Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 03
Ran by User (administrator) on USER-KOMPUTER on 16-01-2014 02:02:27
Running from D:\pobrane
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Windows\SysWOW64\srvany.exe
() C:\Windows\KMService.exe
(Realtek) C:\Program Files (x86)\Realtek\Wireless LAN Utility\RtlService.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\Wireless LAN Utility\RtWLan.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\spotify.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
() C:\Program Files (x86)\Google\Update\Install\{946FA43C-7E4E-48EE-A8CB-EBE10AC3E2B6}\32.0.1700.76_32.0.1700.72_chrome_updater.exe
(Google Inc.) C:\Windows\Temp\CR_7BA22.tmp\setup.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [899680 2013-02-04] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2013-03-05] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8071680 2013-12-06] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6193152 2013-12-06] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508144 2012-08-31] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-02-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-03-01] (Vimicro)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [NBKeyScan] - "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - D:\Itunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
HKCU\...\Run: [Spotify Web Helper] - C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1171968 2014-01-13] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\User\AppData\Roaming\Spotify\spotify.exe [6118400 2014-01-13] (Spotify Ltd)
HKCU\...\Run: [Google+ Auto Backup] - C:\Users\User\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 62.179.1.60 62.179.1.61

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\m5spygpl.default-1386528630680
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Itunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\m5spygpl.default-1386528630680\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-25]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 [2014-01-02]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1 [2014-01-08]

==================== Services (Whitelisted) =================

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [1005944 2012-07-02] (Broadcom Corporation.)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-12-04] (Ellora Assets Corp.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2013-12-06] ()
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36520 2012-09-14] (Advanced Micro Devices, Inc.)
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
S3 getbus; C:\Users\User\AppData\Local\Temp\getbus.sys [22912 2013-12-09] (AMD)
R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [128200 2013-04-03] (Qualcomm Atheros Co., Ltd.)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 02:02 - 2014-01-16 02:02 - 00000000 ____D C:\FRST
2014-01-16 00:22 - 2014-01-16 01:24 - 00000000 ____D C:\Users\User\AppData\Local\Wide Angle Software
2014-01-16 00:22 - 2014-01-16 00:22 - 00000000 ____D C:\Users\User\AppData\Local\{2A82324E-1E3C-4E88-A68A-8BA11B0417FE}
2014-01-16 00:17 - 2014-01-16 00:17 - 00000000 ____D C:\Users\User\AppData\Local\Wondershare
2014-01-16 00:05 - 2014-01-16 00:05 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-01-16 00:01 - 2014-01-16 00:01 - 00000000 ____D C:\Users\User\AppData\Local\Macroplant,_LLC
2014-01-14 18:26 - 2014-01-14 18:26 - 00000000 ____D C:\ProgramData\Energy Management
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____D C:\Users\User\AppData\Roaming\.wtw
2014-01-13 01:38 - 2014-01-13 01:38 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-12 14:14 - 2014-01-12 14:14 - 00391064 _____ C:\Users\User\Downloads\billiards_install_1_0_2_7.exe
2014-01-10 18:26 - 2014-01-10 18:26 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotydl
2014-01-10 18:26 - 2014-01-10 18:26 - 00000000 ____D C:\Program Files (x86)\Spotydl
2014-01-10 14:56 - 2014-01-10 15:18 - 00000000 ____D C:\Users\User\AppData\Roaming\TeamViewer
2014-01-09 13:30 - 2014-01-16 01:48 - 00000000 ___RD C:\Users\User\Desktop\v
2014-01-07 01:05 - 2014-01-16 01:30 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2014-01-07 01:05 - 2014-01-13 23:45 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2014-01-07 01:05 - 2014-01-07 01:05 - 00001762 _____ C:\Users\User\Desktop\Spotify.lnk
2014-01-07 01:05 - 2014-01-07 01:05 - 00001748 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-03 00:07 - 2014-01-03 00:07 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2014-01-02 18:48 - 2014-01-16 02:00 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-02 18:48 - 2014-01-16 01:14 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-02 18:48 - 2014-01-02 18:55 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-02 18:48 - 2014-01-02 18:55 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-20 01:29 - 2013-12-20 01:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 23:00 - 2013-12-19 23:00 - 00000000 ____D C:\Program Files (x86)\Tor Browser
2013-12-18 00:51 - 2013-12-18 03:21 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-12-18 00:50 - 2013-12-18 00:50 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-12-17 15:16 - 2013-12-17 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-17 11:24 - 2013-12-17 11:24 - 467517527 _____ C:\Windows\MEMORY.DMP
2013-12-17 11:24 - 2013-12-17 11:24 - 00000000 ____D C:\Windows\Minidump

==================== One Month Modified Files and Folders =======

2014-01-16 02:02 - 2014-01-16 02:02 - 00000000 ____D C:\FRST
2014-01-16 02:00 - 2014-01-02 18:48 - 00001044 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-16 01:56 - 2013-12-06 15:21 - 00000000 ____D C:\Users\User\AppData\Local\Google
2014-01-16 01:54 - 2013-12-06 15:24 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-16 01:48 - 2014-01-09 13:30 - 00000000 ___RD C:\Users\User\Desktop\v
2014-01-16 01:30 - 2014-01-07 01:05 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2014-01-16 01:24 - 2014-01-16 00:22 - 00000000 ____D C:\Users\User\AppData\Local\Wide Angle Software
2014-01-16 01:24 - 2009-07-14 05:51 - 00030504 _____ C:\Windows\setupact.log
2014-01-16 01:22 - 2009-07-14 05:45 - 00028320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-16 01:22 - 2009-07-14 05:45 - 00028320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-16 01:17 - 2013-12-06 21:08 - 00340204 _____ C:\Windows\WindowsUpdate.log
2014-01-16 01:14 - 2014-01-02 18:48 - 00001040 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-16 01:14 - 2013-12-07 16:02 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
2014-01-16 01:14 - 2013-12-06 15:49 - 01472794 _____ C:\Users\Public\CAFADEBUG.log
2014-01-16 01:14 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-16 00:22 - 2014-01-16 00:22 - 00000000 ____D C:\Users\User\AppData\Local\{2A82324E-1E3C-4E88-A68A-8BA11B0417FE}
2014-01-16 00:17 - 2014-01-16 00:17 - 00000000 ____D C:\Users\User\AppData\Local\Wondershare
2014-01-16 00:05 - 2014-01-16 00:05 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-01-16 00:01 - 2014-01-16 00:01 - 00000000 ____D C:\Users\User\AppData\Local\Macroplant,_LLC
2014-01-15 23:20 - 2013-12-07 14:02 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2014-01-15 12:02 - 2013-12-07 13:53 - 00000000 ____D C:\Users\User\AppData\Local\PMB Files
2014-01-15 12:02 - 2013-12-07 13:53 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-14 18:26 - 2014-01-14 18:26 - 00000000 ____D C:\ProgramData\Energy Management
2014-01-13 23:45 - 2014-01-07 01:05 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2014-01-13 22:53 - 2014-01-13 22:53 - 00000000 ____D C:\Users\User\AppData\Roaming\.wtw
2014-01-13 10:53 - 2011-04-12 14:21 - 00737480 _____ C:\Windows\system32\perfh015.dat
2014-01-13 10:53 - 2011-04-12 14:21 - 00154136 _____ C:\Windows\system32\perfc015.dat
2014-01-13 10:53 - 2009-07-14 06:13 - 01661232 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-13 01:38 - 2014-01-13 01:38 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2014-01-12 14:14 - 2014-01-12 14:14 - 00391064 _____ C:\Users\User\Downloads\billiards_install_1_0_2_7.exe
2014-01-10 18:26 - 2014-01-10 18:26 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotydl
2014-01-10 18:26 - 2014-01-10 18:26 - 00000000 ____D C:\Program Files (x86)\Spotydl
2014-01-10 15:18 - 2014-01-10 14:56 - 00000000 ____D C:\Users\User\AppData\Roaming\TeamViewer
2014-01-08 11:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-07 01:05 - 2014-01-07 01:05 - 00001762 _____ C:\Users\User\Desktop\Spotify.lnk
2014-01-07 01:05 - 2014-01-07 01:05 - 00001748 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr
2014-01-03 22:44 - 2013-12-07 15:17 - 00000000 ____D C:\Users\User\AppData\Roaming\NapiProjekt
2014-01-03 00:32 - 2010-11-21 04:47 - 00014792 _____ C:\Windows\PFRO.log
2014-01-03 00:07 - 2014-01-03 00:07 - 00000000 ____D C:\Users\User\AppData\Roaming\Media Player Classic
2014-01-02 18:55 - 2014-01-02 18:48 - 00004040 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-02 18:55 - 2014-01-02 18:48 - 00003788 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-02 18:48 - 2013-12-06 15:21 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-29 14:05 - 2013-12-12 02:18 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-12-29 13:32 - 2013-12-07 15:27 - 00000000 ____D C:\Users\User\AppData\Roaming\Apple Computer
2013-12-20 12:21 - 2013-12-07 13:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 01:29 - 2013-12-20 01:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 23:00 - 2013-12-19 23:00 - 00000000 ____D C:\Program Files (x86)\Tor Browser
2013-12-19 01:24 - 2013-12-11 17:11 - 00000000 ____D C:\ProgramData\WarThunder
2013-12-18 03:21 - 2013-12-18 00:51 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-12-18 00:50 - 2013-12-18 00:50 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-12-17 18:10 - 2013-12-10 01:40 - 00000000 ____D C:\Users\User\Documents\My Games
2013-12-17 15:16 - 2013-12-17 15:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-12-17 11:24 - 2013-12-17 11:24 - 467517527 _____ C:\Windows\MEMORY.DMP
2013-12-17 11:24 - 2013-12-17 11:24 - 00000000 ____D C:\Windows\Minidump

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\FreemakeVideoDownloader_3.6.2.1.exe
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-11 14:34

==================== End Of Log ============================