Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by H&M (administrator) on HMLAPTOP on 06-04-2014 23:04:28
Running from C:\Users\H&M\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\windows\system32\nvvsvc.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(SEC) C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(SAMSUNG Electronics) C:\Program Files (x86)\Samsung\Easy Support Center\SSCKbdHk.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(OldTimer Tools) C:\Users\H&M\Downloads\OTL.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2011-07-12] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10357008 2011-10-18] (Intel Corporation)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2721576 2011-06-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-392818877-1939927122-1532879338-1001\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-392818877-1939927122-1532879338-1001\...\MountPoints2: {d3c816ea-1966-11e2-b8a5-e8039a9acd4d} - F:\LGAutoRun.exe
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [226920 2011-06-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default
FF DefaultSearchEngine: AVG Secure Search
FF Homepage: https://www.google.pl
FF Keyword.URL: hxxp://feed.snap.do/?publisher=SnapdoEMon&dpid=SnapdoEMon&co=PL&userid=17a36977-8d82-4637-be4c-cb033d1edf3a&searchtype=ds&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\H&M\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\searchplugins\Web Search.xml
FF Extension: BPH Sign Plugin - C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\Extensions\SignPlugin@bph.pl [2012-10-21]
FF Extension: EPUBReader - C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2014-02-17]
FF Extension: ALLYouTubeDownloader - C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\Extensions\YouTubetoALL@ALLPlayer.org.xpi [2013-05-04]
FF Extension: Adblock Plus - C:\Users\H&M\AppData\Roaming\Mozilla\Firefox\Profiles\em46m5pi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-05]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012-10-06]

==================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
S2 Winmgmt; C:\Users\H&M\AppData\Local\Temp\Low\lg31zw.faa [X]

==================== Drivers (Whitelisted) ====================

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
S3 FsUsbExDisk; C:\windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-03-26] (Windows (R) 2003 DDK 3790 provider)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
S3 s1029bus; C:\Windows\System32\DRIVERS\s1029bus.sys [116264 2009-05-25] (MCCI Corporation)
S3 s1029mdfl; C:\Windows\System32\DRIVERS\s1029mdfl.sys [19496 2009-05-25] (MCCI Corporation)
S3 s1029mdm; C:\Windows\System32\DRIVERS\s1029mdm.sys [158760 2009-05-25] (MCCI Corporation)
S3 s1029mgmt; C:\Windows\System32\DRIVERS\s1029mgmt.sys [139304 2009-05-25] (MCCI Corporation)
S3 s1029nd5; C:\Windows\System32\DRIVERS\s1029nd5.sys [34856 2009-05-25] (MCCI Corporation)
S3 s1029obex; C:\Windows\System32\DRIVERS\s1029obex.sys [135208 2009-05-25] (MCCI Corporation)
S3 s1029unic; C:\Windows\System32\DRIVERS\s1029unic.sys [151592 2009-05-25] (MCCI Corporation)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)

========================== Drivers MD5 =======================

C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 79059559E89D06E8B80CE2944BE20228
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Windows\System32\DRIVERS\AMPPAL.sys 3BC90482A834F998C3B7A9C934A20342
C:\Windows\System32\DRIVERS\amppal.sys 3BC90482A834F998C3B7A9C934A20342
C:\Windows\System32\Drivers\lgandnetadb.sys 8769A70C4E7648D1885BECF0119AEA1C
C:\Windows\System32\DRIVERS\lgandnetdiag64.sys B46840E5BDAEE0C749A3E5778F65EBE4
C:\Windows\System32\DRIVERS\lgandnetmodem64.sys 130701C53E4DF44B54FED8C3892150F5
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\btfilter.sys 9D95F74875491CECBF9E10A5936A570E
C:\Windows\system32\drivers\BthEnum.sys CF98190A94F62E405C8CB255018B2315
C:\Windows\System32\DRIVERS\bthmodem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bthpan.sys 02DD601B708DD0667E1331FA8518E9FF
C:\Windows\System32\Drivers\BTHport.sys 738D0E9272F59EB7A1449C3EC118E6C4
C:\Windows\System32\Drivers\BTHUSB.sys F188B7394D81010767B6DF3178519A37
C:\Windows\System32\drivers\btmaud.sys 274E47BD9C1367BDBFA9DF10C2E6C544
C:\Windows\System32\DRIVERS\btmaux.sys AB0A33001FE7EBB209D9D52CED11BE1A
C:\Windows\System32\DRIVERS\btmhsf.sys 5BA4C6F82A5CA3307C0579D9F7B36E28
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\clwvd.sys E13A438F9E51DD034730678E33B73290
C:\Windows\System32\DRIVERS\CmBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\Drivers\cng.sys EBF28856F69CF094A902F884CF989706
C:\Windows\System32\DRIVERS\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52
C:\Windows\System32\DRIVERS\eamonm.sys FE96AA1A36E76588C80DF1040286DDE1
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ehdrv.sys 807BA90D47F8885C09E1D6AFBB706E18
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\epfw.sys 00A81DC02BA17FB4BFCFA026DC47458F
C:\Windows\System32\DRIVERS\EpfwLWF.sys 3B085449438B2BCFD09CC84A0B90D1DB
C:\Windows\System32\DRIVERS\epfwwfp.sys 91D54747A07F56ADCE1B6CFD3387AF60
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ETD.sys 98B103D1D5C426A10219437E36E03FE8
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\windows\SysWOW64\FsUsbExDisk.SYS DDEE99DC54EFA20BD5A442CD733C4462
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\drivers\ftdibus.sys FA169871D8FADCC6539C4E8726610286
C:\Windows\System32\drivers\ftser2k.sys 24237091348D1EFB5635A1CF9649E311
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ggflt.sys 16C2A6BCDDA8952C2035DEC861492A19
C:\Windows\System32\DRIVERS\ggsemc.sys 6B503DF845EABF3457E49FBBDA26C10E
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\iaStor.sys 53CC5BF8B5A219119953C7ABB19A7705
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\Windows\System32\DRIVERS\iBtFltCoex.sys 806422F30DF9CE8307457485779C77B7
C:\Windows\System32\DRIVERS\igdkmd64.sys 8CB8667F5A3B5515F2585F3254F3AAF7
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\drivers\RTKVHD64.sys 8E05ADB4B809B478B2EC65A1A1633DEB
C:\Windows\System32\DRIVERS\IntcDAud.sys FC727061C0F47C8059E88E05D5C8E381
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 8F489706472F7E9A06BAAA198703FA64
C:\Windows\System32\Drivers\ksecpkg.sys 868A2CAAB12EFC7A021682BCA0EEC54C
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\HECIx64.sys A6518DCC42F7A6E999BB3BEA8FD87567
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\System32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\NETwNs64.sys 9FD1BE1881446D954FF77244AE58FBCB
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nvlddmkm.sys 70E89A21827B2669AF906B703C7C48B5
C:\Windows\System32\DRIVERS\nvpciflt.sys 4B9C0C2BF78289513101EB0D44834701
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\system32\drivers\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\system32\drivers\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rfcomm.sys 3DD798846E2C28102B922C56E71B7932
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rt64win7.sys F4C374B1C46DE294B573BB43723AC3F6
C:\windows\SysWOW64\drivers\rtport.sys 4CA0DBA9E224473D664C25E411F5A3BD
C:\Windows\System32\DRIVERS\s0017bus.sys 032F537623A7B2FB81AAA184C30B70C3
C:\Windows\System32\DRIVERS\s0017mdfl.sys 9964A28E569B4FF105B446EF8978FD5C
C:\Windows\System32\DRIVERS\s0017mdm.sys 06347087D274C23DCFA8C4AB5C4314DB
C:\Windows\System32\DRIVERS\s0017mgmt.sys F0F0747B3FA50272DE6B1BF575FA4700
C:\Windows\System32\DRIVERS\s0017nd5.sys 7224412CEA2FF2DF7D4842C1B0E71045
C:\Windows\System32\DRIVERS\s0017obex.sys 3FEADBC7F09B8B596CBFB82F12ABA87F
C:\Windows\System32\DRIVERS\s0017unic.sys 2B63BEA31D939888B2A8F3F14D89B5C1
C:\Windows\System32\DRIVERS\s1018bus.sys 301FBA4594FB5C0A469299A65106B4AA
C:\Windows\System32\DRIVERS\s1018mdfl.sys D1D7C744F79710357E60FC04D125ED01
C:\Windows\System32\DRIVERS\s1018mdm.sys 7DBE12CCCD837D4266B2DDD80A329C09
C:\Windows\System32\DRIVERS\s1018mgmt.sys 065FF5E62D2D18A6D93FD925546CD549
C:\Windows\System32\DRIVERS\s1018nd5.sys 5101D815BDF0D667E3D5F0EA727CAAEE
C:\Windows\System32\DRIVERS\s1018obex.sys 13F220C65B444AC9BDA49DACFC3230BB
C:\Windows\System32\DRIVERS\s1018unic.sys CE7D8BCE80211D8A35F6BD7A87791860
C:\Windows\System32\DRIVERS\s1029bus.sys 68F717BC57B0FE12011EB9517C97F78D
C:\Windows\System32\DRIVERS\s1029mdfl.sys FCFAFA529F4FA27B02FCE1E52A84922E
C:\Windows\System32\DRIVERS\s1029mdm.sys 35BD0866EB422AB2D7C8F0DDCC67BF7C
C:\Windows\System32\DRIVERS\s1029mgmt.sys E0FD4F4F42B76E910CC4295C97AA30BA
C:\Windows\System32\DRIVERS\s1029nd5.sys 90276F1D842EB96F82510E73FDB792AD
C:\Windows\System32\DRIVERS\s1029obex.sys 128ED45223FAB846E8436A2F2BAEBB55
C:\Windows\System32\DRIVERS\s1029unic.sys 400FC5591586A1DFECF7A0CFAA6B0D68
C:\windows\system32\Drivers\SABI.sys 62DB6CC4B0818F1B5F3441241B098F12
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\SGdrv64.sys 2FE1CD3AA602414841DB10AD96C95A5E
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\System32\DRIVERS\ssadbus.sys 52D6F40B50ECFC051979FEC68E74F0F8
C:\Windows\System32\DRIVERS\ssadmdfl.sys D6CFD3B2EABCF9327DE39C62BABFA1E3
C:\Windows\System32\DRIVERS\ssadmdm.sys 5EB01E6148742C3EC2185AC92F6D16FD
C:\Windows\System32\DRIVERS\ssadserd.sys FF20F67DD5644BD1D2E7FCD95AF7F03B
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit
C:\Windows\system32\drivers\TsUsbGD.sys 9CC2CCAE8A84820EAECB886D477CBCB8
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\system32\drivers\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\system32\drivers\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\system32\drivers\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys DF8126BD41180351A093A3AD2FC8903B
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwifibus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vwififlt.sys 13A0DECD1794DE60A8427862C8669D27
C:\Windows\System32\DRIVERS\vwifimp.sys 49003B357D101CDC474937437ECF5ABC
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\WinUsb.sys FE88B288356E7B47B74B13372ADD906D
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-06 23:04 - 2014-04-06 23:04 - 00033241 _____ () C:\Users\H&M\Downloads\FRST.txt
2014-04-06 23:04 - 2014-04-06 23:04 - 00000000 ____D () C:\FRST
2014-04-06 23:00 - 2014-04-06 23:01 - 02157056 _____ (Farbar) C:\Users\H&M\Downloads\FRST64.exe
2014-04-06 22:55 - 2014-04-06 22:55 - 00127744 _____ () C:\Users\H&M\Downloads\Extras.Txt
2014-04-06 22:54 - 2014-04-06 22:54 - 00086656 _____ () C:\Users\H&M\Downloads\OTL.Txt
2014-04-06 22:13 - 2014-04-06 22:14 - 00602112 _____ (OldTimer Tools) C:\Users\H&M\Downloads\OTL.exe
2014-04-06 21:05 - 2014-04-06 21:06 - 01059840 _____ () C:\Users\H&M\Downloads\MicrosoftFixit50981(1).msi
2014-04-06 21:04 - 2014-04-06 21:04 - 00353101 _____ () C:\Users\H&M\Downloads\MicrosoftFixit20084.mini.diagcab
2014-04-06 21:03 - 2014-04-06 21:04 - 01059840 _____ () C:\Users\H&M\Downloads\MicrosoftFixit50981.msi
2014-04-04 23:42 - 2014-04-04 23:42 - 03014144 _____ () C:\Users\H&M\Downloads\Wywiad_z_Bogiem.pps
2014-04-04 23:41 - 2014-04-04 23:41 - 04895744 _____ () C:\Users\H&M\Downloads\KAWUSIA.pps
2014-04-04 23:41 - 2014-04-04 23:41 - 04444672 _____ () C:\Users\H&M\Downloads\KAWA_LUWAK.pps
2014-03-30 14:59 - 2014-03-30 14:59 - 10874880 _____ () C:\Users\H&M\Downloads\02_10_Naród niepokonany_A_K.pps
2014-03-30 14:36 - 2014-04-06 21:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-30 13:37 - 2014-03-30 13:37 - 00053448 _____ () C:\Users\H&M\Downloads\all.htm
2014-03-16 01:23 - 2014-03-16 01:23 - 00018432 _____ () C:\Users\H&M\Downloads\lib.dll
2014-03-16 01:23 - 2014-03-16 01:23 - 00000000 ____D () C:\Users\H&M\Downloads\Pobrane
2014-03-16 01:22 - 2014-03-16 01:22 - 02345472 _____ () C:\Users\H&M\Downloads\Filefinder.exe
2014-03-13 00:06 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-13 00:06 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-13 00:06 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 00:06 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-13 00:06 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-13 00:06 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-13 00:06 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-13 00:06 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-03-13 00:06 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-13 00:06 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-03-13 00:06 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-03-13 00:06 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-03-13 00:06 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-03-13 00:06 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-03-13 00:06 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-03-13 00:06 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-13 00:06 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-03-13 00:06 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-03-13 00:06 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-03-13 00:06 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-13 00:06 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-03-13 00:06 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-03-13 00:06 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-03-13 00:06 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-03-13 00:06 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-13 00:06 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-03-13 00:06 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-03-13 00:06 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-03-13 00:05 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-13 00:05 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-13 00:05 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-13 00:05 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-13 00:05 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-13 00:05 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-13 00:05 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-13 00:05 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-13 00:05 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-13 00:05 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-03-13 00:05 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-13 00:05 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-12 23:38 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-12 23:38 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-03-12 23:38 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-12 23:38 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2014-03-12 23:38 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-12 23:37 - 2014-03-12 23:37 - 00000000 ____D () C:\ProgramData\ESET
2014-03-12 23:37 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-12 23:37 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-12 23:37 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Users\H&M\Documents\Anvsoft
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\AnvsoftPdfTools
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Program Files (x86)\AnvSoft

==================== One Month Modified Files and Folders =======

2014-04-06 23:04 - 2014-04-06 23:04 - 00033241 _____ () C:\Users\H&M\Downloads\FRST.txt
2014-04-06 23:04 - 2014-04-06 23:04 - 00000000 ____D () C:\FRST
2014-04-06 23:01 - 2014-04-06 23:00 - 02157056 _____ (Farbar) C:\Users\H&M\Downloads\FRST64.exe
2014-04-06 22:55 - 2014-04-06 22:55 - 00127744 _____ () C:\Users\H&M\Downloads\Extras.Txt
2014-04-06 22:54 - 2014-04-06 22:54 - 00086656 _____ () C:\Users\H&M\Downloads\OTL.Txt
2014-04-06 22:37 - 2009-07-14 06:45 - 00021200 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-06 22:37 - 2009-07-14 06:45 - 00021200 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-06 22:18 - 2012-01-10 06:35 - 01408405 _____ () C:\windows\WindowsUpdate.log
2014-04-06 22:14 - 2014-04-06 22:13 - 00602112 _____ (OldTimer Tools) C:\Users\H&M\Downloads\OTL.exe
2014-04-06 22:11 - 2012-08-06 18:25 - 00000000 ____D () C:\Users\H&M\AppData\Local\CrashDumps
2014-04-06 21:41 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-04-06 21:41 - 2009-07-14 06:51 - 00113605 _____ () C:\windows\setupact.log
2014-04-06 21:40 - 2014-03-30 14:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-06 21:40 - 2014-02-28 20:57 - 00000000 ____D () C:\Users\H&M\AppData\Local\Unity
2014-04-06 21:40 - 2014-02-19 17:58 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\Angry Birds Breakfast 2
2014-04-06 21:40 - 2014-02-19 17:57 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Angry Birds Breakfast 2
2014-04-06 21:40 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Angry Birds Breakfast 1
2014-04-06 21:40 - 2014-02-19 17:50 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\Angry Birds Breakfast 1
2014-04-06 21:40 - 2014-01-14 22:52 - 00000000 ___SD () C:\Users\H&M\GG dysk
2014-04-06 21:40 - 2014-01-14 22:51 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\GG
2014-04-06 21:40 - 2013-10-08 15:19 - 00000000 ____D () C:\Users\H&M
2014-04-06 21:40 - 2013-03-24 14:31 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\ipla
2014-04-06 21:40 - 2013-03-24 14:30 - 00000000 ____D () C:\Program Files (x86)\ipla
2014-04-06 21:40 - 2013-03-17 02:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-04-06 21:40 - 2013-03-17 02:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-04-06 21:40 - 2013-02-09 23:46 - 00000000 ___RD () C:\Users\H&M\Desktop\w995
2014-04-06 21:40 - 2012-12-31 11:00 - 00000000 ____D () C:\Users\H&M\Desktop\MyPhoneExplorer portable
2014-04-06 21:40 - 2012-10-18 23:35 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\LG Electronics
2014-04-06 21:40 - 2012-09-25 21:57 - 00000000 ____D () C:\Users\H&M\AppData\Local\ChomikBox
2014-04-06 21:40 - 2012-08-11 13:25 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\vlc
2014-04-06 21:40 - 2012-08-11 10:56 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\AIMP
2014-04-06 21:40 - 2012-08-07 18:46 - 00000000 ___RD () C:\Users\H&M\Desktop\Pulpit skróty
2014-04-06 21:40 - 2012-08-04 23:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 21:40 - 2012-01-10 05:58 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-04-06 21:40 - 2012-01-09 13:58 - 00000000 ____D () C:\ProgramData\WinClon
2014-04-06 21:40 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\AppCompat
2014-04-06 21:39 - 2012-08-04 23:26 - 00000000 ____D () C:\windows\system32\Macromed
2014-04-06 21:39 - 2012-01-09 13:51 - 00000000 ____D () C:\windows\SysWOW64\Macromed
2014-04-06 21:39 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-04-06 21:39 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\registration
2014-04-06 21:39 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\L2Schemas
2014-04-06 21:06 - 2014-04-06 21:05 - 01059840 _____ () C:\Users\H&M\Downloads\MicrosoftFixit50981(1).msi
2014-04-06 21:04 - 2014-04-06 21:04 - 00353101 _____ () C:\Users\H&M\Downloads\MicrosoftFixit20084.mini.diagcab
2014-04-06 21:04 - 2014-04-06 21:03 - 01059840 _____ () C:\Users\H&M\Downloads\MicrosoftFixit50981.msi
2014-04-04 23:42 - 2014-04-04 23:42 - 03014144 _____ () C:\Users\H&M\Downloads\Wywiad_z_Bogiem.pps
2014-04-04 23:41 - 2014-04-04 23:41 - 04895744 _____ () C:\Users\H&M\Downloads\KAWUSIA.pps
2014-04-04 23:41 - 2014-04-04 23:41 - 04444672 _____ () C:\Users\H&M\Downloads\KAWA_LUWAK.pps
2014-03-31 22:42 - 2012-01-10 06:18 - 00740688 _____ () C:\windows\system32\perfh015.dat
2014-03-31 22:42 - 2012-01-10 06:18 - 00156230 _____ () C:\windows\system32\perfc015.dat
2014-03-31 22:42 - 2009-07-14 07:13 - 01670590 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-30 18:34 - 2013-03-24 14:31 - 00000000 ____D () C:\ProgramData\ipla
2014-03-30 14:59 - 2014-03-30 14:59 - 10874880 _____ () C:\Users\H&M\Downloads\02_10_Naród niepokonany_A_K.pps
2014-03-30 13:37 - 2014-03-30 13:37 - 00053448 _____ () C:\Users\H&M\Downloads\all.htm
2014-03-24 23:55 - 2014-02-01 23:06 - 00000000 ____D () C:\Users\H&M\Desktop\Książki
2014-03-18 22:35 - 2013-08-08 23:03 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 22:32 - 2012-08-07 17:14 - 90015360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-16 02:10 - 2013-09-07 23:36 - 00000000 ____D () C:\Users\H&M\Desktop\Nowy folder
2014-03-16 02:09 - 2013-03-17 12:55 - 00000000 ____D () C:\Users\H&M\Desktop\muza 2k13
2014-03-16 02:00 - 2013-08-17 23:06 - 00000000 ____D () C:\Program Files\Recuva
2014-03-16 01:23 - 2014-03-16 01:23 - 00018432 _____ () C:\Users\H&M\Downloads\lib.dll
2014-03-16 01:23 - 2014-03-16 01:23 - 00000000 ____D () C:\Users\H&M\Downloads\Pobrane
2014-03-16 01:22 - 2014-03-16 01:22 - 02345472 _____ () C:\Users\H&M\Downloads\Filefinder.exe
2014-03-13 22:22 - 2009-07-14 06:45 - 00287672 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-12 23:37 - 2014-03-12 23:37 - 00000000 ____D () C:\ProgramData\ESET
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Users\H&M\Documents\Anvsoft
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Users\H&M\AppData\Roaming\AnvsoftPdfTools
2014-03-09 12:21 - 2014-03-09 12:21 - 00000000 ____D () C:\Program Files (x86)\AnvSoft

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== BCD ================================

Menedľer rozruchu systemu Windows
---------------------------------
Identyfikator              {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  pl-PL
inherit                 {globalsettings}
default                 {current}
resumeobject            {47da298e-3b3f-11e1-ade7-e8113268739f}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Moduˆ ˆadujĄcy rozruchu systemu Windows
---------------------------------------
Identyfikator              {current}
device                  partition=C:
path                    \windows\system32\winload.exe
description             Windows 7
locale                  pl-PL
inherit                 {bootloadersettings}
recoverysequence        {47da2990-3b3f-11e1-ade7-e8113268739f}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \windows
resumeobject            {47da298e-3b3f-11e1-ade7-e8113268739f}
nx                      OptIn
numproc                 2
usefirmwarepcisettings  No

Moduˆ ˆadujĄcy rozruchu systemu Windows
---------------------------------------
Identyfikator              {47da2990-3b3f-11e1-ade7-e8113268739f}
device                  ramdisk=[C:]\Recovery\47da2990-3b3f-11e1-ade7-e8113268739f\Winre.wim,{47da2991-3b3f-11e1-ade7-e8113268739f}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
inherit                 {bootloadersettings}
osdevice                ramdisk=[C:]\Recovery\47da2990-3b3f-11e1-ade7-e8113268739f\Winre.wim,{47da2991-3b3f-11e1-ade7-e8113268739f}
systemroot              \windows
nx                      OptIn
winpe                   Yes

Wznawianie ze stanu hibernacji
------------------------------
Identyfikator              {47da298e-3b3f-11e1-ade7-e8113268739f}
device                  partition=C:
path                    \windows\system32\winresume.exe
description             Windows Resume Application
locale                  pl-PL
inherit                 {resumeloadersettings}
filedevice              partition=C:
filepath                \hiberfil.sys
debugoptionenabled      No

Moduˆ testujĄcy pami©† systemu Windows
--------------------------------------
Identyfikator              {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Windows Memory Diagnostic
locale                  pl-PL
inherit                 {globalsettings}
badmemoryaccess         Yes

Ustawienia usˆug EMS
--------------------
Identyfikator              {emssettings}
bootems                 Yes

Ustawienia debugera
-------------------
Identyfikator              {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

Uszkodzenia pami©ci RAM
-----------------------
Identyfikator              {badmemory}

Ustawienia globalne
-------------------
Identyfikator              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Ustawienia moduˆu ˆadujĄcego rozruchu
-------------------------------------
Identyfikator              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Ustawienia funkcji hypervisor
-----------------------------
Identyfikator              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Ustawienia moduˆu ˆadujĄcego wznawiania
---------------------------------------
Identyfikator              {resumeloadersettings}
inherit                 {globalsettings}

Opcje urzĄdzenia
----------------
Identyfikator              {47da2991-3b3f-11e1-ade7-e8113268739f}
description             Ramdisk Options
ramdisksdidevice        partition=C:
ramdisksdipath          \Recovery\47da2990-3b3f-11e1-ade7-e8113268739f\boot.sdi



LastRegBack: 2014-03-22 23:54

==================== End Of Log ============================