Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Olszewski (administrator) on OLSZEWSKI-PC on 19-06-2015 18:30:13
Running from C:\Users\Olszewski\Downloads
Loaded Profiles: Olszewski (Available Profiles: Olszewski)
Platform: Windows 7 Professional (X64) OS Language: Polski (Polska)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [450048 2009-07-21] (IDT, Inc.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPCam_Menu] => c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [320056 2009-06-24] ( Hewlett-Packard Development Company, L.P.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-19] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-19]
CHR Extension: (Google Docs) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-19]
CHR Extension: (Google Drive) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-19]
CHR Extension: (YouTube) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-19]
CHR Extension: (Google Search) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-19]
CHR Extension: (Google Sheets) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-19]
CHR Extension: (Google Wallet) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-19]
CHR Extension: (Gmail) - C:\Users\Olszewski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-19]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [89600 2009-03-01] (Andrea Electronics Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe [240128 2009-07-21] (IDT, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-19 18:27 - 2015-06-19 18:27 - 00014252 _____ C:\Users\Olszewski\Downloads\Addition.txt
2015-06-19 18:26 - 2015-06-19 18:30 - 00006978 _____ C:\Users\Olszewski\Downloads\FRST.txt
2015-06-19 18:26 - 2015-06-19 18:30 - 00000000 ____D C:\FRST
2015-06-19 18:26 - 2015-06-19 18:26 - 02109952 _____ (Farbar) C:\Users\Olszewski\Downloads\FRST64.exe
2015-06-19 18:01 - 2015-02-24 04:17 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-06-19 17:57 - 2015-06-19 17:57 - 00002261 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-19 17:57 - 2015-06-19 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-19 17:57 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-06-19 17:57 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-06-19 17:57 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-06-19 17:57 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-06-19 17:56 - 2015-06-19 18:07 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-19 17:56 - 2015-06-19 18:07 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-19 17:56 - 2015-06-19 18:02 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-19 17:56 - 2015-06-19 18:02 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-06-19 17:56 - 2015-06-19 17:57 - 00000000 ____D C:\Users\Olszewski\AppData\Local\Google
2015-06-19 17:56 - 2015-06-19 17:57 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-19 17:56 - 2015-06-19 17:56 - 00000000 ____D C:\Users\Olszewski\AppData\Local\Deployment
2015-06-19 17:56 - 2015-06-19 17:56 - 00000000 ____D C:\Users\Olszewski\AppData\Local\Apps\2.0
2015-06-19 17:56 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-06-19 17:56 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-06-18 21:53 - 2015-06-18 21:01 - 00000000 ____D C:\Windows\Panther
2015-06-18 21:36 - 2015-06-18 21:36 - 00000000 _____ C:\Users\Olszewski\AppData\Local\QSwitch.txt
2015-06-18 21:36 - 2015-06-18 21:36 - 00000000 _____ C:\Users\Olszewski\AppData\Local\DSwitch.txt
2015-06-18 21:36 - 2015-06-18 21:36 - 00000000 _____ C:\Users\Olszewski\AppData\Local\AtStart.txt
2015-06-18 21:34 - 2015-06-18 21:34 - 00000000 ____D C:\Users\Olszewski\AppData\Roaming\hpqLog
2015-06-18 21:33 - 2009-04-29 08:48 - 00018432 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\system32\Drivers\HpqKbFiltr.sys
2015-06-18 21:33 - 2008-09-08 14:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\SysWOW64\BttnCmns.dll
2015-06-18 21:33 - 2008-09-08 14:31 - 01885488 _____ (Hewlett-Packard Company) C:\Windows\SysWOW64\BttnCmn.dll
2015-06-18 21:33 - 2006-11-02 07:04 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01005.dll
2015-06-18 21:32 - 2015-06-18 21:34 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-06-18 21:32 - 2015-06-18 21:32 - 00000000 ____D C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2015-06-18 21:32 - 2015-06-18 21:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2015-06-18 21:32 - 2015-06-18 21:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP
2015-06-18 21:30 - 2015-06-18 21:31 - 00043337 _____ C:\Windows\bcmwl.log
2015-06-18 21:30 - 2015-06-18 21:30 - 00016449 _____ C:\Windows\bcm78B8.tmp
2015-06-18 21:30 - 2015-06-18 21:30 - 00000000 ____D C:\ProgramData\InstallShield
2015-06-18 21:30 - 2009-02-02 03:27 - 07347200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSUSTORicon.dll
2015-06-18 21:29 - 2015-06-18 21:29 - 00000000 ____D C:\Program Files (x86)\JMicron
2015-06-18 21:27 - 2015-06-18 21:27 - 00004344 _____ C:\Windows\DPINST.LOG
2015-06-18 21:27 - 2015-06-18 21:27 - 00000000 ____D C:\Program Files\DIFX
2015-06-18 21:26 - 2015-06-18 21:26 - 00000000 ____D C:\Users\Olszewski\AppData\Roaming\InstallShield
2015-06-18 21:26 - 2015-06-18 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
2015-06-18 21:26 - 2009-06-04 18:54 - 00408600 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2015-06-18 21:25 - 2015-06-18 21:25 - 00000000 ____D C:\Windows\system32\SRSLabs
2015-06-18 21:25 - 2009-07-21 02:33 - 12158464 _____ (IDT, Inc.) C:\Windows\system32\idtcpl64.cpl
2015-06-18 21:25 - 2009-07-21 02:33 - 03593216 _____ (IDT, Inc.) C:\Windows\system32\stlang64.dll
2015-06-18 21:25 - 2009-07-21 02:33 - 00564224 _____ (IDT, Inc.) C:\Windows\system32\idt64mp1.exe
2015-06-18 21:25 - 2009-07-21 02:33 - 00450048 _____ (IDT, Inc.) C:\Windows\sttray64.exe
2015-06-18 21:25 - 2009-07-21 02:33 - 00209920 _____ (IDT, Inc.) C:\Windows\system32\staco64.dll
2015-06-18 21:25 - 2009-06-24 22:59 - 00160768 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAC64.dll
2015-06-18 21:25 - 2009-05-20 22:57 - 00436224 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTEC64.dll
2015-06-18 21:25 - 2009-03-01 21:58 - 00068608 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTAR64.dll
2015-06-18 21:25 - 2009-03-01 21:47 - 00090624 _____ (Andrea Electronics Corporation) C:\Windows\system32\AESTCo64.dll
2015-06-18 21:24 - 2015-06-18 21:26 - 00000000 ____D C:\Program Files\IDT
2015-06-18 21:24 - 2015-06-18 21:24 - 00057560 _____ C:\Users\Olszewski\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-18 21:24 - 2015-06-18 21:24 - 00000000 ____D C:\Users\Olszewski\AppData\Roaming\ATI
2015-06-18 21:24 - 2015-06-18 21:24 - 00000000 ____D C:\Users\Olszewski\AppData\Local\ATI
2015-06-18 21:24 - 2015-06-18 21:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2015-06-18 21:24 - 2015-06-18 21:24 - 00000000 ____D C:\ProgramData\ATI
2015-06-18 21:24 - 2009-07-21 02:33 - 01431552 _____ (IDT, Inc.) C:\Windows\system32\stapo64.dll
2015-06-18 21:24 - 2009-07-21 02:33 - 00604672 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2015-06-18 21:24 - 2009-07-21 02:33 - 00487936 _____ (IDT, Inc.) C:\Windows\system32\Drivers\stwrt64.sys
2015-06-18 21:24 - 2009-07-21 02:33 - 00431616 _____ (IDT, Inc.) C:\Windows\system32\stcplx64.dll
2015-06-18 21:21 - 2015-06-18 21:24 - 00000000 ____D C:\Program Files\ATI Technologies
2015-06-18 21:21 - 2015-06-18 21:21 - 00000000 ____D C:\Program Files\ATI
2015-06-18 21:21 - 2015-06-18 21:21 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-06-18 21:19 - 2015-06-18 21:26 - 00000000 ____D C:\Program Files (x86)\Intel
2015-06-18 21:19 - 2015-06-18 21:19 - 00000000 ____D C:\Intel
2015-06-18 21:19 - 2009-07-08 01:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2015-06-18 21:18 - 2015-06-18 21:33 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-18 21:18 - 2015-06-18 21:30 - 00000000 ____D C:\Program Files (x86)\Realtek
2015-06-18 21:18 - 2009-07-12 23:31 - 00233472 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2015-06-18 21:18 - 2009-05-26 04:30 - 00076288 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2015-06-18 21:18 - 2009-03-04 23:54 - 00067584 _____ C:\Windows\system32\RtNicProp64.dll
2015-06-18 21:17 - 2015-06-18 21:17 - 00000000 ____D C:\ProgramData\Temp
2015-06-18 21:17 - 2015-06-18 21:17 - 00000000 ____D C:\HP
2015-06-18 21:16 - 2015-06-18 21:33 - 00000000 ____D C:\SWSetup
2015-06-18 21:16 - 2015-06-18 21:30 - 00006656 _____ C:\Windows\system32\bcmwlrc.dll
2015-06-18 21:16 - 2015-06-18 21:16 - 00006656 _____ C:\Windows\system32\bcm86FC.tmp
2015-06-18 21:16 - 2015-06-18 21:16 - 00000000 ____D C:\Program Files\Broadcom
2015-06-18 21:05 - 2015-06-18 21:05 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-06-18 21:05 - 2015-06-18 21:05 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-06-18 21:05 - 2015-06-18 21:05 - 00113543 _____ C:\Windows\SysWOW64\slmgr.vbs
2015-06-18 21:05 - 2015-06-18 21:05 - 00002048 _____ C:\Windows\SysWOW64\winver.exe
2015-06-18 21:05 - 2015-06-18 21:05 - 00001536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2015-06-18 21:04 - 2015-06-18 21:04 - 00007605 _____ C:\Users\Olszewski\AppData\Local\Resmon.ResmonCfg
2015-06-18 21:02 - 2015-06-18 21:02 - 00001417 _____ C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-06-18 21:01 - 2015-06-18 21:02 - 00001451 _____ C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-18 21:01 - 2015-06-18 21:01 - 00000020 ___SH C:\Users\Olszewski\ntuser.ini
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Ustawienia lokalne
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Szablony
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Moje dokumenty
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Menu Start
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Documents\Moje wideo
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Documents\Moje obrazy
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Documents\Moja muzyka
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\Dane aplikacji
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\AppData\Local\Historia
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 _SHDL C:\Users\Olszewski\AppData\Local\Dane aplikacji
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 ____D C:\Users\Olszewski\AppData\Local\VirtualStore
2015-06-18 21:01 - 2015-06-18 21:01 - 00000000 ____D C:\Users\Olszewski
2015-06-18 21:01 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-18 21:01 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Olszewski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Public\Documents\Moje wideo
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Public\Documents\Moje obrazy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Public\Documents\Moja muzyka
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Ustawienia lokalne
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Szablony
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Moje dokumenty
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Menu Start
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Documents\Moje wideo
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Documents\Moje obrazy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Documents\Moja muzyka
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\Dane aplikacji
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Historia
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dane aplikacji
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\Documents\Moje wideo
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\Documents\Moje obrazy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\Documents\Moja muzyka
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Historia
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dane aplikacji
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Ulubione
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Szablony
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Pulpit
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Menu Start
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Dokumenty
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 _SHDL C:\ProgramData\Dane aplikacji
2015-06-18 21:00 - 2015-06-18 21:00 - 00000000 __SHD C:\Recovery
2015-06-18 20:58 - 2015-06-18 20:58 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-06-18 20:57 - 2015-06-18 20:57 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-06-18 20:57 - 2015-06-18 20:57 - 00001313 _____ C:\Windows\TSSysprep.log
2015-06-18 20:57 - 2015-06-18 20:57 - 00000000 _____ C:\Windows\ativpsrm.bin
2015-06-18 20:56 - 2015-06-19 18:03 - 00199783 _____ C:\Windows\WindowsUpdate.log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-19 18:03 - 2009-07-14 19:55 - 00687828 _____ C:\Windows\system32\perfh015.dat
2015-06-19 18:03 - 2009-07-14 19:55 - 00131382 _____ C:\Windows\system32\perfc015.dat
2015-06-19 18:03 - 2009-07-14 07:13 - 01523412 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-19 17:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-19 17:53 - 2009-07-14 06:51 - 00016972 _____ C:\Windows\setupact.log
2015-06-18 21:53 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2015-06-18 21:53 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-06-18 21:40 - 2009-07-14 06:45 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 21:40 - 2009-07-14 06:45 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\th-TH
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sk-SK
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ro-RO
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lv-LV
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lt-LT
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hr-HR
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\he-IL
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\et-EE
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG
2015-06-18 21:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ar-SA
2015-06-18 21:17 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2015-06-18 21:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2015-06-18 21:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-18 21:00 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-18 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2015-06-18 20:57 - 2009-07-14 06:46 - 00001774 _____ C:\Windows\DtcInstall.log
2015-06-18 20:57 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-06-18 20:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2015-06-18 20:54 - 2009-07-14 20:09 - 00000000 ____D C:\Windows\CSC
2015-06-18 20:54 - 2009-07-14 06:45 - 00274840 _____ C:\Windows\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2015-06-18 21:36 - 2015-06-18 21:36 - 0000000 _____ () C:\Users\Olszewski\AppData\Local\AtStart.txt
2015-06-18 21:36 - 2015-06-18 21:36 - 0000000 _____ () C:\Users\Olszewski\AppData\Local\DSwitch.txt
2015-06-18 21:36 - 2015-06-18 21:36 - 0000000 _____ () C:\Users\Olszewski\AppData\Local\QSwitch.txt
2015-06-18 21:04 - 2015-06-18 21:04 - 0007605 _____ () C:\Users\Olszewski\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-18 20:53

==================== End of log ============================