Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-12-2013
Ran by User (administrator) on PC on 06-12-2013 18:27:24
Running from C:\Users\User\Desktop\Diagnostyka
Windows 7 Professional (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\ProgramData\Premium\OptimizerPro1\OptimizerPro1.exe
(IObit) E:\Programy\Smart Defrag 2\SmartDefrag.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\Razer Barracuda AC-1 Gaming Audio Card\Customapp\Razer Barracuda AC-1 Gaming Audio card.exe
() C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcMon.exe
(LogMeIn Inc.) E:\Programy\Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(LogMeIn, Inc.) E:\Programy\Hamachi\LMIGuardianSvc.exe
(Hi-Rez Studios) D:\Gry\Tribes Ascend\HiPatchService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(LogMeIn Inc.) E:\Programy\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) E:\Programy\Hamachi\LMIGuardianSvc.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) E:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [CmPCIaudio] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [Cmaudio8788] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2273056 2013-11-29] (NVIDIA Corporation)
HKCU\...\Run: [WinCalendar V4] - E:\Programy\WinCalendar V4\WinCalendarV4_SysTray.exe [80856 2013-04-22] (Sapro Systems)
HKCU\...\Run: [OscarEditor] - C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe [3340288 2012-03-20] ()
HKCU\...\Run: [Gyazo] - C:\Program Files (x86)\Gyazo\GyStation.exe [2990304 2013-10-30] (Nota Inc.)
HKCU\...\Run: [Device Doctor] - C:\Program Files (x86)\Device Doctor\DDLauncher.exe [133944 2013-03-11] (Device Doctor Software Inc.)
HKCU\...\Policies\system: [DisableCMD] 0
MountPoints2: {a92308d7-515c-11e1-a1d9-001f1f0dafb8} - I:\Startme.exe
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\BrCtrCen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WinCalendar V4] - E:\Programy\WinCalendar V4\WinCalendarV4_SysTray.exe [80856 2013-04-22] (Sapro Systems)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - E:\Programy\Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
AppInit_DLLs:   [ ] ()
AppInit_DLLs-x32:   c:\progra~2\magnipic\sprote~1.dll [ ] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP_ss&mntrId=C42D001F1F0DAFB8&affID=124742&tt=110112_ncp3&tsp=5013
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://searchab.com/?aff=7&uid=2c65cddd-2993-11e1-b9bf-001f1f0dafb8
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=2&src=sp&cf=2c65cddd-2993-11e1-b9bf-001f1f0dafb8&q={searchTerms}
SearchScopes: HKLM-x32 - {8AD69397-4854-426B-8202-F46D1BEEF3F5} URL = http://websearch.soft-quick.info/?l=1&q={searchTerms}
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
SearchScopes: HKLM-x32 - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://startsear.ch/?aff=2&src=sp&cf=2c65cddd-2993-11e1-b9bf-001f1f0dafb8&q={searchTerms}
SearchScopes: HKCU - DefaultScope {51BCEEAF-FDD1-422A-B63C-8D5439C2B48E} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=902615&p={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C42D001F1F0DAFB8&affID=124742&tt=110112_ncp3&tsp=5013
SearchScopes: HKCU - {11DDF659-C98A-42F7-994E-E3403F2170E0} URL = http://mystart.incredibar.com/mb139/?search={searchTerms}&loc=IB_DS&a=6R8GxI3BkC&i=26
SearchScopes: HKCU - {51BCEEAF-FDD1-422A-B63C-8D5439C2B48E} URL = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=902615&p={searchTerms}
SearchScopes: HKCU - {51D85E95-8B58-4B2C-91FE-A6E058D8CFBB} URL = http://startsear.ch/?aff=1&src=sp&cf=2c65cddd-2993-11e1-b9bf-001f1f0dafb8&q={searchTerms}
SearchScopes: HKCU - {6AA075B0-5861-4E78-B7F1-929137BB41F0} URL = http://websearch.ask.com/redirect?client=ie&tb=VD&o=14778&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=VX&apn_dtid=YYYYYYFDPL&apn_uid=0E55DB27-E3CA-45BA-A0D2-11B8A2C7EBB6&apn_sauid=DE77B96A-9CA3-431B-8A18-1DFE531D28A4
SearchScopes: HKCU - {8AD69397-4854-426B-8202-F46D1BEEF3F5} URL = http://websearch.soft-quick.info/?l=1&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://searchab.com/?aff=7&uid=2c65cddd-2993-11e1-b9bf-001f1f0dafb8&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://startsear.ch/?aff=2&src=sp&cf=2c65cddd-2993-11e1-b9bf-001f1f0dafb8&q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.)
BHO-x32: Download and Sa Class - {D7BDF904-7CB6-5E66-F871-93EABB8A2F02} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - E:\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.)
Toolbar: HKLM-x32 - StartSearchToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\StartSearch plugin\ssBarLcher.dll (StartSearch Inc.)
Toolbar: HKCU - No Name - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 02 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 02 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"

Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\user.js
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF Homepage: www.google.pl
FF Keyword.URL: hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=902615&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn/esnlaunch,version=1.110.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.110.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File
FF Plugin-x32: @ganymede/CARDS,version=1.0 - C:\Program Files (x86)\Ganymede\Plugins\CARDS\NPCARDS.dll (Ganymede Technologies)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: Adobe Reader - E:\Programy\Adobe Reader\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\User\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\User\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\MyStart Search.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\Searchab.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\startsear.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\WebSearch.xml
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\searchplugins\yahoo_ff.xml
FF Extension: continuetosave - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\Extensions\50e59c3714a51@50e59c3714a8c.com
FF Extension: Forecastfox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF Extension: IplextoALL - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\Extensions\IplextoALL@ALLPlayer.org.xpi
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\3ub5aq2t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF StartMenuInternet: FIREFOX.EXE - E:\Programy\Firefox\firefox.exe

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (New tab for Chrome\u2122) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0
CHR Extension: (vshare plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0
CHR Extension: (continuetosave) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpmddminabgngdjpmdlaonncmkkagpcd\3.9_0
CHR Extension: (Slick Savings) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.4_0
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (LiveVDO plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp\1.3_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [emggiomcfebpbiajjklehpicpabmdpgm] - C:\ProgramData\Download and Sa\emggiomcfebpbiajjklehpicpabmdpgm.crx
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.2.crx
CHR HKLM-x32\...\Chrome\Extension: [jifflliplgeajjdhmkcfnngfpgbjonjg] - C:\Program Files (x86)\Perion\NewTab\newTab.crx
CHR HKLM-x32\...\Chrome\Extension: [jinihaffgdhejchgkogpfkdmpldnmnji] - C:\Users\User\AppData\Local\CRE\jinihaffgdhejchgkogpfkdmpldnmnji.crx
CHR HKLM-x32\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files (x86)\vShare.tv plugin\vshareplg.crx
CHR HKLM-x32\...\Chrome\Extension: [kpmddminabgngdjpmdlaonncmkkagpcd] - C:\ProgramData\continuetosave\kpmddminabgngdjpmdlaonncmkkagpcd.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM-x32\...\Chrome\Extension: [niogeckbkdcabhnapjbkeiklablhjoca] - C:\Program Files (x86)\Perion\ChromeInfoBar\ChromeInfoBar.crx
CHR HKLM-x32\...\Chrome\Extension: [pbiamblgmkgbcgbcgejjgebalncpmhnp] - C:\Program Files (x86)\StartSearch plugin\vshareplg.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx
CHR StartMenuInternet: Google Chrome - C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 Hamachi2Svc; E:\Programy\Hamachi\hamachi-2.exe [2210640 2013-11-29] (LogMeIn Inc.)
R2 HiPatchService; D:\Gry\Tribes Ascend\HiPatchService.exe [8704 2012-02-20] (Hi-Rez Studios)
R2 MBAMService; E:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe [304464 2010-04-29] (Malwarebytes Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [5110192 2012-10-24] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

S3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [1447424 2009-11-11] (C-Media Inc)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24664 2010-04-29] (Malwarebytes Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [52736 2009-07-23] (Realtek Semiconductor Corporation                           )
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2012-02-21] (Sony Ericsson Mobile Communications)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
R4 Avgfwfd; system32\DRIVERS\avgfwd6a.sys [x]
R4 AVGIDSDriver; system32\DRIVERS\avgidsdrivera.sys [x]
R4 AVGIDSHA; system32\DRIVERS\avgidsha.sys [x]
R4 Avgrkx64; system32\DRIVERS\avgrkx64.sys [x]
R4 Avgtdia; system32\DRIVERS\avgtdia.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]

==================== NetSvcs (Whitelisted) ===================

NETSVC: update -> No ServiceDLL Path.

==================== One Month Created Files and Folders ========

2013-12-06 18:27 - 2013-12-06 18:27 - 00000000 ____D C:\FRST
2013-12-06 18:25 - 2013-12-06 18:25 - 00000000 ____D C:\Users\User\AppData\Local\Avg2013
2013-12-06 18:20 - 2013-12-06 18:20 - 00000000 ____D C:\ProgramData\AVG2014
2013-12-06 18:16 - 2013-12-06 18:16 - 00000000 ____D C:\Users\User\AppData\Local\Avg2014
2013-12-06 18:14 - 2013-12-06 18:27 - 00000000 ____D C:\Users\User\Desktop\Diagnostyka
2013-12-06 13:28 - 2013-12-06 13:28 - 00001088 _____ C:\Users\User\Desktop\AQQ.lnk
2013-12-05 23:38 - 2013-12-05 23:38 - 00000886 _____ C:\Users\User\Desktop\launcher — skrót.lnk
2013-12-05 23:06 - 2013-12-05 23:06 - 00002363 _____ C:\Users\User\Desktop\Google Chrome.lnk
2013-12-05 23:02 - 2013-12-05 23:02 - 00000984 _____ C:\Users\User\Desktop\Mozilla Firefox.lnk
2013-12-05 22:56 - 2013-12-05 22:56 - 00000948 _____ C:\Users\User\Desktop\Opera.lnk
2013-12-05 22:51 - 2013-12-05 22:51 - 00000643 _____ C:\Users\User\Desktop\League of Legends.lnk
2013-12-05 22:50 - 2013-12-05 22:50 - 00000363 _____ C:\Users\User\Desktop\Komputer — skrót.lnk
2013-12-05 22:27 - 2013-12-05 22:27 - 00001769 _____ C:\Windows\Language_trs.ini
2013-12-05 22:23 - 2013-12-05 22:28 - 00000000 ____D C:\Users\User\AppData\Roaming\Device Doctor
2013-12-05 22:23 - 2013-12-05 22:23 - 00000000 ____D C:\Program Files (x86)\Device Doctor
2013-12-05 22:21 - 2013-12-05 22:21 - 00003136 _____ C:\Windows\System32\Tasks\{EBA3E7BA-67DF-4421-BE01-6E3C387B0AC3}
2013-12-03 11:48 - 2013-12-03 11:48 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA Corporation
2013-12-03 11:47 - 2013-12-03 11:47 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-12-03 11:46 - 2013-10-30 18:03 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-12-03 11:46 - 2013-10-30 18:02 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-12-02 14:21 - 2013-12-02 14:21 - 00262144 ____N C:\Windows\Minidump\120213-25849-01.dmp
2013-12-01 08:31 - 2013-12-06 18:02 - 00001428 _____ C:\Windows\PFRO.log
2013-11-30 16:28 - 2013-12-06 18:03 - 00003407 _____ C:\Windows\setupact.log
2013-11-30 16:28 - 2013-11-30 16:28 - 00000000 _____ C:\Windows\setuperr.log
2013-11-30 16:11 - 2013-11-30 16:11 - 00116752 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-30 08:23 - 2013-11-30 08:24 - 00442656 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-30 00:37 - 2013-11-30 00:38 - 00000074 _____ C:\Windows\wininit.ini
2013-11-30 00:36 - 2013-11-30 00:36 - 00000833 _____ C:\Windows\system32\Drivers\etc\hosts.txt
2013-11-30 00:16 - 2013-11-30 00:16 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-11-30 00:06 - 2013-11-30 00:38 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-23 23:41 - 2013-11-23 23:41 - 00000864 _____ C:\Users\User\Desktop\brak_tematu.zip
2013-11-23 21:22 - 2013-11-23 21:22 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-23 21:17 - 2013-11-14 12:57 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-23 21:17 - 2013-11-14 12:57 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-11-23 21:17 - 2013-11-14 12:57 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-23 21:17 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-23 21:17 - 2013-11-14 12:56 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-23 20:58 - 2013-11-29 17:56 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-23 20:58 - 2013-11-29 17:56 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-23 20:56 - 2013-10-30 18:02 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2013-11-23 20:55 - 2013-12-03 11:48 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA
2013-11-16 17:13 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-11-16 17:13 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-11-16 17:13 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-11-16 17:13 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-11-16 17:13 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-11-16 17:13 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-11-16 17:13 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-11-16 17:13 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-11-16 17:13 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-11-16 12:05 - 2013-11-16 12:05 - 00000000 ____D C:\Users\User\AppData\Local\Introversion
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-08 22:13 - 2013-11-11 17:19 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive

==================== One Month Modified Files and Folders =======

2013-12-06 18:27 - 2013-12-06 18:27 - 00000000 ____D C:\FRST
2013-12-06 18:27 - 2013-12-06 18:14 - 00000000 ____D C:\Users\User\Desktop\Diagnostyka
2013-12-06 18:26 - 2013-09-13 21:34 - 00000000 ____D C:\ProgramData\AVG2013
2013-12-06 18:25 - 2013-12-06 18:25 - 00000000 ____D C:\Users\User\AppData\Local\Avg2013
2013-12-06 18:25 - 2012-07-03 17:45 - 01396887 _____ C:\Windows\WindowsUpdate.log
2013-12-06 18:25 - 2012-04-09 09:58 - 00000000 ____D C:\ProgramData\MFAData
2013-12-06 18:21 - 2011-11-30 16:30 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3056424758-1021770330-3264218906-1001UA.job
2013-12-06 18:20 - 2013-12-06 18:20 - 00000000 ____D C:\ProgramData\AVG2014
2013-12-06 18:16 - 2013-12-06 18:16 - 00000000 ____D C:\Users\User\AppData\Local\Avg2014
2013-12-06 18:15 - 2012-01-19 14:52 - 00000000 ____D C:\Program Files\CCleaner
2013-12-06 18:10 - 2009-07-14 05:45 - 00020688 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-06 18:10 - 2009-07-14 05:45 - 00020688 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-06 18:07 - 2009-07-14 18:55 - 00737898 _____ C:\Windows\system32\perfh015.dat
2013-12-06 18:07 - 2009-07-14 18:55 - 00154586 _____ C:\Windows\system32\perfc015.dat
2013-12-06 18:07 - 2009-07-14 06:13 - 01663228 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-06 18:05 - 2012-08-27 14:19 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-06 18:03 - 2013-11-30 16:28 - 00003407 _____ C:\Windows\setupact.log
2013-12-06 18:03 - 2012-06-07 15:39 - 00000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2013-12-06 18:02 - 2013-12-01 08:31 - 00001428 _____ C:\Windows\PFRO.log
2013-12-06 18:02 - 2013-02-15 12:45 - 00000372 ____H C:\Windows\Tasks\MagniPicUpdaterTask{37C044BB-9C10-4630-82A8-A370023ECE1A}.job
2013-12-06 18:02 - 2012-09-28 13:56 - 00000410 ____H C:\Windows\Tasks\OptimizerPro1UpdaterTask{2C775E60-9FDA-40A5-B39D-991FC26CDEBA}.job
2013-12-06 18:02 - 2012-09-21 19:02 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-06 18:02 - 2012-08-27 14:19 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-06 18:02 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-06 17:51 - 2013-11-02 23:51 - 00000284 _____ C:\Windows\Tasks\FoxTab.job
2013-12-06 17:51 - 2013-07-10 23:47 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-06 13:28 - 2013-12-06 13:28 - 00001088 _____ C:\Users\User\Desktop\AQQ.lnk
2013-12-06 02:26 - 2013-11-02 23:51 - 00004306 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{67BF5AB3-4026-4C60-B6EF-7A95F539F021}
2013-12-05 23:38 - 2013-12-05 23:38 - 00000886 _____ C:\Users\User\Desktop\launcher — skrót.lnk
2013-12-05 23:13 - 2011-11-30 17:25 - 00000000 ____D C:\Users\User\Desktop\Gry
2013-12-05 23:06 - 2013-12-05 23:06 - 00002363 _____ C:\Users\User\Desktop\Google Chrome.lnk
2013-12-05 23:06 - 2011-11-30 16:33 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-12-05 23:02 - 2013-12-05 23:02 - 00000984 _____ C:\Users\User\Desktop\Mozilla Firefox.lnk
2013-12-05 22:56 - 2013-12-05 22:56 - 00000948 _____ C:\Users\User\Desktop\Opera.lnk
2013-12-05 22:51 - 2013-12-05 22:51 - 00000643 _____ C:\Users\User\Desktop\League of Legends.lnk
2013-12-05 22:51 - 2012-11-19 22:26 - 00000000 ____D C:\Users\User\AppData\Local\PMB Files
2013-12-05 22:51 - 2012-11-19 22:26 - 00000000 ____D C:\ProgramData\PMB Files
2013-12-05 22:50 - 2013-12-05 22:50 - 00000363 _____ C:\Users\User\Desktop\Komputer — skrót.lnk
2013-12-05 22:49 - 2013-10-07 20:12 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
2013-12-05 22:49 - 2013-06-09 10:33 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\War Thunder
2013-12-05 22:49 - 2013-02-09 22:28 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2013-12-05 22:49 - 2012-03-10 13:04 - 00000000 ____D C:\Program Files (x86)\v9Soft
2013-12-05 22:49 - 2012-02-21 19:43 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-05 22:49 - 2011-12-04 18:43 - 00000000 ___SD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
2013-12-05 22:49 - 2011-11-30 17:25 - 00000000 ____D C:\Users\User\Desktop\Programy
2013-12-05 22:49 - 2011-11-30 17:00 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-05 22:49 - 2011-11-30 16:15 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-05 22:49 - 2011-11-30 16:15 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-05 22:43 - 2012-07-29 20:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-05 22:43 - 2012-07-29 20:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-05 22:28 - 2013-12-05 22:23 - 00000000 ____D C:\Users\User\AppData\Roaming\Device Doctor
2013-12-05 22:27 - 2013-12-05 22:27 - 00001769 _____ C:\Windows\Language_trs.ini
2013-12-05 22:23 - 2013-12-05 22:23 - 00000000 ____D C:\Program Files (x86)\Device Doctor
2013-12-05 22:21 - 2013-12-05 22:21 - 00003136 _____ C:\Windows\System32\Tasks\{EBA3E7BA-67DF-4421-BE01-6E3C387B0AC3}
2013-12-05 12:27 - 2011-11-30 16:30 - 00001002 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3056424758-1021770330-3264218906-1001Core.job
2013-12-03 11:48 - 2013-12-03 11:48 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA Corporation
2013-12-03 11:48 - 2013-11-23 20:55 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA
2013-12-03 11:48 - 2012-09-21 19:01 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-03 11:47 - 2013-12-03 11:47 - 00000000 ____D C:\Windows\LastGood.Tmp
2013-12-03 11:47 - 2012-09-21 18:59 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-03 11:47 - 2011-11-30 16:47 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-02 14:21 - 2013-12-02 14:21 - 00262144 ____N C:\Windows\Minidump\120213-25849-01.dmp
2013-12-02 14:21 - 2012-11-16 16:49 - 00000000 ____D C:\Windows\Minidump
2013-11-30 16:28 - 2013-11-30 16:28 - 00000000 _____ C:\Windows\setuperr.log
2013-11-30 16:21 - 2013-10-19 15:41 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Terraria
2013-11-30 16:21 - 2011-11-30 16:06 - 00000000 ____D C:\Windows\Panther
2013-11-30 16:11 - 2013-11-30 16:11 - 00116752 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-30 09:00 - 2012-08-27 14:19 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-30 09:00 - 2012-08-27 14:19 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-30 08:24 - 2013-11-30 08:23 - 00442656 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-30 00:43 - 2012-07-24 23:40 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2013-11-30 00:43 - 2012-07-24 01:03 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2013-11-30 00:43 - 2011-12-03 09:44 - 00000000 ____D C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2013-11-30 00:38 - 2013-11-30 00:37 - 00000074 _____ C:\Windows\wininit.ini
2013-11-30 00:38 - 2013-11-30 00:06 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-11-30 00:36 - 2013-11-30 00:36 - 00000833 _____ C:\Windows\system32\Drivers\etc\hosts.txt
2013-11-30 00:16 - 2013-11-30 00:16 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-11-29 17:56 - 2013-11-23 20:58 - 01096480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-11-29 17:56 - 2013-11-23 20:58 - 00979744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-11-28 10:24 - 2011-12-01 08:39 - 00000000 ____D C:\Users\User\Desktop\Konrad
2013-11-23 23:43 - 2012-12-26 13:38 - 00000000 ____D C:\Program Files (x86)\OscarEditor
2013-11-23 23:41 - 2013-11-23 23:41 - 00000864 _____ C:\Users\User\Desktop\brak_tematu.zip
2013-11-23 21:22 - 2013-11-23 21:22 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-23 20:47 - 2013-06-09 10:33 - 00000000 ____D C:\ProgramData\WarThunder
2013-11-18 08:01 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-16 19:25 - 2013-11-05 06:28 - 00050068 _____ C:\Windows\SysWOW64\debug.log
2013-11-16 17:21 - 2011-12-17 16:48 - 00000000 ____D C:\Users\User\AppData\Roaming\ipla
2013-11-16 14:35 - 2012-04-25 05:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-16 12:05 - 2013-11-16 12:05 - 00000000 ____D C:\Users\User\AppData\Local\Introversion
2013-11-14 12:57 - 2013-11-23 21:17 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-11-14 12:57 - 2013-11-23 21:17 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-11-14 12:57 - 2013-11-23 21:17 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-14 12:56 - 2013-11-23 21:17 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-14 12:56 - 2013-11-23 21:17 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-14 12:56 - 2012-09-21 19:01 - 00023754 _____ C:\Windows\system32\nvinfo.pb
2013-11-12 14:24 - 2009-07-14 06:08 - 00032604 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-11 23:03 - 2012-01-31 16:35 - 00000000 ____D C:\Program Files (x86)\Gyazo
2013-11-11 17:19 - 2013-11-08 22:13 - 00000000 ____D C:\Users\Public\Documents\Sports Interactive
2013-11-11 16:02 - 2012-09-21 19:02 - 06674208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-11 16:02 - 2012-09-21 19:02 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-11 16:01 - 2012-09-21 19:02 - 03467927 _____ C:\Windows\system32\nvcoproc.bin
2013-11-11 16:01 - 2012-09-21 19:02 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-11 16:01 - 2012-09-21 19:02 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-11 16:01 - 2012-09-21 19:02 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-11 16:01 - 2012-09-21 19:02 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-11 08:59 - 2013-11-11 08:59 - 00590112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2013-11-08 21:31 - 2011-11-30 20:06 - 00000000 ____D C:\Users\User\Documents\Sports Interactive
2013-11-08 21:31 - 2011-11-30 20:06 - 00000000 ____D C:\Users\User\AppData\Local\Sports Interactive

ZeroAccess:
C:\Windows\assembly\tmp
C:\Windows\assembly\tmp\loader.tlb
C:\Windows\assembly\tmp\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
C:\Windows\assembly\tmp\U\000000cf.@

ZeroAccess:
C:\Users\User\AppData\Local\a4b02f23
C:\Users\User\AppData\Local\a4b02f23\@

Files to move or delete:
====================
C:\ProgramData\SDL.dll
C:\ProgramData\SDL_net.dll
C:\ProgramData\Set-up Enviroment.exe
C:\ProgramData\SimEngine.exe


Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\air1D19.exe
C:\Users\User\AppData\Local\Temp\setup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 20:42

==================== End Of Log ============================