Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by Grześ (administrator) on GRZES-PC on 07-10-2013 14:09:36
Running from C:\Users\Grześ\Desktop
Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) OS Language: Polish
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lexmark International, Inc.) C:\Windows\System32\LEXBCES.EXE
() C:\Windows\System32\LEXPPS.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(SAMSUNG Electronics co., LTD.) C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\RocketDock\RocketDock.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
() C:\PROGRA~1\samsung\SAMSUN~3\SUPNOT~1.EXE
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\avrestart.exe
(Avira Operations GmbH & Co. KG) C:\ProgramData\Avira\AntiVir Desktop\TEMP\SELFUPDATE\avrestart.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Users\Grześ\Desktop\9vyx3drl.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7420448 2009-04-21] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1049896 2008-08-28] (Synaptics, Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [681032 2013-10-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [RocketDock] - C:\Program Files\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
IMEO\AcroRd32.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\activate_matlab.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\backitup.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\ctfx_starter.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\deactivate_matlab.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\excel.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\groove.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\hpcustpartic.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\hpwucli.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\infopath.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\kiesagent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\matlab.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\msaccess.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\msoxmled.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\mspub.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\mstore.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\nerohome.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\neromediahome.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\neroscoutoptions.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\nerovision.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\oaa.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\offdiag.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\ois.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\olrsubmission.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\onenote.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\outlook.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\pdr.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\photosnap.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\photosnapviewer.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\power2go.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\power2goexpress.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\powerdvd8.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\powerpnt.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\powerstarter.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\producer.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\recode.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\setupx.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\showtime.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\soundtrax.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\visio.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\waveedit.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\winword.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IMEO\youcam.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Default_search_url = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {4CEAA736-BF84-482B-9E23-DFADACA79120} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.88.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Grześ\AppData\Roaming\Mozilla\Firefox\Profiles\tyrs7e3g.default
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Homepage: hxxp://www.google.pl/
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @virtools.com/3DviaPlayer - C:\Program Files\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Grześ\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Grześ\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Grześ\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Grześ\AppData\Roaming\Mozilla\Firefox\Profiles\tyrs7e3g.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF StartMenuInternet: FIREFOX.EXE - C:\Programy\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://www.google.pl/
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Grze\u015B\AppData\Local\Google\Chrome\Application\28.0.1500.72\pdf.dll No File
CHR Plugin: (Google Gears 0.5.33.0) - C:\Users\Grze\u015B\AppData\Local\Google\Chrome\Application\28.0.1500.72\gears.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Grze\u015B\AppData\Local\Google\Chrome\Application\28.0.1500.72\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Programy\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Programy\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Programy\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll No File
CHR Plugin: (3DVIA player) - C:\Program Files\Virtools\3D Life Player\npvirtools.dll (Dassault Systèmes)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Brushed) - C:\Users\GRZE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg\1.0_0
CHR Extension: (AdBlock) - C:\Users\GRZE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0
CHR Extension: (Skype Click to Call) - C:\Users\GRZE~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Grześ\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440392 2013-10-07] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 LexBceS; C:\Windows\System32\LEXBCES.EXE [299008 2002-02-14] (Lexmark International, Inc.)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [45272 2005-10-14] (Microsoft Corporation)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2008-11-25] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1699168 2012-10-15] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [89376 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137208 2013-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2008-12-07] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [247352 2008-01-21] (Microsoft Corporation)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R2 KMDFMEMIO; C:\Windows\System32\DRIVERS\kmdfmemio.sys [13312 2006-11-14] (SAMSUNG ELECTRONICS CO., LTD.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-12-25] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-05] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 BT; system32\DRIVERS\btnetdrv.sys [x]
S3 Btcsrusb; System32\Drivers\btcusb.sys [x]
S0 BtHidBus; System32\Drivers\BtHidBus.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 IvtBtBUs; System32\Drivers\IvtBtBus.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
U3 kgloqpow; \??\C:\Users\GRZE~1\AppData\Local\Temp\kgloqpow.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-07 14:09 - 2013-10-07 14:09 - 00000000 ____D C:\FRST
2013-10-07 12:31 - 2013-10-07 12:31 - 00377856 _____ C:\Users\Grześ\Desktop\9vyx3drl.exe
2013-10-07 12:30 - 2013-10-07 12:30 - 01087213 _____ (Farbar) C:\Users\Grześ\Desktop\FRST.exe
2013-10-06 23:31 - 2013-10-06 23:32 - 00000000 ____D C:\AdwCleaner
2013-10-06 23:23 - 2013-10-06 23:23 - 00053604 _____ C:\Users\Grześ\Desktop\Extras.Txt
2013-10-06 23:21 - 2013-10-06 23:21 - 00081764 _____ C:\Users\Grześ\Desktop\OTL.Txt
2013-10-06 22:15 - 2013-10-06 22:15 - 00017978 _____ C:\Users\Grześ\Documents\cc_20131006_221456.reg
2013-10-06 18:37 - 2013-10-06 18:37 - 00000000 ____D C:\Program Files\ESET
2013-10-06 18:32 - 2013-10-06 18:32 - 02347384 _____ (ESET) C:\Users\Grześ\Downloads\esetsmartinstaller_plk.exe
2013-10-05 22:07 - 2013-10-05 22:08 - 06953096 _____ (Microsoft Corporation) C:\Users\Grześ\Downloads\Silverlight (1).exe
2013-10-02 22:44 - 2013-10-02 22:44 - 00049166 _____ C:\Users\Grześ\Desktop\obieraki.xlsx
2013-10-02 16:06 - 2013-10-02 16:06 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2013-10-02 16:03 - 2013-10-02 16:03 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2013-10-02 16:02 - 2013-10-02 16:06 - 00000000 ____D C:\Windows\SHELLNEW
2013-09-22 17:30 - 2013-09-22 17:30 - 04296704 _____ C:\Users\Grześ\Downloads\hamachi.msi
2013-09-22 17:18 - 2013-09-22 17:18 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Fighter 2.5
2013-09-17 20:06 - 2013-09-17 20:38 - 00000000 ____D C:\Users\Grześ\Desktop\dopr
2013-09-10 12:24 - 2013-09-10 12:24 - 00043520 _____ C:\Users\Grześ\Desktop\Kalkulator wyp.xls
2013-09-10 12:24 - 2013-09-10 12:24 - 00000040 _____ C:\Users\Grześ\Desktop\nipy.txt
2013-09-10 11:36 - 2013-09-10 11:36 - 00043008 _____ C:\Users\Grześ\Desktop\Kalkulator.xls

==================== One Month Modified Files and Folders =======

2013-10-07 14:10 - 2010-01-02 17:36 - 00000418 ____H C:\Windows\Tasks\User_Feed_Synchronization-{86369CC6-CCDA-422A-A83A-993556BD5ED8}.job
2013-10-07 14:09 - 2013-10-07 14:09 - 00000000 ____D C:\FRST
2013-10-07 13:55 - 2010-03-08 18:53 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-07 13:55 - 2010-03-08 18:53 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-07 13:53 - 2006-11-02 14:45 - 00004912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-07 13:53 - 2006-11-02 14:45 - 00004912 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-07 12:35 - 2009-12-25 00:48 - 00000000 ____D C:\Programy
2013-10-07 12:31 - 2013-10-07 12:31 - 00377856 _____ C:\Users\Grześ\Desktop\9vyx3drl.exe
2013-10-07 12:30 - 2013-10-07 12:30 - 01087213 _____ (Farbar) C:\Users\Grześ\Desktop\FRST.exe
2013-10-07 12:25 - 2009-06-24 21:31 - 01638176 _____ C:\Windows\WindowsUpdate.log
2013-10-07 12:15 - 2013-08-06 21:29 - 00137208 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-10-07 12:15 - 2013-08-06 21:29 - 00089376 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-10-07 12:15 - 2013-08-06 21:29 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-10-07 11:53 - 2006-11-02 14:58 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-07 00:25 - 2011-01-16 01:01 - 00006604 _____ C:\Windows\bthservsdp.dat
2013-10-07 00:25 - 2006-11-02 14:58 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-06 23:32 - 2013-10-06 23:31 - 00000000 ____D C:\AdwCleaner
2013-10-06 23:23 - 2013-10-06 23:23 - 00053604 _____ C:\Users\Grześ\Desktop\Extras.Txt
2013-10-06 23:21 - 2013-10-06 23:21 - 00081764 _____ C:\Users\Grześ\Desktop\OTL.Txt
2013-10-06 22:15 - 2013-10-06 22:15 - 00017978 _____ C:\Users\Grześ\Documents\cc_20131006_221456.reg
2013-10-06 22:13 - 2012-04-14 12:51 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-06 22:13 - 2012-02-28 14:38 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\AIMP3
2013-10-06 22:13 - 2009-12-29 17:38 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\Media Player Classic
2013-10-06 22:13 - 2009-12-26 18:06 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\Skype
2013-10-06 22:13 - 2009-12-25 21:24 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\DAEMON Tools Lite
2013-10-06 21:43 - 2012-09-18 17:43 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2013-10-06 21:43 - 2011-08-24 23:38 - 00000000 ____D C:\ProgramData\YouTube Downloader
2013-10-06 21:42 - 2013-07-13 19:44 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-10-06 18:37 - 2013-10-06 18:37 - 00000000 ____D C:\Program Files\ESET
2013-10-06 18:32 - 2013-10-06 18:32 - 02347384 _____ (ESET) C:\Users\Grześ\Downloads\esetsmartinstaller_plk.exe
2013-10-05 22:08 - 2013-10-05 22:07 - 06953096 _____ (Microsoft Corporation) C:\Users\Grześ\Downloads\Silverlight (1).exe
2013-10-04 22:10 - 2009-12-26 21:01 - 00222720 _____ C:\Users\Grześ\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-02 22:44 - 2013-10-02 22:44 - 00049166 _____ C:\Users\Grześ\Desktop\obieraki.xlsx
2013-10-02 17:24 - 2009-12-24 21:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-02 17:02 - 2009-12-24 21:13 - 00162520 _____ C:\Users\Grześ\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-02 17:00 - 2006-11-02 14:44 - 00504208 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-02 16:07 - 2006-11-02 13:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-10-02 16:06 - 2013-10-02 16:06 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2013-10-02 16:06 - 2013-10-02 16:02 - 00000000 ____D C:\Windows\SHELLNEW
2013-10-02 16:06 - 2009-12-24 21:08 - 00000000 ____D C:\Program Files\Microsoft Office
2013-10-02 16:06 - 2006-11-02 14:35 - 00000000 ____D C:\Program Files\MSBuild
2013-10-02 16:03 - 2013-10-02 16:03 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2013-10-02 16:03 - 2006-11-02 12:23 - 00000262 _____ C:\Windows\win.ini
2013-10-01 22:04 - 2012-09-01 17:23 - 00000000 ____D C:\Users\Grześ\AppData\Local\Ares
2013-09-30 23:05 - 2013-09-06 19:35 - 00000000 ____D C:\Windows\system32\MRT
2013-09-30 23:01 - 2006-11-02 12:24 - 76725432 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-09-30 20:18 - 2010-03-13 20:17 - 00000000 ____D C:\Program Files\Microsoft Works
2013-09-30 20:17 - 2010-03-13 20:15 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-09-29 15:42 - 2009-06-24 04:12 - 00754254 _____ C:\Windows\system32\perfh015.dat
2013-09-29 15:42 - 2009-06-24 04:12 - 00165006 _____ C:\Windows\system32\perfc015.dat
2013-09-29 15:42 - 2006-11-02 12:33 - 01724814 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-22 17:30 - 2013-09-22 17:30 - 04296704 _____ C:\Users\Grześ\Downloads\hamachi.msi
2013-09-22 17:18 - 2013-09-22 17:18 - 00000000 ____D C:\Users\Grześ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Fighter 2.5
2013-09-17 20:38 - 2013-09-17 20:06 - 00000000 ____D C:\Users\Grześ\Desktop\dopr
2013-09-10 12:24 - 2013-09-10 12:24 - 00043520 _____ C:\Users\Grześ\Desktop\Kalkulator wyp.xls
2013-09-10 12:24 - 2013-09-10 12:24 - 00000040 _____ C:\Users\Grześ\Desktop\nipy.txt
2013-09-10 11:36 - 2013-09-10 11:36 - 00043008 _____ C:\Users\Grześ\Desktop\Kalkulator.xls
2013-09-10 11:22 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-09-10 11:16 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-09-07 00:19 - 2009-06-24 04:12 - 00000000 ____D C:\Windows\system32\Drivers\pl-PL
2013-09-07 00:19 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\pl-PL

Some content of TEMP:
====================
C:\Users\Grześ\AppData\Local\Temp\avgnt.exe
C:\Users\Grześ\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-07 12:00

==================== End Of Log ============================