Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014  01
Ran by Marek (administrator) on MAREK-KOMPUTER on 22-03-2014 18:35:25
Running from C:\Users\Marek\Desktop
Microsoft Windows 7 Ultimate  (X86) OS Language: Polish
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
() C:\Program Files\Dokan\DokanLibrary\mounter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
() C:\Windows\system32\PnkBstrA.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Popajar, inc) C:\Users\Marek\AppData\Local\Popajar\UpdateChecker\UpdateCheckerApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Mozilla Corporation) F:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) F:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] - C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1474560 2013-08-24] (VIA)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap.dll [955168 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [mobilegeni daemon] - C:\Program Files\Mobogenie\DaemonProcess.exe
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\Run: [AVG-Secure-Search-Update_0913b] - C:\Users\Marek\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid 1cf771b002d047d3a155d16b535cfbc7-549a784466ea4d78086592d796851753f26a700c --CMPID 0913b
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\Run: [Jitsi] - F:\Jitsi\Jitsi.exe
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\Run: [UpdateChecker] - C:\Users\Marek\AppData\Local\Popajar\UpdateChecker\UpdateCheckerApp.exe [7168 2014-01-16] (Popajar, inc)
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20924064 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\MountPoints2: {64a444a6-0e31-11e3-9af2-002215b81234} - J:\setup.exe
HKU\S-1-5-21-3270748086-1755119761-42887645-1001\...\MountPoints2: {ec002d2f-3d7c-11e3-9e17-002215b81234} - K:\Startme.exe

==================== Internet (Whitelisted) ====================

BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Mega Browse - {4e6cd411-ce62-4584-97ff-6afbcf6900af} - C:\Program Files\Mega Browse\MegaBrowsebho.dll (Mega Browse)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default
FF user.js: detected! => C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\user.js
FF Homepage: https://www.google.pl/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @nullsoft.com/winampDetector;version=1 - F:\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: Adobe Reader - D:\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Marek\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Marek\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marek\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marek\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Marek\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Marek\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\searchplugins\nation-secure-search.xml
FF Extension: Iplex to ALLPlayer - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\Extensions\IplextoALL@ALLPlayer.org.xpi [2013-09-10]
FF Extension: SmileysWeLove: Smileys for use with Facebook, GMail, and more - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\Extensions\jid1-vW9nopuIAJiRHw@jetpack.xpi [2014-02-18]
FF Extension: Premium Codec - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\Extensions\Premium_Codec@CrossBrowser.xpi [2014-03-18]
FF Extension: Twojanuta.pl - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\Extensions\zacz3k@gmail.com.xpi [2013-09-24]
FF Extension: Mega Browse - C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\s5uhybv2.default\Extensions\{29b136c9-938d-4d3d-8df8-d649d9b74d02}.xpi [2014-03-21]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-09-04]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-09-04]
FF StartMenuInternet: FIREFOX.EXE - F:\Program Files\Mozilla Firefox\firefox.exe

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 DokanMounter; C:\Program Files\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()
R2 HPSLPSVC; C:\Users\Marek\AppData\Local\Temp\7zS0A86\hpslpsvc32.dll [701288 2013-07-19] (Hewlett-Packard Co.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-10-27] ()
S2 Update Mega Browse; C:\Program Files\Mega Browse\updateMegaBrowse.exe [348448 2014-03-21] ()

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11296 2009-08-04] ()
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [95744 2011-01-10] (Windows (R) Win 7 DDK provider)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [33568 2013-11-14] (NVIDIA Corporation)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1067008 2013-08-24] (VIA Technologies, Inc.)
S3 MSICDSetup; \??\I:\CDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-22 18:35 - 2014-03-22 18:35 - 00010623 _____ () C:\Users\Marek\Desktop\FRST.txt
2014-03-22 18:34 - 2014-03-22 18:35 - 00000000 ____D () C:\FRST
2014-03-22 18:33 - 2014-03-22 18:33 - 01145856 _____ (Farbar) C:\Users\Marek\Desktop\FRST.exe
2014-03-22 18:31 - 2014-03-21 18:30 - 00602112 _____ (OldTimer Tools) C:\Users\Marek\Desktop\OTL.exe
2014-03-22 18:04 - 2014-03-22 18:04 - 00000594 _____ () C:\Windows\PFRO.log
2014-03-22 15:56 - 2014-03-22 15:57 - 05190052 _____ (Swearware) C:\Users\Marek\Downloads\ComboFix.exe
2014-03-22 15:17 - 2014-03-22 15:17 - 00000597 _____ () C:\Users\Marek\Desktop\Odkurzacz.lnk
2014-03-22 15:15 - 2014-03-22 18:04 - 00000000 ____D () C:\Program Files\Mega Browse
2014-03-21 18:48 - 2014-03-22 18:06 - 00003416 _____ () C:\Windows\setupact.log
2014-03-21 18:48 - 2014-03-21 18:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-20 19:32 - 2011-05-24 11:35 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-03-20 19:32 - 2009-10-31 06:45 - 02614272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-03-20 19:32 - 2009-10-28 07:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-03-20 19:31 - 2010-08-26 05:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2014-03-20 19:28 - 2011-04-27 03:33 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-03-20 19:21 - 2010-08-31 05:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2014-03-20 19:21 - 2010-08-31 05:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2014-03-20 19:19 - 2013-01-04 05:55 - 01287528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-03-20 19:19 - 2013-01-04 05:55 - 00187240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-03-20 19:19 - 2010-09-01 05:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-03-20 19:18 - 2011-11-19 15:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-03-20 19:18 - 2010-09-01 05:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-03-20 19:01 - 2012-09-25 22:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-03-20 19:01 - 2012-03-17 08:20 - 00056688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-03-20 18:59 - 2012-05-14 05:37 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-03-20 18:59 - 2010-10-16 05:41 - 00101760 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-03-20 18:53 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-03-20 18:07 - 2014-03-20 18:07 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\Malwarebytes
2014-03-20 18:06 - 2014-03-20 18:06 - 00000628 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-20 18:06 - 2014-03-20 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-20 18:06 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-20 18:05 - 2013-01-04 05:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-03-20 18:05 - 2013-01-04 05:46 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-03-20 18:05 - 2013-01-04 05:46 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 03:59 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-03-20 18:05 - 2013-01-04 03:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 03:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 03:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-03-20 18:05 - 2013-01-04 03:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-03-19 19:16 - 2012-02-15 06:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-03-19 19:16 - 2012-02-15 05:22 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-03-19 19:16 - 2012-02-15 05:22 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-03-19 19:16 - 2010-01-09 07:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2014-03-19 19:01 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-03-19 19:01 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-03-19 19:01 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-03-19 19:01 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-03-19 19:01 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-03-19 19:01 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-03-19 19:01 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-03-19 19:00 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-03-19 19:00 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-03-19 18:45 - 2014-03-19 19:06 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-03-19 18:44 - 2010-04-09 08:24 - 00240008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-03-14 19:23 - 2014-03-14 19:23 - 00000000 ____D () C:\Users\Marek\Documents\My Cheat Tables
2014-03-13 21:00 - 2014-03-13 21:00 - 00000912 _____ () C:\ProgramData\HirezPipeError.txt
2014-03-12 19:06 - 2014-03-12 19:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 19:05 - 2014-03-12 19:06 - 00005753 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-03-09 17:30 - 2014-03-09 17:30 - 00000865 _____ () C:\Users\Marek\Desktop\Play South Park The Stick of Truth.lnk
2014-03-09 11:56 - 2014-03-09 11:56 - 01005056 _____ () C:\Users\Marek\Documents\Korona superwrzecionowa..ppt
2014-03-09 11:27 - 2014-03-09 11:53 - 01004032 _____ () C:\Users\Marek\Documents\Korony drzew sadowniczych..ppt
2014-03-07 16:26 - 2014-03-07 16:26 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ___RD () C:\Program Files\Skype
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ____D () C:\Users\Marek\AppData\Local\Skype
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ____D () C:\Program Files\Common Files\Skype

==================== One Month Modified Files and Folders =======

2014-03-22 18:35 - 2014-03-22 18:35 - 00010623 _____ () C:\Users\Marek\Desktop\FRST.txt
2014-03-22 18:35 - 2014-03-22 18:34 - 00000000 ____D () C:\FRST
2014-03-22 18:35 - 2013-08-24 15:06 - 01054585 _____ () C:\Windows\WindowsUpdate.log
2014-03-22 18:33 - 2014-03-22 18:33 - 01145856 _____ (Farbar) C:\Users\Marek\Desktop\FRST.exe
2014-03-22 18:19 - 2013-08-24 16:28 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-22 18:10 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-22 18:10 - 2009-07-14 05:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-22 18:06 - 2014-03-21 18:48 - 00003416 _____ () C:\Windows\setupact.log
2014-03-22 18:06 - 2013-08-24 17:06 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\Skype
2014-03-22 18:04 - 2014-03-22 18:04 - 00000594 _____ () C:\Windows\PFRO.log
2014-03-22 18:04 - 2014-03-22 15:15 - 00000000 ____D () C:\Program Files\Mega Browse
2014-03-22 18:04 - 2013-08-24 15:29 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-22 18:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-22 15:57 - 2014-03-22 15:56 - 05190052 _____ (Swearware) C:\Users\Marek\Downloads\ComboFix.exe
2014-03-22 15:18 - 2013-08-24 17:48 - 00109208 _____ () C:\Users\Marek\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-22 15:17 - 2014-03-22 15:17 - 00000597 _____ () C:\Users\Marek\Desktop\Odkurzacz.lnk
2014-03-22 15:08 - 2009-07-14 05:33 - 00418448 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-21 18:58 - 2013-08-24 17:06 - 00000000 ____D () C:\ProgramData\Skype
2014-03-21 18:56 - 2013-09-09 18:01 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\Media Player Classic
2014-03-21 18:52 - 2013-09-09 17:09 - 00000000 ____D () C:\Users\Marek\AppData\Local\ALLPlayer
2014-03-21 18:48 - 2014-03-21 18:48 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-21 18:43 - 2013-09-11 17:01 - 00000000 ____D () C:\Users\Marek\AppData\Local\Ubisoft Game Launcher
2014-03-21 18:30 - 2014-03-22 18:31 - 00602112 _____ (OldTimer Tools) C:\Users\Marek\Desktop\OTL.exe
2014-03-21 18:08 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-03-20 20:01 - 2013-10-31 12:03 - 00000000 ____D () C:\Users\Marek\Desktop\GRY
2014-03-20 19:29 - 2013-08-24 15:50 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-03-20 19:24 - 2013-08-24 15:26 - 01661232 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-20 19:24 - 2009-07-14 09:07 - 00737242 _____ () C:\Windows\system32\perfh015.dat
2014-03-20 19:24 - 2009-07-14 09:07 - 00153930 _____ () C:\Windows\system32\perfc015.dat
2014-03-20 18:07 - 2014-03-20 18:07 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\Malwarebytes
2014-03-20 18:06 - 2014-03-20 18:06 - 00000628 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-20 18:06 - 2014-03-20 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-19 19:44 - 2013-10-15 15:09 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-19 19:42 - 2013-11-10 11:13 - 00000000 ____D () C:\ProgramData\Hi-Rez Studios
2014-03-19 19:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-03-19 19:06 - 2014-03-19 18:45 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-03-19 18:55 - 2014-02-18 16:33 - 00000000 ____D () C:\Users\Marek\AppData\Local\genienext
2014-03-19 16:58 - 2013-08-24 15:32 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\Mozilla
2014-03-18 19:52 - 2014-02-18 16:59 - 00000000 ____D () C:\Users\Marek\Pobieranie Opera
2014-03-14 19:23 - 2014-03-14 19:23 - 00000000 ____D () C:\Users\Marek\Documents\My Cheat Tables
2014-03-13 21:00 - 2014-03-13 21:00 - 00000912 _____ () C:\ProgramData\HirezPipeError.txt
2014-03-13 19:13 - 2013-12-05 16:08 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2014-03-13 19:08 - 2013-08-24 15:22 - 00000000 ____D () C:\Users\Marek
2014-03-13 18:59 - 2013-08-24 17:04 - 00000000 ____D () C:\Users\Marek\AppData\Local\GG
2014-03-13 18:53 - 2013-08-24 17:04 - 00000000 ____D () C:\Users\Marek\AppData\Roaming\GG
2014-03-12 19:42 - 2013-08-24 16:42 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-12 19:42 - 2013-08-24 16:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-12 19:06 - 2014-03-12 19:06 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-12 19:06 - 2014-03-12 19:05 - 00005753 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-03-09 17:31 - 2013-08-24 17:21 - 00000000 ____D () C:\Users\Marek\Documents\My Games
2014-03-09 17:30 - 2014-03-09 17:30 - 00000865 _____ () C:\Users\Marek\Desktop\Play South Park The Stick of Truth.lnk
2014-03-09 11:56 - 2014-03-09 11:56 - 01005056 _____ () C:\Users\Marek\Documents\Korona superwrzecionowa..ppt
2014-03-09 11:53 - 2014-03-09 11:27 - 01004032 _____ () C:\Users\Marek\Documents\Korony drzew sadowniczych..ppt
2014-03-07 16:26 - 2014-03-07 16:26 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ___RD () C:\Program Files\Skype
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ____D () C:\Users\Marek\AppData\Local\Skype
2014-03-07 16:26 - 2014-03-07 16:26 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-02-25 19:09 - 2013-08-26 16:38 - 00000000 ____D () C:\Users\Marek\AppData\Local\NFS Underground 2

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-17 14:13

==================== End Of Log ============================