Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-12-2013
Ran by Damian (administrator) on DAMIAN-KOMPUTER on 27-12-2013 00:10:12
Running from C:\Users\Damian\Desktop\programy do skanowania komputera
Windows 7 Ultimate (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(ATK) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Net4Switch\Net4Switch.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS CopyProtect\ASPG.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BusinessEverywhere.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
() C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\SMSNotifier.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ASUS) C:\Windows\AsScrPro.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(asus) C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM\...\Run: [ETDWare] - C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-01-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6806144 2010-06-24] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440 2010-07-02] ()
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4297136 2012-10-30] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM-x32\...\Run: [Start_BusinessEverywhere_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BusinessEverywhere.exe [3363808 2012-06-06] ()
HKLM-x32\...\Run: [Start_Update_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\UpdteApp.exe [966600 2012-06-06] ()
HKLM-x32\...\Run: [Start_SMSNotifier_{ad30a369-08e3-414c-9d2c-7f47dbe748da}] - C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\SMSNotifier.exe [1359824 2012-06-06] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - "C:\Users\Damian\AppData\Local\Akamai\netsession_win.exe"
HKCU\...\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe [96056 2013-01-11] (Siber Systems)
HKCU\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKCU\...\Run: [Facebook Update] - C:\Users\Damian\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-04-08] (Facebook Inc.)
MountPoints2: {5887376b-a139-11e2-86fe-bcaec50c6d58} - G:\DPFMate.exe
MountPoints2: {5acd784d-a9f6-11e2-b18f-806e6f6e6963} - H:\Setup.exe
MountPoints2: {9564f8b0-6533-11e2-a19f-bcaec50c6d58} - G:\DPFMate.exe
MountPoints2: {c868438d-6657-11e2-bc1b-bcaec50c6d58} - G:\DPFMate.exe

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {3067A292-EC01-4137-8449-E1C9DC408098} URL = http://www.google.com/search?hl=pl&q={searchTerms}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: avast! EasyPass Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: avast! EasyPass Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (AVAST Software)
Toolbar: HKCU - avast! EasyPass Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (AVAST Software)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Damian\AppData\Roaming\Mozilla\Firefox\Profiles\zfq5zd8c.default-1388097632505
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Damian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (RoboForm Plugin for Google Chrome/Opera/etc.) - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\plugin/rf-np-plugin.dll (Siber Systems Inc.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Damian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Docs) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! WebRep) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0
CHR Extension: (Earth) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac\1.6_0
CHR Extension: (3D Table Tennis) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lggegdhfphffaeipfpocijebeakpmcih\2.1.0_0
CHR Extension: (Media Player) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmkigfdipchbagbecdmmomiahkkhlcfo\0.1_0
CHR Extension: (Google Wallet) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Damian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-10-30] (AVAST Software)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 BEWConfigSrv; C:\Program Files (x86)\OrangeBusinessServices\Manager polaczen\{ad30a369-08e3-414c-9d2c-7f47dbe748da}\BEWConfigSrv.exe [173008 2012-06-06] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-09-11] ()
R3 spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496 2007-08-03] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [71600 2012-10-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-10-15] (AVAST Software)
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [984144 2012-10-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [370288 2012-10-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-10-30] (AVAST Software)
R2 ghaio; C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [17464 2007-08-03] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-01-24] (Duplex Secure Ltd.)
S3 StkTMini; C:\Windows\System32\Drivers\StkTMini.sys [528256 2007-11-15] (Syntek)
U3 agv85o8q; C:\Windows\System32\Drivers\agv85o8q.sys [0 ] (Advanced Micro Devices)
S3 ipswuio; System32\DRIVERS\ipswuio.sys [x]
U3 tmlwf; 
U3 tmwfp; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-26 23:46 - 2013-12-26 23:47 - 00003637 _____ C:\Users\Damian\Desktop\AdwCleaner[S0].txt
2013-12-26 23:45 - 2013-12-26 23:53 - 00000000 ____D C:\AdwCleaner
2013-12-26 23:45 - 2013-12-26 23:46 - 00003898 _____ C:\Users\Damian\Desktop\AdwCleaner[R0].txt
2013-12-26 23:40 - 2013-12-26 23:40 - 00000000 ____D C:\Users\Damian\Desktop\Stare dane programu Firefox
2013-12-26 23:33 - 2013-12-26 23:33 - 00002252 _____ C:\Users\Damian\Desktop\Nowy dokument tekstowy.txt
2013-12-26 22:21 - 2013-12-26 22:21 - 00000000 _____ C:\Windows\Net4Switch.INI
2013-12-25 22:28 - 2013-12-27 00:10 - 00000000 ____D C:\Users\Damian\Desktop\programy do skanowania komputera
2013-12-25 21:35 - 2013-12-25 21:35 - 00000000 ____D C:\FRST
2013-12-22 23:56 - 2013-12-22 23:56 - 00000000 ____D C:\Users\Damian\.unlimitedftp
2013-12-22 22:50 - 2013-12-22 22:50 - 00001753 _____ C:\Users\Damian\AppData\Local\recently-used.xbel
2013-12-21 09:54 - 2013-12-21 10:56 - 00000000 ____D C:\Users\Damian\AppData\Local\gtk-2.0
2013-12-21 09:54 - 2013-12-21 09:54 - 00000000 ____D C:\Users\Damian\.thumbnails
2013-12-21 09:48 - 2013-12-23 00:01 - 00000000 ____D C:\Users\Damian\.gimp-2.8
2013-12-21 09:48 - 2013-12-21 14:36 - 00000000 ____D C:\Users\Damian\Desktop\reklama
2013-12-21 09:48 - 2013-12-21 09:48 - 00000000 ____D C:\Users\Damian\AppData\Local\gegl-0.2
2013-12-21 09:43 - 2013-12-21 09:44 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-21 00:43 - 2013-12-21 09:32 - 00001076 _____ C:\Windows\system32\Drivers\etc\hosts.bak
2013-12-21 00:42 - 2013-12-26 23:36 - 00000404 __RSH C:\ProgramData\ntuser.pol
2013-12-21 00:42 - 2013-12-26 18:13 - 00000346 _____ C:\Windows\Tasks\bench-sys.job
2013-12-21 00:42 - 2013-12-26 16:28 - 00000346 _____ C:\Windows\Tasks\bench-S-1-5-21-1176149435-4116147368-3617165151-1001.job
2013-12-21 00:42 - 2013-12-21 00:42 - 00003242 _____ C:\Windows\System32\Tasks\bench-sys
2013-12-21 00:42 - 2013-12-21 00:42 - 00003222 _____ C:\Windows\System32\Tasks\bench-S-1-5-21-1176149435-4116147368-3617165151-1001
2013-12-20 17:28 - 2013-12-20 17:28 - 00001023 _____ C:\Users\Public\Desktop\CDR Viewer.lnk
2013-12-20 17:28 - 2013-12-19 16:29 - 00765896 _____ (AnyProtect.com) C:\Users\Damian\AppData\Local\AnyProtectScannerSetup.exe
2013-12-20 17:27 - 2013-12-20 17:27 - 00000000 ____D C:\Program Files (x86)\CDRViewer
2013-12-12 16:51 - 2013-12-12 16:51 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-11-28 18:01 - 2013-11-29 09:35 - 00000000 ____D C:\Users\Damian\Desktop\Statystyka
2013-11-28 10:57 - 2013-11-28 10:57 - 00000000 ____D C:\Users\Damian\AppData\Roaming\LolClient
2013-11-28 08:55 - 2013-11-28 08:55 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-11-28 08:55 - 2013-11-28 08:55 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-11-28 08:55 - 2013-11-28 08:55 - 00000000 ____D C:\Riot Games
2013-11-28 08:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-11-28 08:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-11-28 08:55 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-11-28 08:55 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-11-28 08:55 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-11-28 08:54 - 2013-11-28 08:54 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-11-28 08:46 - 2013-11-28 08:54 - 00000000 ____D C:\Users\Damian\AppData\Roaming\Riot Games
2013-11-28 08:45 - 2013-12-26 23:54 - 00000000 ____D C:\Users\Damian\Desktop\dla izy
2013-11-27 14:31 - 2013-11-27 14:31 - 00000000 ____D C:\Users\Damian\Desktop\ćwiczenia
2013-11-27 14:29 - 2013-11-27 14:31 - 00000000 ____D C:\Users\Damian\Desktop\Modelarstwo
2013-11-27 14:26 - 2013-11-27 17:34 - 00000000 ____D C:\Users\Damian\Desktop\GRY

==================== One Month Modified Files and Folders =======

2013-12-27 00:10 - 2013-12-25 22:28 - 00000000 ____D C:\Users\Damian\Desktop\programy do skanowania komputera
2013-12-27 00:05 - 2013-01-10 22:24 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-27 00:05 - 2013-01-10 21:34 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-27 00:05 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-27 00:05 - 2009-07-14 05:51 - 00157413 _____ C:\Windows\setupact.log
2013-12-26 23:54 - 2013-11-28 08:45 - 00000000 ____D C:\Users\Damian\Desktop\dla izy
2013-12-26 23:53 - 2013-12-26 23:45 - 00000000 ____D C:\AdwCleaner
2013-12-26 23:53 - 2013-01-25 21:11 - 01592843 _____ C:\Windows\WindowsUpdate.log
2013-12-26 23:48 - 2013-01-11 12:17 - 00039290 _____ C:\Windows\PFRO.log
2013-12-26 23:48 - 2013-01-10 22:24 - 00001048 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-26 23:48 - 2013-01-10 21:20 - 00000000 ____D C:\Users\Damian
2013-12-26 23:48 - 2009-07-14 05:45 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-26 23:48 - 2009-07-14 05:45 - 00009776 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-26 23:47 - 2013-12-26 23:46 - 00003637 _____ C:\Users\Damian\Desktop\AdwCleaner[S0].txt
2013-12-26 23:46 - 2013-12-26 23:45 - 00003898 _____ C:\Users\Damian\Desktop\AdwCleaner[R0].txt
2013-12-26 23:40 - 2013-12-26 23:40 - 00000000 ____D C:\Users\Damian\Desktop\Stare dane programu Firefox
2013-12-26 23:38 - 2013-11-03 10:39 - 00001137 _____ C:\Windows\system32\Drivers\etc\tmvsthfud.bin
2013-12-26 23:38 - 2013-07-30 22:29 - 00001137 _____ C:\Windows\system32\Drivers\etc\tmvsthfss.bin
2013-12-26 23:38 - 2013-03-29 06:36 - 01687214 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-26 23:38 - 2009-07-14 18:55 - 00740828 _____ C:\Windows\system32\perfh015.dat
2013-12-26 23:38 - 2009-07-14 18:55 - 00155392 _____ C:\Windows\system32\perfc015.dat
2013-12-26 23:36 - 2013-12-21 00:42 - 00000404 __RSH C:\ProgramData\ntuser.pol
2013-12-26 23:33 - 2013-12-26 23:33 - 00002252 _____ C:\Users\Damian\Desktop\Nowy dokument tekstowy.txt
2013-12-26 22:40 - 2013-04-08 18:35 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1176149435-4116147368-3617165151-1001UA.job
2013-12-26 22:21 - 2013-12-26 22:21 - 00000000 _____ C:\Windows\Net4Switch.INI
2013-12-26 18:13 - 2013-12-21 00:42 - 00000346 _____ C:\Windows\Tasks\bench-sys.job
2013-12-26 16:28 - 2013-12-21 00:42 - 00000346 _____ C:\Windows\Tasks\bench-S-1-5-21-1176149435-4116147368-3617165151-1001.job
2013-12-25 21:35 - 2013-12-25 21:35 - 00000000 ____D C:\FRST
2013-12-25 21:04 - 2013-04-08 18:35 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1176149435-4116147368-3617165151-1001Core.job
2013-12-23 10:38 - 2013-01-11 09:13 - 00003924 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-23 10:38 - 2013-01-11 09:13 - 00001958 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-23 10:37 - 2013-01-11 09:13 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-12-23 10:35 - 2013-01-10 21:57 - 00000000 ____D C:\ProgramData\P4G
2013-12-23 10:35 - 2009-07-14 19:09 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-12-23 10:35 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-12-23 10:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2013-12-23 10:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-23 00:01 - 2013-12-21 09:48 - 00000000 ____D C:\Users\Damian\.gimp-2.8
2013-12-22 23:56 - 2013-12-22 23:56 - 00000000 ____D C:\Users\Damian\.unlimitedftp
2013-12-22 22:50 - 2013-12-22 22:50 - 00001753 _____ C:\Users\Damian\AppData\Local\recently-used.xbel
2013-12-21 14:36 - 2013-12-21 09:48 - 00000000 ____D C:\Users\Damian\Desktop\reklama
2013-12-21 10:56 - 2013-12-21 09:54 - 00000000 ____D C:\Users\Damian\AppData\Local\gtk-2.0
2013-12-21 09:54 - 2013-12-21 09:54 - 00000000 ____D C:\Users\Damian\.thumbnails
2013-12-21 09:48 - 2013-12-21 09:48 - 00000000 ____D C:\Users\Damian\AppData\Local\gegl-0.2
2013-12-21 09:44 - 2013-12-21 09:43 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-21 09:32 - 2013-12-21 00:43 - 00001076 _____ C:\Windows\system32\Drivers\etc\hosts.bak
2013-12-21 09:30 - 2013-01-10 21:58 - 00002084 _____ C:\Windows\system32\AutoRunFilter.ini
2013-12-21 00:42 - 2013-12-21 00:42 - 00003242 _____ C:\Windows\System32\Tasks\bench-sys
2013-12-21 00:42 - 2013-12-21 00:42 - 00003222 _____ C:\Windows\System32\Tasks\bench-S-1-5-21-1176149435-4116147368-3617165151-1001
2013-12-20 17:28 - 2013-12-20 17:28 - 00001023 _____ C:\Users\Public\Desktop\CDR Viewer.lnk
2013-12-20 17:27 - 2013-12-20 17:27 - 00000000 ____D C:\Program Files (x86)\CDRViewer
2013-12-19 16:29 - 2013-12-20 17:28 - 00765896 _____ (AnyProtect.com) C:\Users\Damian\AppData\Local\AnyProtectScannerSetup.exe
2013-12-12 16:51 - 2013-12-12 16:51 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-12 16:51 - 2013-01-10 22:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-11 09:46 - 2013-01-10 21:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 09:46 - 2013-01-10 21:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 09:46 - 2013-01-10 21:34 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-10 11:56 - 2013-03-16 17:50 - 00000000 ____D C:\Windows\system32\Service
2013-12-10 09:43 - 2009-07-14 06:13 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-05 08:36 - 2013-01-10 22:25 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-02 21:32 - 2013-01-10 23:39 - 00001151 _____ C:\Windows\TMFilter.log
2013-12-02 08:46 - 2013-07-08 07:37 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-11-30 15:43 - 2013-01-10 22:24 - 00004044 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-30 15:43 - 2013-01-10 22:24 - 00003792 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-29 09:35 - 2013-11-28 18:01 - 00000000 ____D C:\Users\Damian\Desktop\Statystyka
2013-11-28 10:57 - 2013-11-28 10:57 - 00000000 ____D C:\Users\Damian\AppData\Roaming\LolClient
2013-11-28 08:55 - 2013-11-28 08:55 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-11-28 08:55 - 2013-11-28 08:55 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-11-28 08:55 - 2013-11-28 08:55 - 00000000 ____D C:\Riot Games
2013-11-28 08:54 - 2013-11-28 08:54 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-11-28 08:54 - 2013-11-28 08:46 - 00000000 ____D C:\Users\Damian\AppData\Roaming\Riot Games
2013-11-27 18:55 - 2013-02-05 19:23 - 00000000 ____D C:\Users\Damian\AppData\Roaming\ipla
2013-11-27 17:34 - 2013-11-27 14:26 - 00000000 ____D C:\Users\Damian\Desktop\GRY
2013-11-27 16:58 - 2013-09-23 16:59 - 00000000 ____D C:\Users\Damian\AppData\Roaming\Wargaming.net
2013-11-27 14:31 - 2013-11-27 14:31 - 00000000 ____D C:\Users\Damian\Desktop\ćwiczenia
2013-11-27 14:31 - 2013-11-27 14:29 - 00000000 ____D C:\Users\Damian\Desktop\Modelarstwo
2013-11-27 14:30 - 2013-01-10 22:22 - 00000000 ___RD C:\Users\Damian\Desktop\Programy
2013-11-27 14:29 - 2013-01-19 13:02 - 00000000 ____D C:\Users\Damian\Desktop\GoPro
2013-11-27 14:28 - 2013-11-13 14:11 - 00000000 ____D C:\Users\Damian\Desktop\szkoła
2013-11-27 14:18 - 2013-09-23 16:31 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-11-27 14:18 - 2013-09-23 16:26 - 00000000 ____D C:\Games

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2009-07-14 00:38] - [2009-07-14 02:41] - 1008640 ____A (Microsoft Corporation) E573BD9AB55C8E333C202B9E255F972E

C:\Windows\SysWOW64\User32.dll
[2013-01-10 22:18] - [2013-01-10 22:18] - 0833024 ____A (Microsoft Corporation) 2C9CC9F492CA596B1B9FC1AE5E916356

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 13:03

==================== End Of Log ============================