Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-01-2014 01
Ran by Paweł (administrator) on VAIO on 02-01-2014 19:20:48
Running from C:\Users\Paweł\Downloads
Windows 8 (X64) OS Language: Polish
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\Przyspiesz Komputer\PCSUService.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\SUSSoundProxy.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCWebServer.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Users\Paweł\AppData\Local\fst_pl_14\upfst_pl_14.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
() C:\Program Files (x86)\fst_pl_19\fst_pl_19.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
() C:\Program Files\Sony\VAIO Care\listener.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [10590208 2013-03-14] (Broadcom Corporation)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-05-07] (Realtek Semiconductor)
HKLM\...\Run: [Bluetooth] - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [526704 2012-12-14] (Broadcom Corporation.)
HKLM-x32\...\Run: [mcui_exe] - "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740376 2013-02-06] (Sony Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2013-02-19] (Intel Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [fst_pl_19] - C:\Program Files (x86)\fst_pl_19\fst_pl_19.exe [11671024 2013-12-18] ()
HKLM-x32\...\RunOnce: [upfst_pl_14.exe] - C:\Users\Paweł\AppData\Local\fst_pl_14\upfst_pl_14.exe -runonce [3154344 2013-12-18] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [PCSpeedUp] - C:\Program Files (x86)\Przyspiesz Komputer\PCSUNotifier.exe [277808 2013-12-10] ()
HKCU\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Paweł\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-05-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-05-03] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://vaioportal.sony.eu
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://aartemis.com/?type=sc&ts=1388517793&from=cor&uid=HGSTXHTS545050A7E380_130407TE8514491DZXRWX
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0AE95E7C-D727-4E27-9157-6E75176F2977} URL = http://search.aol.com/aol/search?s_it=tb50winamp&q={searchTerms}
SearchScopes: HKCU - {1C22905C-8403-4980-9109-8A12B457D1A9} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASEJS
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 212.244.23.249 212.244.23.53

FireFox:
========
FF ProfilePath: C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\623obwb3.default
FF user.js: detected! => C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\623obwb3.default\user.js
FF Homepage: https://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wolnelektury-pl.xml
FF Extension: Adblock Plus - C:\Users\Paweł\AppData\Roaming\Mozilla\Firefox\Profiles\623obwb3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2227992 2013-01-23] (Broadcom Corporation.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129824 2013-01-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166688 2013-01-23] (Intel Corporation)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-04] (Sony Corporation)
R2 PCSUService; C:\Program Files (x86)\Przyspiesz Komputer\PCSUService.exe [423728 2013-12-10] ()
R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-02-06] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] ()
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1368624 2013-08-01] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE [48640 2013-03-14] (Broadcom Corporation)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2013-12-31] (Cherished Technololgy LIMITED)
S2 McAPExe; "C:\Program Files\McAfee\MSC\McAPExe.exe" [x]
S2 McOobeSv2; "C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [x]

==================== Drivers (Whitelisted) ====================

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [240920 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [194872 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-10-21] (AVG Technologies CZ, s.r.o.)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [169240 2013-01-23] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6971056 2013-03-14] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-03-14] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-02 19:20 - 2014-01-02 19:20 - 00017224 _____ C:\Users\Paweł\Downloads\FRST.txt
2014-01-02 19:20 - 2014-01-02 19:20 - 00000000 ____D C:\FRST
2014-01-02 19:19 - 2014-01-02 19:19 - 01931426 _____ (Farbar) C:\Users\Paweł\Downloads\FRST64.exe
2014-01-02 17:56 - 2014-01-02 17:56 - 00066642 _____ C:\Users\Paweł\Downloads\Extras.Txt
2014-01-02 17:55 - 2014-01-02 17:55 - 00106990 _____ C:\Users\Paweł\Downloads\OTL.Txt
2014-01-02 17:50 - 2014-01-02 17:50 - 00602112 _____ (OldTimer Tools) C:\Users\Paweł\Downloads\OTL(1).exe
2014-01-02 17:46 - 2014-01-02 17:46 - 00602112 _____ (OldTimer Tools) C:\Users\Paweł\Downloads\OTL.exe
2014-01-01 21:29 - 2014-01-01 21:29 - 00000000 ____D C:\Users\Paweł\AppData\Local\fst_pl_19
2014-01-01 21:29 - 2014-01-01 21:29 - 00000000 ____D C:\Program Files (x86)\fst_pl_19
2014-01-01 19:52 - 2014-01-01 19:52 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Malwarebytes
2014-01-01 19:51 - 2014-01-01 19:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Paweł\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-01 19:51 - 2014-01-01 19:51 - 00001069 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-01 19:51 - 2014-01-01 19:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-01 19:51 - 2014-01-01 19:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-01 19:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-01 19:29 - 2014-01-01 19:29 - 01764731 _____ C:\Users\Paweł\Downloads\KnightsandMerchants_sciagnij.exe
2014-01-01 08:23 - 2014-01-01 08:23 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-01 08:23 - 2014-01-01 08:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-31 23:49 - 2013-12-31 23:49 - 00818491 _____ C:\Users\Paweł\Downloads\Adblock Plus 2.3 - Firefox.xpi
2013-12-31 23:49 - 2013-12-31 23:49 - 00592032 _____ C:\Users\Paweł\Downloads\Adblock Plus 2.3 - Firefox_isdmgr.exe
2013-12-31 21:21 - 2013-12-31 21:21 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Mozilla
2013-12-31 20:23 - 2014-01-02 14:59 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\newnext.me
2013-12-31 20:23 - 2013-12-31 20:25 - 00000000 ____D C:\Users\Paweł\AppData\Local\Mobogenie
2013-12-31 20:23 - 2013-12-31 20:24 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\aartemis
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\Documents\Mobogenie
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\Google
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\genienext
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\cache
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\BonanzaDealsLive
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\.android
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\ProgramData\WPM
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 _____ C:\Users\Paweł\daemonprocess.txt
2013-12-31 20:22 - 2013-12-31 20:22 - 00252969 _____ C:\Users\Paweł\Downloads\timeline-remove-firefox.xpi
2013-12-31 17:15 - 2013-12-31 17:15 - 00000000 ____D C:\Users\Paweł\Downloads\LotR(1)
2013-12-31 17:14 - 2013-12-31 17:14 - 04257420 _____ C:\Users\Paweł\Downloads\LotR(1).rar
2013-12-31 17:06 - 2014-01-02 18:38 - 00000000 ____D C:\Users\Paweł\AppData\Local\fst_pl_14
2013-12-31 17:06 - 2014-01-01 21:26 - 00000000 ____D C:\Program Files (x86)\fst_pl_14
2013-12-31 17:05 - 2013-12-31 17:05 - 00001104 _____ C:\Users\Paweł\Desktop\Przyspiesz Komputer.lnk
2013-12-31 17:03 - 2013-12-31 17:03 - 00576544 _____ C:\Users\Paweł\Downloads\Setup.exe
2013-12-31 16:50 - 2013-12-31 16:50 - 04257420 _____ C:\Users\Paweł\Downloads\LotR.rar
2013-12-20 11:50 - 2014-01-01 08:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-17 14:12 - 2013-12-17 14:12 - 00000411 _____ C:\Users\Paweł\Downloads\url.html

==================== One Month Modified Files and Folders =======

2014-01-02 19:20 - 2014-01-02 19:20 - 00017224 _____ C:\Users\Paweł\Downloads\FRST.txt
2014-01-02 19:20 - 2014-01-02 19:20 - 00000000 ____D C:\FRST
2014-01-02 19:19 - 2014-01-02 19:19 - 01931426 _____ (Farbar) C:\Users\Paweł\Downloads\FRST64.exe
2014-01-02 19:13 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2014-01-02 18:38 - 2013-12-31 17:06 - 00000000 ____D C:\Users\Paweł\AppData\Local\fst_pl_14
2014-01-02 18:36 - 2013-11-05 14:08 - 00000382 _____ C:\Windows\Tasks\PC SpeedUp Service Deactivator.job
2014-01-02 18:28 - 2013-09-24 18:51 - 00000000 ____D C:\ProgramData\MFAData
2014-01-02 18:10 - 2013-09-21 20:22 - 00000000 ___RD C:\Users\Paweł\Desktop\Dokumenty
2014-01-02 17:57 - 2013-09-21 05:27 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-02 17:56 - 2014-01-02 17:56 - 00066642 _____ C:\Users\Paweł\Downloads\Extras.Txt
2014-01-02 17:55 - 2014-01-02 17:55 - 00106990 _____ C:\Users\Paweł\Downloads\OTL.Txt
2014-01-02 17:50 - 2014-01-02 17:50 - 00602112 _____ (OldTimer Tools) C:\Users\Paweł\Downloads\OTL(1).exe
2014-01-02 17:46 - 2014-01-02 17:46 - 00602112 _____ (OldTimer Tools) C:\Users\Paweł\Downloads\OTL.exe
2014-01-02 14:59 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\newnext.me
2014-01-02 09:53 - 2013-06-03 16:40 - 01907890 _____ C:\Windows\WindowsUpdate.log
2014-01-01 21:31 - 2012-08-03 23:19 - 00794946 _____ C:\Windows\system32\perfh015.dat
2014-01-01 21:31 - 2012-08-03 23:19 - 00159530 _____ C:\Windows\system32\perfc015.dat
2014-01-01 21:31 - 2012-07-26 08:28 - 01793398 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-01 21:29 - 2014-01-01 21:29 - 00000000 ____D C:\Users\Paweł\AppData\Local\fst_pl_19
2014-01-01 21:29 - 2014-01-01 21:29 - 00000000 ____D C:\Program Files (x86)\fst_pl_19
2014-01-01 21:27 - 2013-11-05 14:08 - 00000000 ____D C:\Program Files (x86)\Przyspiesz Komputer
2014-01-01 21:26 - 2013-12-31 17:06 - 00000000 ____D C:\Program Files (x86)\fst_pl_14
2014-01-01 21:26 - 2012-08-03 22:06 - 00020044 _____ C:\Windows\PFRO.log
2014-01-01 21:26 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-01 19:52 - 2014-01-01 19:52 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Malwarebytes
2014-01-01 19:51 - 2014-01-01 19:51 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Paweł\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-01 19:51 - 2014-01-01 19:51 - 00001069 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-01-01 19:51 - 2014-01-01 19:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-01 19:51 - 2014-01-01 19:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-01 19:29 - 2014-01-01 19:29 - 01764731 _____ C:\Users\Paweł\Downloads\KnightsandMerchants_sciagnij.exe
2014-01-01 08:38 - 2013-06-03 18:40 - 00000000 ____D C:\Program Files (x86)\WildGames
2014-01-01 08:37 - 2013-06-03 18:39 - 00000000 ____D C:\ProgramData\WildTangent
2014-01-01 08:23 - 2014-01-01 08:23 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-01 08:23 - 2014-01-01 08:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-01 08:23 - 2013-12-20 11:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-01 08:23 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-12-31 23:49 - 2013-12-31 23:49 - 00818491 _____ C:\Users\Paweł\Downloads\Adblock Plus 2.3 - Firefox.xpi
2013-12-31 23:49 - 2013-12-31 23:49 - 00592032 _____ C:\Users\Paweł\Downloads\Adblock Plus 2.3 - Firefox_isdmgr.exe
2013-12-31 23:45 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-31 21:21 - 2013-12-31 21:21 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\Mozilla
2013-12-31 20:25 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\Mobogenie
2013-12-31 20:24 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Roaming\aartemis
2013-12-31 20:24 - 2013-09-16 17:28 - 00001438 _____ C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\Documents\Mobogenie
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\Google
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\genienext
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\cache
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\AppData\Local\BonanzaDealsLive
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\Users\Paweł\.android
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\ProgramData\WPM
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-12-31 20:23 - 2013-12-31 20:23 - 00000000 _____ C:\Users\Paweł\daemonprocess.txt
2013-12-31 20:23 - 2013-09-16 17:26 - 00000000 ____D C:\Users\Paweł
2013-12-31 20:22 - 2013-12-31 20:22 - 00252969 _____ C:\Users\Paweł\Downloads\timeline-remove-firefox.xpi
2013-12-31 18:38 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF
2013-12-31 17:15 - 2013-12-31 17:15 - 00000000 ____D C:\Users\Paweł\Downloads\LotR(1)
2013-12-31 17:14 - 2013-12-31 17:14 - 04257420 _____ C:\Users\Paweł\Downloads\LotR(1).rar
2013-12-31 17:05 - 2013-12-31 17:05 - 00001104 _____ C:\Users\Paweł\Desktop\Przyspiesz Komputer.lnk
2013-12-31 17:03 - 2013-12-31 17:03 - 00576544 _____ C:\Users\Paweł\Downloads\Setup.exe
2013-12-31 16:50 - 2013-12-31 16:50 - 04257420 _____ C:\Users\Paweł\Downloads\LotR.rar
2013-12-22 17:39 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-18 19:32 - 2013-09-24 18:51 - 00000000 ____D C:\Users\Paweł\AppData\Local\Avg2014
2013-12-17 14:41 - 2013-09-22 12:04 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3574246350-3722877261-406193655-1002
2013-12-17 14:12 - 2013-12-17 14:12 - 00000411 _____ C:\Users\Paweł\Downloads\url.html
2013-12-10 20:58 - 2013-09-21 05:27 - 00003818 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-07 19:38 - 2012-07-26 08:21 - 00024266 _____ C:\Windows\setupact.log

Some content of TEMP:
====================
C:\Users\Paweł\AppData\Local\Temp\6_Offer_5.exe
C:\Users\Paweł\AppData\Local\Temp\AutoRun.exe
C:\Users\Paweł\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Paweł\AppData\Local\Temp\DownloadManager.exe
C:\Users\Paweł\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Paweł\AppData\Local\Temp\drm_dyndata_7370012.dll
C:\Users\Paweł\AppData\Local\Temp\drm_dyndata_7400006.dll
C:\Users\Paweł\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Paweł\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Paweł\AppData\Local\Temp\ICReinstall_firefox.exe
C:\Users\Paweł\AppData\Local\Temp\ICReinstall_nsoE06A.tmp.exe
C:\Users\Paweł\AppData\Local\Temp\LuckyLeap.exe
C:\Users\Paweł\AppData\Local\Temp\nsaC8C6.tmp.exe
C:\Users\Paweł\AppData\Local\Temp\OpenCL.dll
C:\Users\Paweł\AppData\Local\Temp\Setup1.exe
C:\Users\Paweł\AppData\Local\Temp\ubiCECF.tmp.exe
C:\Users\Paweł\AppData\Local\Temp\VP6Install.exe
C:\Users\Paweł\AppData\Local\Temp\VP6VFW.dll
C:\Users\Paweł\AppData\Local\Temp\_is1D13.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-28 10:10

==================== End Of Log ============================