lnk
2015-04-08 21:53 - 2015-04-08 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEINTEK
2015-04-07 12:35 - 2015-04-07 12:35 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-07 12:35 - 2015-04-07 12:35 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-06 12:54 - 2015-04-06 12:54 - 00000617 _____ () C:\Users\Piotr\Desktop\tekst.txt
2015-04-06 12:54 - 2015-04-06 12:54 - 00000000 ____D () C:\Users\Piotr\Desktop\Nowy folder
2015-04-06 12:13 - 2015-04-06 12:14 - 00000000 ____D () C:\ProgramData\Internet Manager
2015-04-06 12:13 - 2015-04-06 12:13 - 00001264 _____ () C:\Users\Public\Desktop\Internet Manager.lnk
2015-04-06 12:13 - 2015-04-06 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager
2015-04-06 12:13 - 2015-04-06 12:13 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2015-04-06 12:13 - 2013-12-10 07:37 - 00376704 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_wwanecm.sys
2015-04-06 12:13 - 2013-12-10 07:36 - 00121728 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_cdcacm.sys
2015-04-06 12:13 - 2013-11-30 11:11 - 00246272 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2015-04-06 12:13 - 2013-11-30 11:10 - 00110592 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2015-04-06 12:13 - 2013-11-30 11:10 - 00091648 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2015-04-06 12:13 - 2013-11-30 11:10 - 00077312 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2015-04-06 12:13 - 2013-11-30 11:10 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2015-04-06 12:13 - 2013-11-30 11:01 - 00456704 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2015-04-06 12:13 - 2013-11-30 10:55 - 00226176 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2015-04-06 12:13 - 2013-01-25 03:16 - 00109568 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2015-04-06 12:13 - 2012-12-22 03:46 - 00014976 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2015-04-06 12:13 - 2012-08-20 02:37 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2015-04-06 12:13 - 2010-10-08 10:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2015-04-06 12:13 - 2010-09-26 12:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2015-04-06 12:12 - 2015-04-09 20:46 - 00000000 ____D () C:\ProgramData\DatacardService
2015-04-03 21:05 - 2015-04-03 21:05 - 00016861 _____ () C:\Users\Piotr\Desktop\busy 1.odt
2015-04-02 22:00 - 2015-04-03 08:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-04-01 23:45 - 2015-04-01 23:45 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-04-01 17:48 - 2015-04-01 17:53 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\TortoiseSVN
2015-04-01 17:48 - 2015-04-01 17:48 - 00000600 _____ () C:\Users\Piotr\AppData\Roaming\PUTTY.RND
2015-04-01 17:47 - 2015-04-23 09:57 - 00000000 ____D () C:\Users\Piotr\AppData\Local\TSVNCache
2015-04-01 17:46 - 2015-04-01 17:46 - 00000000 ____D () C:\Users\Piotr\AppData\Local\TortoiseSVN
2015-04-01 17:44 - 2015-04-01 17:44 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\Subversion
2015-04-01 17:43 - 2015-04-01 17:43 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Subversion
2015-04-01 17:43 - 2015-04-01 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
2015-04-01 17:43 - 2015-04-01 17:43 - 00000000 ____D () C:\Program Files\TortoiseSVN
2015-04-01 17:43 - 2015-04-01 17:43 - 00000000 ____D () C:\Program Files\Common Files\TortoiseOverlays
2015-04-01 17:42 - 2015-04-01 17:42 - 19603456 _____ () C:\Users\Administrator\Downloads\TortoiseSVN-1.8.11.26392-x64-svn-1.8.13.msi
2015-04-01 17:42 - 2015-04-01 17:42 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Macromedia
2015-04-01 17:42 - 2015-04-01 17:42 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2015-04-01 17:41 - 2015-04-01 17:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA Corporation
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Thunderbird
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\AVAST Software
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Thunderbird
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NVIDIA
2015-04-01 17:40 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2015-04-01 17:39 - 2015-04-01 17:40 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Packages
2015-04-01 17:39 - 2015-04-01 17:39 - 00001453 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-01 17:39 - 2015-04-01 17:39 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Ustawienia lokalne
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Szablony
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Moje dokumenty
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Menu Start
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Documents\Moje wideo
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Documents\Moje obrazy
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Documents\Moja muzyka
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\Dane aplikacji
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Historia
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Dane aplikacji
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2015-04-01 17:39 - 2015-04-01 17:39 - 00000000 ____D () C:\Users\Administrator
2015-04-01 17:39 - 2015-03-11 13:07 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-01 17:39 - 2015-02-20 00:04 - 00000000 ____D () C:\Users\Administrator\Documents\Visual Studio 2010
2015-04-01 17:39 - 2015-01-06 15:32 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-01 17:39 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-01 17:39 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-01 17:39 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-01 17:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-03-28 00:36 - 2015-04-22 22:43 - 00000600 _____ () C:\Users\Piotr\AppData\Local\PUTTY.RND
2015-03-28 00:33 - 2015-03-28 00:33 - 00524288 _____ (Simon Tatham) C:\Users\Piotr\Desktop\putty.exe
2015-03-27 20:50 - 2015-03-27 21:01 - 00000446 _____ () C:\Users\Piotr\Desktop\fun.sci
2015-03-27 13:46 - 2015-03-27 13:46 - 00001820 _____ () C:\Users\Piotr\Desktop\timer.txt
2015-03-26 13:47 - 2015-04-23 10:54 - 00000000 ____D () C:\FRST
2015-03-26 13:40 - 2015-03-26 13:40 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-26 12:12 - 2015-03-26 12:18 - 00021006 _____ () C:\Users\Piotr\Desktop\faktura1 — stara.odt
2015-03-25 14:03 - 2015-03-25 14:03 - 00000000 ____D () C:\Users\Piotr\Desktop\mercedes

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-23 10:51 - 2014-12-30 13:04 - 00000000 ____D () C:\Users\Piotr\AppData\Local\VirtualStore
2015-04-23 10:48 - 2015-01-01 22:57 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-23 10:10 - 2014-12-22 22:54 - 01632595 _____ () C:\Windows\WindowsUpdate.log
2015-04-23 10:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-23 10:03 - 2013-11-26 16:08 - 02136390 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-23 10:03 - 2013-08-23 01:12 - 00920100 _____ () C:\Windows\system32\perfh015.dat
2015-04-23 10:03 - 2013-08-23 01:12 - 00208016 _____ () C:\Windows\system32\perfc015.dat
2015-04-23 10:00 - 2014-12-30 13:06 - 00003984 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C9DD122B-F5BF-444B-8D85-0C725DFFDB2E}
2015-04-23 09:57 - 2013-08-22 16:46 - 00129402 _____ () C:\Windows\setupact.log
2015-04-23 09:57 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-22 16:58 - 2015-02-24 10:51 - 00000000 ____D () C:\Users\Piotr\AppData\Local\CrashDumps
2015-04-22 12:09 - 2015-02-22 23:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-04-22 12:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-04-22 12:02 - 2015-02-16 14:04 - 00000000 ____D () C:\Users\Piotr\Documents\Simple Sticky Notes
2015-04-22 11:50 - 2015-02-02 14:51 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\XnView
2015-04-21 12:48 - 2015-03-05 12:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-04-21 12:48 - 2015-02-19 22:38 - 00000000 ____D () C:\Users\MSSQL$SQLEXPRESS
2015-04-21 12:48 - 2014-12-30 13:04 - 00000000 ____D () C:\Users\Piotr
2015-04-19 23:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-19 11:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-18 22:17 - 2015-02-22 01:29 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\FileZilla
2015-04-18 18:07 - 2015-02-22 01:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-04-18 18:07 - 2015-02-22 01:29 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2015-04-18 16:06 - 2014-12-30 13:09 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-394100221-3083635422-585930115-1001
2015-04-17 12:32 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-04-17 12:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 11:38 - 2015-03-05 12:26 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-17 11:38 - 2015-03-05 12:26 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-17 11:38 - 2013-11-26 16:04 - 00732430 _____ () C:\Windows\PFRO.log
2015-04-17 11:35 - 2015-01-03 16:04 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 11:35 - 2015-01-03 16:04 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 21:16 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 16:42 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-15 20:32 - 2015-01-03 15:40 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 20:30 - 2015-01-03 15:40 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 11:52 - 2015-01-01 22:57 - 00003818 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-12 21:09 - 2015-01-01 22:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 16:20 - 2015-02-16 14:04 - 00001023 _____ () C:\Users\Piotr\Desktop\Simple Sticky Notes.lnk
2015-04-10 16:20 - 2015-02-16 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes
2015-04-10 16:20 - 2015-02-16 14:04 - 00000000 ____D () C:\Program Files (x86)\Sticky Notes
2015-04-09 11:55 - 2013-08-22 16:44 - 00375368 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-06 21:23 - 2015-01-02 01:05 - 00000000 ____D () C:\Users\Piotr\AppData\Roaming\QtProject
2015-04-06 12:15 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\tracing
2015-04-01 18:48 - 2014-12-22 22:53 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-394100221-3083635422-585930115-500
2015-04-01 17:39 - 2014-12-30 13:04 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-25 14:55 - 2015-02-07 19:40 - 00000000 ____D () C:\Users\Piotr\Desktop\ServoCtl

==================== Files in the root of some directories =======

2015-04-01 17:48 - 2015-04-01 17:48 - 0000600 _____ () C:\Users\Piotr\AppData\Roaming\PUTTY.RND
2015-03-28 00:36 - 2015-04-22 22:43 - 0000600 _____ () C:\Users\Piotr\AppData\Local\PUTTY.RND
2014-12-31 18:44 - 2014-12-31 18:44 - 0007597 _____ () C:\Users\Piotr\AppData\Local\Resmon.ResmonCfg
2015-01-14 19:26 - 2015-01-14 20:20 - 0003072 _____ () C:\Users\Piotr\AppData\Local\_fossil
2013-11-27 09:36 - 2013-11-27 09:36 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-22 03:54

==================== End Of Log ============================