Task: {2D297B27-05F5-4F02-B7F9-64607198AE78} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {46B8BB43-CE08-40E2-B283-EA42DDED3A8C} - System32\Tasks\{A52361FC-FFE3-466C-BACA-FD58C50E2B5B} => Firefox.exe
http://ui.skype.com/ui/0/6.10.0.104/pl/abandoninstall?page=tsProgressBar
Task: {D2952DC3-AE4C-4733-B4C7-E36FB0EFBAE9} - System32\Tasks\4890 => Wscript.exe C:\Users\Ewelina\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {EB02381F-D652-4B1C-894A-712498C62C51} - \Microsoft\Windows\MUI\LPRemove No Task File <==== ATTENTION
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-304228676-1268333052-2624172536-1000\...\Run: [pricefountainw.exe] => C:\Users\Ewelina\AppData\Local\PriceFountain\pricefountainw.exe HKEY_CURRENT_USER Software\PriceFountain
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Ewelina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ArcGIS License Manager 10 CRACKED.lnk
ShortcutTarget: ArcGIS License Manager 10 CRACKED.lnk -> C:\Cracked License Manager 10\start_lic_mgr_invisible.vbs ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-304228676-1268333052-2624172536-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: PriceFountain -> {b608cc98-54de-4775-96c9-097de398500c} -> C:\Users\Ewelina\AppData\Local\PriceFountain\PriceFountainIE.dll No File
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKU\S-1-5-21-304228676-1268333052-2624172536-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF Extension: PriceFountain - C:\Users\Ewelina\AppData\Roaming\Mozilla\Firefox\Profiles\hs8jbjru.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi [2014-11-04]
FF Extension: No Name - C:\Users\Ewelina\AppData\Roaming\Mozilla\Firefox\Profiles\hs8jbjru.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com [Not Found]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 postgresql-8.4; c:/postgreSQL/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "c:/postgreSQL/data" -w [X]
S3 DIRECTIO; \??\c:\BIT_TEMP\DirectIo.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
2014-11-12 06:56 - 2014-11-12 16:31 - 00000000 ____D () C:\AdwCleaner
2014-11-04 08:56 - 2014-11-04 08:57 - 00000000 ____D () C:\ProgramData\AVG
2014-11-04 08:56 - 2014-11-04 08:56 - 00000000 ____D () C:\Users\Ewelina\AppData\Roaming\AVG
2014-11-04 08:56 - 2014-11-04 08:56 - 00000000 ____D () C:\Users\Ewelina\AppData\Local\AVG
2014-11-11 14:44 - 2013-11-15 13:22 - 00000000 ____D () C:\ProgramData\Doctor Web
C:\Users\Ewelina\billiards_install_1_0_2_5.exe
EmptyTemp: