Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 05
Ran by Rybozord (administrator) on RYBOTRON on 19-12-2013 12:53:30
Running from D:\Downloads\programy do raportow
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Advanced Micro Devices) C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) D:\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) D:\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) D:\Malwarebytes' Anti-Malware\mbamgui.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6562584 2013-12-17] (SUPERAntiSpyware)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
BootExecute: autocheck autochk * PCloudBroom64.exe \systemroot\system32\BroomData.bitsdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155&q={searchTerms}
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.helpmefindyour.info/?l=1&q={searchTerms}&pid=658&r=2013/04/10&hid=961401851&lg=EN&cc=PL
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {738E56BF-2625-42D9-AA16-66A9ECC491A9} URL = http://mp3tubetoolbar.com/?tmp=toolbar_sb_results&prt=pinballtbfour01ie&Keywords={searchTerms}&clid=c59b63ad38ba44ee90fff1505dbe989e
SearchScopes: HKCU - {F8BE40B4-D548-4A34-A5B2-9774BED0BC60} URL = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtByC0EtAyDzyzztBtB0D0CtN0D0Tzu0CyBtCzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1639430210&ir=
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab
DPF: HKLM-x32 {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{176D20F6-5190-4BC9-A7C9-6296934CEFB8}: [NameServer] 
Tcpip\..\Interfaces\{40FA69BC-AFE2-4E35-94EF-9350D382D3BD}: [NameServer] 
Tcpip\..\Interfaces\{4A853C56-F1AB-4FE8-AE4B-3A24B87DC6C5}: [NameServer] 
Tcpip\..\Interfaces\{8982094C-83EE-4F77-B090-9378A282C491}: [NameServer] ,8.8.8.8,8.8.4.4

FireFox:
========
FF ProfilePath: C:\Users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default
FF user.js: detected! => C:\Users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\user.js
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF SearchEngineOrder.3: Bing 
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandasecurity.com/activescan - C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @onlive.com/OnLiveGameClientDetector,version=1.0.0 - C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Rybozord\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Rybozord\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\searchplugins\Mysearchdial.xml
FF Extension: No Name - C:\Users\Rybozord\AppData\Roaming\Mozilla\Firefox\Profiles\np4dh677.default\Extensions\staged
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HomePage: hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=48
CHR RestoreOnStartup: "hxxp://websearch.helpmefindyour.info/?pid=658&r=2013/04/10&hid=961401851&lg=EN&cc=PL", "hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=48", "hxxp://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP&dt=071413", "hxxp://aartemis.com/?type=hp&ts=1387396875&from=cor&uid=SAMSUNGXHD502HJ_S20BJ90Z938155", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtByC0EtAyDzyzztBtB0D0CtN0D0Tzu0CyBtCzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1639430210&ir=", "hxxp://msn.gazeta.pl/msn/0, 0.html?pc=UP97&ocid=UP97DHP&dt=071413"
CHR DefaultSearchKeyword: google.pl
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\npBP4FUpdater.dll (EA Digital Illusions CE AB)
CHR Plugin: (Battlefield Play4Free Updater) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0\BP4FUpdater.exe (EA Digital Illusions CE AB)
CHR Plugin: (ClickOnce plugin for Chrome) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeifaoomkminpbeebjdmdojbhmagnncl\1.2.1_0\plugin/npclickonce.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (OnLive Game Client Detector) - C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
CHR Plugin: (Panda ActiveScan 2.0) - C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Rybozord\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Angry Birds) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0
CHR Extension: (Dragon Ball Fierce Fighting - v1.9 HD) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgogpdldcjlhnnmaceplehoadfopjhbg\27.1_0
CHR Extension: (Desmos Graphing Calculator) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhdheahnajobgndecdbggfmcojekgdko\2.0_0
CHR Extension: (Adblock Plus) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7_0
CHR Extension: (Counter Strike ( Flash Version )) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcbegflbljflchoahmigblmabofoinkh\1.0.1_0
CHR Extension: (Battlefield Play4Free) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkejhbcdagodjdndmfnhaibnealjonei\1.0.66.2_0
CHR Extension: (Bridge Builder) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmhhmfdjeiobfpoahfileeejlckjihfn\1.0.0_0
CHR Extension: (AdBlock) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Nano Ninja) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\jommidhbgbbbbjddhmajdmeajfleineg\1.3.0_0
CHR Extension: (Counter Strike Online) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmebpghpgkhlphpidpcgnllbjiaoppce\1.1_0
CHR Extension: (PoE Helper) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpdnfedfopfbealaokkpjbngaphfceoi\0.85_0
CHR Extension: (Google Mail Checker) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0
CHR Extension: (Adapt or Die) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkahjcgpeocklmichhgkfhjkfmogknkn\1.3.0_0
CHR Extension: (Google Wallet) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Chrome to Phone) - C:\Users\Rybozord\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.3_0
CHR HKLM\...\Chrome\Extension: [pflphaooapbgpeakohlggbpidpppgdff] - C:\Users\Rybozord\AppData\Local\mysearchdial-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [bmbpbcpokffodhpcdjaoopolhdlbconi] - C:\Users\Rybozord\AppData\Local\Temp\ccex.crx
CHR HKLM-x32\...\Chrome\Extension: [hepfenndjoibhgfopdfkohmnbdmpgapk] - C:\Users\Rybozord\AppData\Local\CRE\hepfenndjoibhgfopdfkohmnbdmpgapk.crx
CHR HKLM-x32\...\Chrome\Extension: [jpnbdefcbnoefmmcpelplabbkfmfhlho] - C:\Users\Rybozord\AppData\Local\Premiumplay Codec-C\Chrome\Premiumplay Codec-C.crx
CHR StartMenuInternet: Google Chrome - C:\Users\Rybozord\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [354304 2011-01-26] (Advanced Micro Devices, Inc.)
R2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [194496 2010-06-17] (Advanced Micro Devices)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] ()
R2 MBAMScheduler; D:\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; D:\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [655712 2012-07-25] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S4 RemoteAccess; C:\Windows\SysWow64\mprdim.dll [0 2013-12-18] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

S3 arc; C:\Windows\system32\DRIVERS\arc.sys [87632 2009-07-14] ()
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] ()
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [16776 2011-07-29] ()
S3 epmntdrv; C:\Windows\SysWow64\epmntdrv.sys [14216 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9096 2011-07-29] ()
S3 EuGdiDrv; C:\Windows\SysWow64\EuGdiDrv.sys [8456 2011-07-29] ()
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S3 nvraid; C:\Windows\system32\drivers\nvraid.sys [148352 2011-03-11] ()
R0 pavboot; C:\Windows\System32\drivers\pavboot64.sys [33800 2009-06-30] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2013-12-19] (Duplex Secure Ltd.)
S3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] ()
S3 XENfiltv; C:\Windows\System32\drivers\XENfiltv.sys [25600 2009-07-31] (Creative Technology Ltd.)
S2 avgntflt; \??\C:\Windows\SYSTEM32\drivers\avgntflt.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 massfilter_hs; system32\drivers\massfilter_hs.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-19 12:53 - 2013-12-19 12:53 - 00000000 ____D C:\FRST
2013-12-19 12:26 - 2013-12-19 12:26 - 00002246 _____ C:\Windows\PFRO.log
2013-12-19 12:26 - 2013-12-19 12:26 - 00000056 _____ C:\Windows\setupact.log
2013-12-19 12:26 - 2013-12-19 12:26 - 00000000 _____ C:\Windows\setuperr.log
2013-12-19 12:24 - 2013-12-19 12:38 - 00022940 _____ C:\Windows\WindowsUpdate.log
2013-12-19 11:53 - 2013-12-19 11:54 - 00000000 ____D C:\ProgramData\Doctor Web
2013-12-19 11:50 - 2013-12-19 11:50 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-12-19 11:43 - 2013-12-19 11:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-19 11:34 - 2013-12-19 11:53 - 00000000 ____D C:\Users\Rybozord\Desktop\mbar
2013-12-19 11:34 - 2013-12-19 11:34 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-19 11:12 - 2013-12-19 11:12 - 00000000 ____D C:\Users\Rybozord\Documents\Splashtop Whiteboard
2013-12-19 11:12 - 2013-12-19 11:12 - 00000000 ____D C:\Users\Rybozord\Documents\Splashtop Presenter
2013-12-19 10:39 - 2013-12-19 10:54 - 00004936 _____ C:\Users\Rybozord\Desktop\Rkill.txt
2013-12-19 10:29 - 2013-12-19 10:29 - 00000000 ____D C:\ProgramData\SUPERSetup
2013-12-19 10:12 - 2013-12-19 10:12 - 00000516 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fa2d459a-7136-4e8f-b7f2-3c16f28c7a21.job
2013-12-19 10:12 - 2013-12-19 10:12 - 00000516 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 805338dd-9f73-4d44-9970-36f26bd2d4b8.job
2013-12-19 10:12 - 2013-12-19 10:12 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\SUPERAntiSpyware.com
2013-12-19 10:11 - 2013-12-19 10:14 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-19 10:11 - 2013-12-19 10:11 - 00001808 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2013-12-19 10:11 - 2013-12-19 10:11 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-12-19 09:59 - 2013-12-19 09:59 - 00000618 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-19 09:59 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-19 03:05 - 2013-12-19 03:05 - 00000042 _____ C:\Windows\SysWOW64\AK083E209605E394C.lie
2013-12-18 23:12 - 2013-12-18 23:12 - 00000000 ____D C:\Users\Rybozord\Nowy folder (2)
2013-12-18 22:59 - 2013-12-18 22:59 - 00037506 _____ C:\ComboFix.txt
2013-12-18 22:50 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-18 22:50 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-18 22:50 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-18 22:50 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-18 22:50 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-18 22:50 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-18 22:50 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-18 22:50 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-18 22:47 - 2013-12-19 09:55 - 00000000 ____D C:\Qoobox
2013-12-18 22:46 - 2013-12-18 22:58 - 00000000 ____D C:\Windows\erdnt
2013-12-18 22:46 - 2013-12-18 22:50 - 00000000 ____D C:\32788R22FWJFW
2013-12-18 21:31 - 2013-12-18 21:32 - 03222756 _____ C:\Windows\system32\sfcdetails.txt
2013-12-18 21:27 - 2010-11-20 14:33 - 00273792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2013-12-18 21:27 - 2009-07-14 00:19 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2013-12-18 21:23 - 2013-12-18 21:23 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-12-18 21:22 - 2013-12-18 22:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-18 21:22 - 2013-12-18 21:25 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-18 21:22 - 2013-12-18 21:22 - 00001339 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-18 21:22 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2013-12-18 21:03 - 2013-12-19 08:42 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Mobogenie
2013-12-18 21:03 - 2013-12-19 08:40 - 00000274 _____ C:\Users\Rybozord\daemonprocess.txt
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\Documents\Mobogenie
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\AppData\Local\genienext
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\AppData\Local\cache
2013-12-18 21:02 - 2013-12-19 08:42 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-18 21:01 - 2013-12-18 21:01 - 00000000 ____D C:\ProgramData\WPM
2013-12-18 20:07 - 2013-12-18 20:08 - 00001465 _____ C:\Windows\SysWOW64\PCloudCleanerService.log
2013-12-18 20:06 - 2013-12-18 20:06 - 00002272 _____ C:\Windows\SysWOW64\BroomData.bit
2013-12-18 20:06 - 2013-04-08 15:30 - 00022752 _____ C:\Windows\system32\PCloudBroom64.exe
2013-12-18 20:01 - 2013-12-18 20:01 - 00003130 _____ C:\Windows\System32\Tasks\{918BA1D3-7A0D-44D4-9122-9D4B91A66215}
2013-12-18 19:37 - 2013-04-29 08:17 - 00047632 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2013-12-18 19:35 - 2013-12-18 19:35 - 00000614 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2013-12-18 19:20 - 2013-12-18 19:20 - 00003288 ____N C:\bootsqm.dat
2013-12-16 10:57 - 2013-12-16 10:58 - 00000000 ____D C:\Users\Rybozord\Documents\Rockstar Games
2013-12-16 10:52 - 2013-12-16 10:52 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-12-13 18:58 - 2013-12-13 18:58 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Warner Bros. Interactive Entertainment
2013-12-13 05:22 - 2013-12-13 05:22 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Anuman
2013-12-13 05:16 - 2013-12-13 05:16 - 00000000 ____D C:\Users\Rybozord\jakies gowno
2013-12-13 05:10 - 2013-12-13 05:16 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Big Fish
2013-12-11 01:54 - 2013-12-11 01:56 - 22151100 _____ C:\Users\Rybozord\Desktop\1 Süper Private  Combo List(2).txt
2013-12-10 07:48 - 2013-12-10 07:48 - 00000218 _____ C:\Users\Rybozord\Desktop\strona.txt
2013-12-05 05:52 - 2013-12-05 05:52 - 00054629 _____ C:\Users\Rybozord\Desktop\Mirkowy kalkulator kcal.xlsx
2013-12-04 02:42 - 2013-12-04 02:42 - 00000000 ____D C:\ProgramData\WinterSoft
2013-12-04 01:52 - 2013-12-04 01:52 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Crazy Viking Studios
2013-12-04 01:48 - 2013-12-04 01:48 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volgarr the Viking v2.0.0.1 1.0
2013-12-03 02:49 - 2013-12-03 02:49 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-03 02:37 - 2013-12-03 02:56 - 00000000 ____D C:\ProgramData\Oracle
2013-12-03 02:37 - 2013-12-03 02:49 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-03 02:37 - 2013-12-03 02:49 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-03 02:37 - 2013-12-03 02:49 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-03 02:35 - 2013-12-03 02:37 - 00002889 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-02 03:00 - 2013-12-02 03:00 - 00000000 ____D C:\Windows\CheckSur
2013-12-02 00:43 - 2013-12-02 00:43 - 00000000 ____D C:\Users\Rybozord\Desktop\venicon
2013-12-01 20:17 - 2013-12-01 20:17 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Ice-Pick Lodge
2013-11-21 02:25 - 2013-11-21 02:25 - 00001585 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-11-21 02:20 - 2013-11-21 02:20 - 07401472 _____ C:\Users\Rybozord\Desktop\PathOfExileInstaller.msi

==================== One Month Modified Files and Folders =======

2013-12-19 12:53 - 2013-12-19 12:53 - 00000000 ____D C:\FRST
2013-12-19 12:52 - 2011-03-28 01:15 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000UA.job
2013-12-19 12:49 - 2013-02-22 16:34 - 00000000 ____D C:\Users\Rybozord\Desktop\pobrane
2013-12-19 12:39 - 2013-09-26 23:23 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-19 12:38 - 2013-12-19 12:24 - 00022940 _____ C:\Windows\WindowsUpdate.log
2013-12-19 12:37 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 12:37 - 2009-07-14 05:45 - 00010240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 12:27 - 2013-09-26 23:23 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-19 12:26 - 2013-12-19 12:26 - 00002246 _____ C:\Windows\PFRO.log
2013-12-19 12:26 - 2013-12-19 12:26 - 00000056 _____ C:\Windows\setupact.log
2013-12-19 12:26 - 2013-12-19 12:26 - 00000000 _____ C:\Windows\setuperr.log
2013-12-19 12:26 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-19 11:54 - 2013-12-19 11:53 - 00000000 ____D C:\ProgramData\Doctor Web
2013-12-19 11:53 - 2013-12-19 11:43 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-19 11:53 - 2013-12-19 11:34 - 00000000 ____D C:\Users\Rybozord\Desktop\mbar
2013-12-19 11:50 - 2013-12-19 11:50 - 00386680 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2013-12-19 11:34 - 2013-12-19 11:34 - 00089304 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-19 11:14 - 2012-01-03 14:09 - 00000000 ____D C:\Windows\pss
2013-12-19 11:14 - 2011-03-28 01:09 - 00000000 ___RD C:\Users\Rybozord\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-19 11:13 - 2013-09-04 16:26 - 00000000 ____D C:\Program Files\SmartTechnology
2013-12-19 11:12 - 2013-12-19 11:12 - 00000000 ____D C:\Users\Rybozord\Documents\Splashtop Whiteboard
2013-12-19 11:12 - 2013-12-19 11:12 - 00000000 ____D C:\Users\Rybozord\Documents\Splashtop Presenter
2013-12-19 11:12 - 2013-09-19 17:47 - 00000000 ____D C:\ProgramData\Splashtop
2013-12-19 10:54 - 2013-12-19 10:39 - 00004936 _____ C:\Users\Rybozord\Desktop\Rkill.txt
2013-12-19 10:29 - 2013-12-19 10:29 - 00000000 ____D C:\ProgramData\SUPERSetup
2013-12-19 10:24 - 2011-04-27 02:27 - 00000000 ___RD C:\Users\Rybozord\Dropbox
2013-12-19 10:24 - 2011-04-27 02:24 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Dropbox
2013-12-19 10:14 - 2013-12-19 10:11 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2013-12-19 10:12 - 2013-12-19 10:12 - 00000516 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fa2d459a-7136-4e8f-b7f2-3c16f28c7a21.job
2013-12-19 10:12 - 2013-12-19 10:12 - 00000516 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 805338dd-9f73-4d44-9970-36f26bd2d4b8.job
2013-12-19 10:12 - 2013-12-19 10:12 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\SUPERAntiSpyware.com
2013-12-19 10:11 - 2013-12-19 10:11 - 00001808 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2013-12-19 10:11 - 2013-12-19 10:11 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2013-12-19 09:59 - 2013-12-19 09:59 - 00000618 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-19 09:55 - 2013-12-18 22:47 - 00000000 ____D C:\Qoobox
2013-12-19 09:37 - 2012-01-05 12:46 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\uTorrent
2013-12-19 09:36 - 2011-03-30 13:27 - 00000000 ____D C:\Windows\Minidump
2013-12-19 09:36 - 2011-03-28 01:58 - 00000000 ____D C:\Windows\Panther
2013-12-19 09:34 - 2013-09-04 16:50 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-19 09:34 - 2013-09-04 16:50 - 00000000 ____D C:\Program Files\CCleaner
2013-12-19 09:30 - 2012-04-29 07:48 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 09:21 - 2013-01-29 17:15 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Unity
2013-12-19 09:20 - 2013-09-17 01:00 - 00000000 ____D C:\Program Files (x86)\ZhuoDaShi
2013-12-19 09:17 - 2011-03-28 01:09 - 00001421 _____ C:\Users\Rybozord\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-19 08:55 - 2011-03-28 01:15 - 00001018 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000Core.job
2013-12-19 08:42 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Mobogenie
2013-12-19 08:42 - 2013-12-18 21:02 - 00000000 ____D C:\Program Files (x86)\Mobogenie
2013-12-19 08:40 - 2013-12-18 21:03 - 00000274 _____ C:\Users\Rybozord\daemonprocess.txt
2013-12-19 03:05 - 2013-12-19 03:05 - 00000042 _____ C:\Windows\SysWOW64\AK083E209605E394C.lie
2013-12-18 23:12 - 2013-12-18 23:12 - 00000000 ____D C:\Users\Rybozord\Nowy folder (2)
2013-12-18 23:12 - 2011-03-28 01:08 - 00000000 ____D C:\Users\Rybozord
2013-12-18 22:59 - 2013-12-18 22:59 - 00037506 _____ C:\ComboFix.txt
2013-12-18 22:59 - 2011-03-28 01:14 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Apps\2.0
2013-12-18 22:59 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-18 22:58 - 2013-12-18 22:46 - 00000000 ____D C:\Windows\erdnt
2013-12-18 22:57 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-18 22:50 - 2013-12-18 22:46 - 00000000 ____D C:\32788R22FWJFW
2013-12-18 22:40 - 2012-04-29 07:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-18 22:40 - 2012-04-29 07:48 - 00003870 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-18 22:40 - 2012-02-07 16:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-18 22:16 - 2013-12-18 21:22 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-18 21:32 - 2013-12-18 21:31 - 03222756 _____ C:\Windows\system32\sfcdetails.txt
2013-12-18 21:25 - 2013-12-18 21:22 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-12-18 21:23 - 2013-12-18 21:23 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-12-18 21:22 - 2013-12-18 21:22 - 00001339 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\Documents\Mobogenie
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\AppData\Local\genienext
2013-12-18 21:03 - 2013-12-18 21:03 - 00000000 ____D C:\Users\Rybozord\AppData\Local\cache
2013-12-18 21:01 - 2013-12-18 21:01 - 00000000 ____D C:\ProgramData\WPM
2013-12-18 20:45 - 2009-07-13 21:22 - 00066594 _____ C:\Windows\SysWOW64\C_855.NLS
2013-12-18 20:44 - 2009-07-14 00:54 - 00000000 _____ C:\Windows\SysWOW64\mprdim.dll
2013-12-18 20:44 - 2009-06-10 22:39 - 00001820 _____ C:\Windows\SysWOW64\rasctrnm.h
2013-12-18 20:43 - 2011-06-22 05:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hbaapi.dll
2013-12-18 20:43 - 2009-07-14 00:43 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2013-12-18 20:37 - 2011-06-22 05:24 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2013-12-18 20:37 - 2009-07-14 01:10 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\rasmbmgr.dll
2013-12-18 20:36 - 2009-07-14 00:26 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2013-12-18 20:32 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\lt-LT
2013-12-18 20:32 - 2009-07-14 00:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\activeds.tlb
2013-12-18 20:32 - 2009-07-14 00:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2013-12-18 20:32 - 2009-07-14 00:19 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2013-12-18 20:15 - 2013-10-10 02:31 - 00000000 ____D C:\found.000
2013-12-18 20:08 - 2013-12-18 20:07 - 00001465 _____ C:\Windows\SysWOW64\PCloudCleanerService.log
2013-12-18 20:06 - 2013-12-18 20:06 - 00002272 _____ C:\Windows\SysWOW64\BroomData.bit
2013-12-18 20:01 - 2013-12-18 20:01 - 00003130 _____ C:\Windows\System32\Tasks\{918BA1D3-7A0D-44D4-9122-9D4B91A66215}
2013-12-18 19:35 - 2013-12-18 19:35 - 00000614 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2013-12-18 19:20 - 2013-12-18 19:20 - 00003288 ____N C:\bootsqm.dat
2013-12-16 10:58 - 2013-12-16 10:57 - 00000000 ____D C:\Users\Rybozord\Documents\Rockstar Games
2013-12-16 10:52 - 2013-12-16 10:52 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2013-12-13 18:58 - 2013-12-13 18:58 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Warner Bros. Interactive Entertainment
2013-12-13 05:22 - 2013-12-13 05:22 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Anuman
2013-12-13 05:16 - 2013-12-13 05:16 - 00000000 ____D C:\Users\Rybozord\jakies gowno
2013-12-13 05:16 - 2013-12-13 05:10 - 00000000 ____D C:\Users\Rybozord\AppData\Local\Big Fish
2013-12-12 15:11 - 2013-04-13 17:16 - 00000000 __SHD C:\Users\Rybozord\wc
2013-12-11 14:56 - 2012-09-19 03:28 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-11 01:56 - 2013-12-11 01:54 - 22151100 _____ C:\Users\Rybozord\Desktop\1 Süper Private  Combo List(2).txt
2013-12-10 07:48 - 2013-12-10 07:48 - 00000218 _____ C:\Users\Rybozord\Desktop\strona.txt
2013-12-06 13:50 - 2012-01-29 16:16 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Skype
2013-12-05 05:52 - 2013-12-05 05:52 - 00054629 _____ C:\Users\Rybozord\Desktop\Mirkowy kalkulator kcal.xlsx
2013-12-04 03:03 - 2013-11-15 13:59 - 00000000 ____D C:\Users\Rybozord\AppData\Local\The Witcher
2013-12-04 02:42 - 2013-12-04 02:42 - 00000000 ____D C:\ProgramData\WinterSoft
2013-12-04 02:41 - 2012-12-16 10:27 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Applian FLV and Media Player
2013-12-04 01:52 - 2013-12-04 01:52 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Crazy Viking Studios
2013-12-04 01:48 - 2013-12-04 01:48 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Volgarr the Viking v2.0.0.1 1.0
2013-12-03 23:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-03 22:34 - 2013-09-26 23:23 - 00004048 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-03 22:34 - 2013-09-26 23:23 - 00003796 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-03 16:39 - 2013-02-11 21:24 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-03 16:39 - 2012-01-29 16:16 - 00000000 ____D C:\ProgramData\Skype
2013-12-03 02:56 - 2013-12-03 02:37 - 00000000 ____D C:\ProgramData\Oracle
2013-12-03 02:49 - 2013-12-03 02:49 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-12-03 02:49 - 2013-12-03 02:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-12-03 02:49 - 2013-12-03 02:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-12-03 02:49 - 2013-12-03 02:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-12-03 02:37 - 2013-12-03 02:35 - 00002889 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-03 02:37 - 2012-06-19 14:34 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-02 03:00 - 2013-12-02 03:00 - 00000000 ____D C:\Windows\CheckSur
2013-12-02 00:43 - 2013-12-02 00:43 - 00000000 ____D C:\Users\Rybozord\Desktop\venicon
2013-12-01 20:17 - 2013-12-01 20:17 - 00000000 ____D C:\Users\Rybozord\AppData\Roaming\Ice-Pick Lodge
2013-12-01 20:17 - 2013-07-14 11:53 - 00000000 ____D C:\ProgramData\Steam
2013-11-25 04:47 - 2011-03-28 01:15 - 00004046 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000UA
2013-11-25 04:47 - 2011-03-28 01:15 - 00003650 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3218042876-828680532-3334976141-1000Core
2013-11-21 02:26 - 2012-11-23 05:33 - 00000000 ____D C:\Users\Rybozord\Documents\My Games
2013-11-21 02:25 - 2013-11-21 02:25 - 00001585 _____ C:\Users\Public\Desktop\Path of Exile.lnk
2013-11-21 02:20 - 2013-11-21 02:20 - 07401472 _____ C:\Users\Rybozord\Desktop\PathOfExileInstaller.msi
2013-11-19 11:21 - 2011-03-28 01:13 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-19 03:01 - 2013-01-22 09:56 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-19 03:00 - 2013-10-12 10:53 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-19 03:00 - 2013-10-12 10:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client

Some content of TEMP:
====================
C:\Users\Rybozord\AppData\Local\Temp\21156uninstall.exe
C:\Users\Rybozord\AppData\Local\Temp\SetupUtil.exe
C:\Users\Rybozord\AppData\Local\Temp\Sqlite3.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 07:41

==================== End Of Log ============================