Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by Laptop (administrator) on LAPTOP-KOMPUTER on 28-02-2014 12:30:45
Running from C:\Users\Laptop\Downloads
Windows 7 Ultimate (X64) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

() C:\Program Files (x86)\AVG SafeGuard toolbar\AVG-Secure-Search-Update_0214b.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(McAfee, Inc.) C:\_OTL\MovedFiles\02282014_113118\C_Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1513161975-1385528076-1989264257-1000\...\Run: [IPLA!] - C:\Program Files (x86)\ipla\ipla.exe [21324384 2014-01-08] (Redefine Sp z o.o.)
HKU\S-1-5-21-1513161975-1385528076-1989264257-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-1513161975-1385528076-1989264257-1000\...\Run: [Facebook Update] - C:\Users\Laptop\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-01] (Facebook Inc.)
HKU\S-1-5-21-1513161975-1385528076-1989264257-1000\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1824000 2014-02-11] (Valve Corporation)
HKU\S-1-5-21-1513161975-1385528076-1989264257-1000\...\MountPoints2: {541e8c09-ba31-11e2-bab9-00262233f624} - E:\Install.exe
AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll => c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll File Not Found
AppInit_DLLs:  c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/?utm_source=is
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.interia.pl/?utm_source=is
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-bho.dll (installdaddy)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default
FF user.js: detected! => C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @powerchallenge.com/PowerLoader - C:\Users\Laptop\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Laptop\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Laptop\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Extension: 4shared Desktop Plugin - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default\Extensions\4sharedCopyLinks [2013-09-08]
FF Extension: HDvid Codec 3 - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default\Extensions\hdvc3@hdvidcodec.com [2013-10-13]
FF Extension: HDvid Codec 3 - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default\Extensions\hdvc3@hdvidcodec.com.xpi [2013-06-30]
FF Extension: WebCake - C:\Users\Laptop\AppData\Roaming\Mozilla\Firefox\Profiles\z455akn0.default\Extensions\plugins@getwebcake.com.xpi [2013-12-05]

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Extension: (Dokumenty Google) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-28]
CHR Extension: (Dysk Google) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-28]
CHR Extension: (YouTube) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-28]
CHR Extension: (McAfee Security Scan+) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-02-22]
CHR Extension: (Battlefield Heroes) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh [2013-06-17]
CHR Extension: (Adblock for Youtube™) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2013-08-27]
CHR Extension: (Szukaj w Google) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-28]
CHR Extension: (HDvid Codec 3) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnllcmllkjofnojidnaknldfehfhehoo [2013-10-13]
CHR Extension: (AdBlock) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-27]
CHR Extension: (Google Wallet) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\Laptop\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-28]
CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30]

==================== Services (Whitelisted) =================

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-06-17] ()
S3 McComponentHostService; "C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2013-06-09] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-11] (DT Soft Ltd)
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2013-06-09] ()
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [62656 2003-09-06] (Protection Technology)
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
R3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [416768 2009-06-10] (Realtek Semiconductor Corporation                           )
S4 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [68608 2005-08-10] (Protection Technology)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-09-06] (Protection Technology)
S3 XFDriver64; C:\Program Files (x86)\Xfire2\XFDriver64.sys [17160 2013-03-14] (XFire)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-28 12:30 - 2014-02-28 12:31 - 00012692 _____ () C:\Users\Laptop\Downloads\FRST.txt
2014-02-28 12:30 - 2014-02-28 12:30 - 00000000 ____D () C:\FRST
2014-02-28 12:29 - 2014-02-28 12:29 - 02155520 _____ (Farbar) C:\Users\Laptop\Downloads\FRST64.exe
2014-02-28 11:38 - 2014-02-28 11:40 - 00000000 ____D () C:\AdwCleaner
2014-02-28 11:38 - 2014-02-28 11:38 - 01244192 _____ () C:\Users\Laptop\Downloads\AdwCleaner.exe
2014-02-28 11:31 - 2014-02-28 11:31 - 00000000 ____D () C:\_OTL
2014-02-28 11:26 - 2014-02-28 11:35 - 00001424 _____ () C:\Windows\PFRO.log
2014-02-28 11:24 - 2014-02-28 11:24 - 02608895 _____ () C:\Users\Laptop\Downloads\Windows 7 (x86 i x64) - Chew 7 (aktywator) (1).rar
2014-02-28 10:19 - 2014-02-28 11:40 - 00000000 ____D () C:\Users\Laptop\Downloads\otl
2014-02-28 10:16 - 2014-02-28 10:16 - 00066944 _____ () C:\Users\Laptop\Downloads\Extras.Txt
2014-02-28 09:21 - 2014-02-28 09:21 - 02608895 _____ () C:\Users\Laptop\Downloads\Windows 7 (x86 i x64) - Chew 7 (aktywator).rar
2014-02-28 09:07 - 2014-02-28 11:36 - 00000224 _____ () C:\Windows\setupact.log
2014-02-28 09:07 - 2014-02-28 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-27 19:30 - 2014-02-27 19:31 - 00000000 ____D () C:\wojtus
2014-02-27 19:30 - 2014-02-27 19:30 - 00000000 ____D () C:\Users\Laptop\Desktop\Ms. Chodakowska
2014-02-27 19:10 - 2014-02-27 19:10 - 00000026 _____ () C:\Users\Laptop\Desktop\Nowy dokument tekstowy.txt
2014-02-27 17:54 - 2014-02-27 17:54 - 00000000 ____D () C:\Users\Laptop\Documents\Stronghold
2014-02-27 17:43 - 2014-02-27 17:50 - 115024284 ____R () C:\Users\Laptop\Downloads\Stronghold_HD_Update_240413.zip
2014-02-27 17:43 - 2014-02-27 17:43 - 00009137 _____ () C:\Users\Laptop\Downloads\100081.torrent
2014-02-14 16:23 - 2014-02-14 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 15:52 - 2014-02-28 11:36 - 00000374 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0214b_rmv.job
2014-02-06 15:52 - 2014-02-28 11:36 - 00000372 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0214b_rel.job
2014-02-06 15:52 - 2014-02-06 15:52 - 00002668 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0214b_rmv
2014-02-06 15:52 - 2014-02-06 15:52 - 00002666 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0214b_rel
2014-01-31 20:53 - 2014-01-31 20:53 - 00001118 _____ () C:\Users\Laptop\Desktop\Twierdza Krzyżowiec.lnk

==================== One Month Modified Files and Folders =======

2014-02-28 12:31 - 2014-02-28 12:30 - 00012692 _____ () C:\Users\Laptop\Downloads\FRST.txt
2014-02-28 12:30 - 2014-02-28 12:30 - 00000000 ____D () C:\FRST
2014-02-28 12:29 - 2014-02-28 12:29 - 02155520 _____ (Farbar) C:\Users\Laptop\Downloads\FRST64.exe
2014-02-28 12:29 - 2013-05-10 18:38 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\Skype
2014-02-28 12:28 - 2013-10-13 18:28 - 00000296 _____ () C:\Windows\Tasks\Funmoods.job
2014-02-28 12:15 - 2013-05-28 05:43 - 00001048 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 11:59 - 2013-05-10 18:57 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 11:40 - 2014-02-28 11:38 - 00000000 ____D () C:\AdwCleaner
2014-02-28 11:40 - 2014-02-28 10:19 - 00000000 ____D () C:\Users\Laptop\Downloads\otl
2014-02-28 11:39 - 2013-05-10 17:16 - 01415049 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 11:38 - 2014-02-28 11:38 - 01244192 _____ () C:\Users\Laptop\Downloads\AdwCleaner.exe
2014-02-28 11:37 - 2013-07-31 09:09 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-28 11:36 - 2014-02-28 09:07 - 00000224 _____ () C:\Windows\setupact.log
2014-02-28 11:36 - 2014-02-06 15:52 - 00000374 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0214b_rmv.job
2014-02-28 11:36 - 2014-02-06 15:52 - 00000372 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_0214b_rel.job
2014-02-28 11:36 - 2013-10-13 18:25 - 00001214 _____ () C:\Windows\Tasks\HDvid Codec V1-updater.job
2014-02-28 11:36 - 2013-10-13 18:25 - 00001208 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job
2014-02-28 11:36 - 2013-10-13 18:25 - 00001118 _____ () C:\Windows\Tasks\HDvid Codec V1-enabler.job
2014-02-28 11:36 - 2013-05-28 05:43 - 00001044 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 11:36 - 2013-05-10 19:38 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\ipla
2014-02-28 11:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 11:35 - 2014-02-28 11:26 - 00001424 _____ () C:\Windows\PFRO.log
2014-02-28 11:34 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 11:34 - 2009-07-14 05:45 - 00013584 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 11:31 - 2014-02-28 11:31 - 00000000 ____D () C:\_OTL
2014-02-28 11:31 - 2013-05-10 17:24 - 00000000 ___RD () C:\Users\Laptop\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-28 11:29 - 2013-07-06 19:52 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar
2014-02-28 11:24 - 2014-02-28 11:24 - 02608895 _____ () C:\Users\Laptop\Downloads\Windows 7 (x86 i x64) - Chew 7 (aktywator) (1).rar
2014-02-28 10:29 - 2013-06-01 00:24 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1513161975-1385528076-1989264257-1000UA.job
2014-02-28 10:16 - 2014-02-28 10:16 - 00066944 _____ () C:\Users\Laptop\Downloads\Extras.Txt
2014-02-28 10:01 - 2009-07-20 09:15 - 00691676 _____ () C:\Windows\system32\perfh015.dat
2014-02-28 10:01 - 2009-07-20 09:15 - 00131424 _____ () C:\Windows\system32\perfc015.dat
2014-02-28 09:21 - 2014-02-28 09:21 - 02608895 _____ () C:\Users\Laptop\Downloads\Windows 7 (x86 i x64) - Chew 7 (aktywator).rar
2014-02-28 09:07 - 2014-02-28 09:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-27 19:48 - 2013-06-29 20:06 - 00000000 ____D () C:\Instalki do gier
2014-02-27 19:31 - 2014-02-27 19:30 - 00000000 ____D () C:\wojtus
2014-02-27 19:30 - 2014-02-27 19:30 - 00000000 ____D () C:\Users\Laptop\Desktop\Ms. Chodakowska
2014-02-27 19:10 - 2014-02-27 19:10 - 00000026 _____ () C:\Users\Laptop\Desktop\Nowy dokument tekstowy.txt
2014-02-27 19:01 - 2013-05-20 13:48 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\uTorrent
2014-02-27 19:01 - 2013-05-19 18:17 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\TS3Client
2014-02-27 19:01 - 2013-05-11 13:08 - 00000000 ____D () C:\Users\Laptop\AppData\Roaming\DAEMON Tools Lite
2014-02-27 17:54 - 2014-02-27 17:54 - 00000000 ____D () C:\Users\Laptop\Documents\Stronghold
2014-02-27 17:52 - 2013-09-07 18:52 - 00000000 ____D () C:\Program Files (x86)\Firefly Studios
2014-02-27 17:52 - 2013-05-11 13:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 17:50 - 2014-02-27 17:43 - 115024284 ____R () C:\Users\Laptop\Downloads\Stronghold_HD_Update_240413.zip
2014-02-27 17:43 - 2014-02-27 17:43 - 00009137 _____ () C:\Users\Laptop\Downloads\100081.torrent
2014-02-24 21:16 - 2013-08-27 11:28 - 00014024 _____ () C:\Windows\SysWOW64\debug.log
2014-02-22 14:59 - 2013-05-10 18:57 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-22 14:59 - 2013-05-10 18:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-22 14:59 - 2013-05-10 18:57 - 00003868 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 20:20 - 2013-05-28 05:43 - 00002189 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-19 20:10 - 2013-05-28 05:43 - 00004044 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-19 20:10 - 2013-05-28 05:43 - 00003792 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-19 15:05 - 2014-01-05 18:45 - 00001975 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-02-15 18:28 - 2013-05-10 17:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 16:28 - 2013-12-19 11:28 - 00000119 _____ () C:\Users\Laptop\AppData\Roaming\WB.CFG
2014-02-14 16:28 - 2013-10-13 18:28 - 00003252 _____ () C:\Windows\System32\Tasks\Funmoods
2014-02-14 16:23 - 2014-02-14 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-07 22:11 - 2013-05-10 21:50 - 00000000 ____D () C:\Zdjecia
2014-02-06 15:52 - 2014-02-06 15:52 - 00002668 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0214b_rmv
2014-02-06 15:52 - 2014-02-06 15:52 - 00002666 _____ () C:\Windows\System32\Tasks\AVG-Secure-Search-Update_0214b_rel
2014-01-31 20:53 - 2014-01-31 20:53 - 00001118 _____ () C:\Users\Laptop\Desktop\Twierdza Krzyżowiec.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-24 20:33

==================== End Of Log ============================