Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01
Ran by Admin (administrator) on ADMIN-KOMPUTER on 07-09-2014 21:09:01
Running from C:\Users\Admin\Desktop\frst
Platform: Windows 7 Enterprise Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TektonIT) C:\Program Files (x86)\Remote Manipulator System - Host\rutserv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(TektonIT) C:\Program Files (x86)\Remote Manipulator System - Host\rfusclient.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(TektonIT) C:\Program Files (x86)\Remote Manipulator System - Host\rfusclient.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\MKJogo\MKLOL\Bin\MKIM.exe
(Skype Technologies S.A.) D:\skype\Phone\Skype.exe
() C:\Program Files (x86)\screenSHU\screenSHU.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(AdFender, Inc.) C:\Program Files (x86)\AdFender\AdFender.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKU\S-1-5-21-2752573723-1407471058-2751402729-1000\...\Run: [MKLOL] => C:\Program Files (x86)\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-25] ()
HKU\S-1-5-21-2752573723-1407471058-2751402729-1000\...\Run: [Skype] => D:\skype\Phone\Skype.exe [21415008 2014-07-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2752573723-1407471058-2751402729-1000\...\Run: [screenSHU] => C:\Program Files (x86)\screenSHU\screenSHU.exe [2112000 2013-09-04] ()
HKU\S-1-5-21-2752573723-1407471058-2751402729-1000\...\Run: [uTorrent] => C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-27] (BitTorrent Inc.)
AppInit_DLLs-x32:  => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk
ShortcutTarget: AdFender.lnk -> C:\Program Files (x86)\AdFender\AdFender.exe (AdFender, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\fz0go7ug.default-1410116884345
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
S4 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-12-02] (Nero AG)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-12-12] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
S4 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-28] ()
R2 RManService; C:\Program Files (x86)\Remote Manipulator System - Host\rutserv.exe [6057728 2014-01-22] (TektonIT)
S4 SkypeUpdate; D:\skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-04-11] (Duplex Secure Ltd.)
R1 StarPortLite; C:\Windows\System32\DRIVERS\StarPortLite.sys [120704 2013-02-04] (StarWind Software)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-03-31] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 21:08 - 2014-09-07 21:08 - 00000000 ____D () C:\Users\Admin\Desktop\Stare dane programu Firefox
2014-09-07 20:34 - 2014-09-07 21:09 - 00000000 ____D () C:\Users\Admin\Desktop\frst
2014-09-07 20:14 - 2014-09-07 20:14 - 00011876 _____ () C:\Users\Admin\Desktop\gmer.txt
2014-09-07 19:43 - 2014-09-07 19:43 - 00059926 _____ () C:\Users\Admin\Downloads\Extras.Txt
2014-09-07 19:39 - 2014-09-07 19:39 - 00114850 _____ () C:\Users\Admin\Downloads\OTL.Txt
2014-09-07 19:28 - 2014-09-07 19:28 - 00061120 _____ () C:\Users\Admin\Downloads\Shortcut.txt
2014-09-07 19:26 - 2014-09-07 19:28 - 00035434 _____ () C:\Users\Admin\Downloads\Addition.txt
2014-09-07 19:25 - 2014-09-07 19:28 - 00042171 _____ () C:\Users\Admin\Downloads\FRST.txt
2014-09-07 19:24 - 2014-09-07 21:09 - 00000000 ____D () C:\FRST
2014-09-07 18:28 - 2014-09-07 18:29 - 00368705 _____ () C:\Users\Admin\Downloads\gm.zip
2014-09-07 18:28 - 2014-09-07 18:28 - 00602112 _____ (OldTimer Tools) C:\Users\Admin\Downloads\OTL.scr
2014-09-07 18:27 - 2014-09-07 18:28 - 00000000 ____D () C:\Users\Admin\AppData\Local\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\ProgramData\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\Program Files (x86)\AdFender
2014-09-07 18:23 - 2014-09-07 18:24 - 00002992 _____ () C:\Users\Admin\Desktop\Rkill.txt
2014-09-07 18:23 - 2014-09-07 18:23 - 00000000 ____D () C:\Users\Admin\Desktop\rkill
2014-09-07 18:17 - 2014-09-07 18:18 - 02735032 _____ (AdFender, Inc.) C:\Users\Admin\Downloads\Setup.exe
2014-09-07 17:16 - 2014-09-07 17:16 - 02347384 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_plk.exe
2014-09-07 12:39 - 2014-09-07 12:39 - 04834344 _____ () C:\Users\Admin\Desktop\avast_premier_antivirus_setup_online.exe
2014-09-07 12:16 - 2014-09-07 12:16 - 00000000 ____D () C:\TDSSKiller_Quarantine
2014-09-07 11:59 - 2014-09-07 12:03 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Admin\Downloads\tdsskiller.exe
2014-09-06 17:37 - 2014-09-06 17:37 - 00017513 _____ () C:\Windows\DirectX.log
2014-09-06 17:34 - 2014-09-06 17:34 - 00000728 _____ () C:\Users\Public\Desktop\Counter-Strike Global Offensive.lnk
2014-09-06 17:34 - 2014-09-06 17:34 - 00000671 _____ () C:\Users\Public\Desktop\Update Counter-Strike Global Offensive.lnk
2014-09-06 17:34 - 2014-09-06 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strogino CS Portal
2014-09-06 14:41 - 2014-09-06 14:42 - 00013314 _____ () C:\Users\Admin\Desktop\eRanking.sk
2014-09-06 14:20 - 2014-09-06 14:42 - 305122912 _____ () C:\Users\Admin\Downloads\Symulator_Jazdy_2_PL_(www_dodane_pl).rar
2014-09-06 13:34 - 2014-09-06 13:42 - 174866560 _____ (Kaspersky Lab) C:\Users\Admin\Downloads\kis15.0.0.463pl-pl.exe
2014-09-04 21:46 - 2014-09-04 21:48 - 19722284 _____ () C:\Users\Admin\Desktop\Audio 2014-09-04 21-46-46.wav
2014-09-04 15:22 - 2014-09-04 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-04 15:22 - 2014-09-04 15:22 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-03 15:39 - 2014-09-03 15:39 - 00921632 _____ () C:\PA207.DAT
2014-09-02 07:19 - 2014-09-07 20:39 - 00016464 _____ () C:\Windows\PFRO.log
2014-08-31 18:22 - 2014-08-31 18:27 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Audacity
2014-08-31 15:27 - 2014-09-04 21:46 - 00000020 _____ () C:\Windows\capsys184523.log
2014-08-28 19:28 - 2014-09-03 15:29 - 00026258 _____ () C:\Users\Admin\Desktop\warzywa.txt
2014-08-28 12:03 - 2014-08-28 12:04 - 00000000 ____D () C:\Program Files (x86)\AnMing
2014-08-28 12:03 - 2014-08-28 12:03 - 00000928 _____ () C:\Users\Admin\Desktop\MP3 To Ringtone Gold.lnk
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\Temp
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To Ringtone Gold
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\AnMingringtone
2014-08-28 12:03 - 2007-09-14 10:40 - 00336896 _____ () C:\Windows\SysWOW64\ammppg.dll
2014-08-28 12:03 - 2007-03-25 20:46 - 00212992 _____ () C:\Windows\SysWOW64\amrdec.dll
2014-08-28 12:03 - 2006-12-24 07:36 - 00073728 _____ () C:\Windows\SysWOW64\a1.dll
2014-08-28 12:03 - 2006-12-21 15:47 - 00081920 _____ () C:\Windows\SysWOW64\qcpsdk.dll
2014-08-28 12:03 - 2005-10-18 11:14 - 00144896 _____ () C:\Windows\SysWOW64\lame_dshow.ax
2014-08-28 12:03 - 2005-04-15 13:22 - 00303104 _____ () C:\Windows\SysWOW64\qscl.dll
2014-08-28 12:03 - 2002-12-02 11:11 - 00290816 _____ (NCT Company) C:\Windows\SysWOW64\NCTWMAFile.dll
2014-08-28 12:03 - 2002-12-02 11:09 - 00282624 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioVisualization.dll
2014-08-28 12:03 - 2002-12-02 11:08 - 00339968 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioTransform.dll
2014-08-28 12:03 - 2002-12-02 11:07 - 00274432 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioRecord.dll
2014-08-28 12:03 - 2002-12-02 11:07 - 00274432 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioPlayer.dll
2014-08-28 12:03 - 2002-12-02 11:05 - 00892928 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioInformation.dll
2014-08-28 12:03 - 2002-12-02 11:03 - 00327680 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioGrabber.dll
2014-08-28 12:03 - 2002-12-02 11:02 - 01703936 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioFile.dll
2014-08-28 12:03 - 2002-09-06 11:36 - 00233472 _____ () C:\Windows\SysWOW64\lame_enc.dll
2014-08-28 12:03 - 2002-09-04 15:17 - 00503808 _____ (NCT Company) C:\Windows\SysWOW64\NCTAudioEditor.dll
2014-08-27 22:21 - 2014-08-27 22:29 - 00000000 ____D () C:\Users\Admin\Desktop\bremu
2014-08-27 20:04 - 2014-08-27 20:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-08-27 12:45 - 2014-08-27 12:45 - 00000000 ____D () C:\Users\Admin\Documents\My Cheat Tables
2014-08-27 12:44 - 2014-09-06 22:05 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-08-27 12:44 - 2014-08-27 12:44 - 09052192 _____ (Cheat Engine ) C:\Users\Admin\Desktop\CheatEngine64.exe
2014-08-24 18:24 - 2014-09-07 11:59 - 00000000 ____D () C:\Users\Admin\Downloads\vol1-m2twg
2014-08-24 10:56 - 2014-08-24 10:57 - 05461521 _____ () C:\Users\Admin\Desktop\Top 10 Spawn by Farbenemo1-.rar
2014-08-23 11:36 - 2014-08-23 11:36 - 00000000 ____D () C:\Users\Admin\AppData\Local\Packages
2014-08-23 11:35 - 2014-08-23 11:36 - 00000000 ____D () C:\ProgramData\weubsaveere
2014-08-21 20:37 - 2014-08-21 20:37 - 00001214 _____ () C:\Users\Admin\Desktop\filezilla.exe — skrót.lnk
2014-08-19 14:07 - 2014-09-07 20:39 - 00013892 _____ () C:\Windows\setupact.log
2014-08-19 14:07 - 2014-08-19 14:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-18 10:02 - 2014-08-18 10:02 - 00000014 _____ () C:\Users\Admin\Desktop\kod do media ewxpert.txt
2014-08-16 22:01 - 2014-08-16 22:01 - 00000000 _RSHD () C:\Program Files (x86)\Remote Manipulator System - Host
2014-08-16 21:51 - 2014-08-18 19:44 - 2570635282 _____ () C:\Users\Admin\Downloads\AUTOMAPA_6.15_1312_FINAL_EUROPA_CRACKED iso.rar
2014-08-16 13:16 - 2014-08-16 13:16 - 00000000 ____D () C:\Users\Admin\Documents\NeroVision
2014-08-16 13:13 - 2014-08-16 13:13 - 00000000 ____D () C:\Users\Admin\Documents\Nero Home
2014-08-16 13:12 - 2014-08-16 13:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Nero
2014-08-16 13:08 - 2014-08-16 16:04 - 1073741824 _____ () C:\Users\Admin\Downloads\AutoMapa 6.16 (1406) Polska i Europa (Cracked).part1.rar
2014-08-16 11:48 - 2014-08-16 11:48 - 00000000 ____D () C:\Users\Admin\Desktop\ItemShop
2014-08-16 11:45 - 2014-08-16 11:47 - 04650240 _____ () C:\Users\Admin\Desktop\ItemShop.rar
2014-08-15 16:40 - 2014-08-15 16:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combat Mission - Shock Force

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 21:09 - 2014-09-07 20:34 - 00000000 ____D () C:\Users\Admin\Desktop\frst
2014-09-07 21:09 - 2014-09-07 19:24 - 00000000 ____D () C:\FRST
2014-09-07 21:08 - 2014-09-07 21:08 - 00000000 ____D () C:\Users\Admin\Desktop\Stare dane programu Firefox
2014-09-07 21:08 - 2014-04-01 12:25 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype
2014-09-07 21:00 - 2014-04-08 21:44 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\uTorrent
2014-09-07 20:40 - 2014-04-05 11:44 - 00000000 ____D () C:\Users\Admin\AppData\Local\screenSHU
2014-09-07 20:39 - 2014-09-02 07:19 - 00016464 _____ () C:\Windows\PFRO.log
2014-09-07 20:39 - 2014-08-19 14:07 - 00013892 _____ () C:\Windows\setupact.log
2014-09-07 20:39 - 2014-06-27 15:30 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-09-07 20:39 - 2014-06-15 20:47 - 00000000 ____D () C:\Users\Admin\AppData\Local\LogMeIn Hamachi
2014-09-07 20:39 - 2014-03-31 11:00 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-07 20:38 - 2014-04-23 11:50 - 01299759 _____ () C:\Windows\WindowsUpdate.log
2014-09-07 20:36 - 2014-04-12 17:55 - 00000000 ____D () C:\Windows\pss
2014-09-07 20:36 - 2014-03-31 09:59 - 00000000 ____D () C:\Users\Admin
2014-09-07 20:36 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-07 20:14 - 2014-09-07 20:14 - 00011876 _____ () C:\Users\Admin\Desktop\gmer.txt
2014-09-07 20:00 - 2014-06-07 19:07 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\.minecraft
2014-09-07 19:56 - 2014-06-09 21:33 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\FileZilla
2014-09-07 19:43 - 2014-09-07 19:43 - 00059926 _____ () C:\Users\Admin\Downloads\Extras.Txt
2014-09-07 19:39 - 2014-09-07 19:39 - 00114850 _____ () C:\Users\Admin\Downloads\OTL.Txt
2014-09-07 19:28 - 2014-09-07 19:28 - 00061120 _____ () C:\Users\Admin\Downloads\Shortcut.txt
2014-09-07 19:28 - 2014-09-07 19:26 - 00035434 _____ () C:\Users\Admin\Downloads\Addition.txt
2014-09-07 19:28 - 2014-09-07 19:25 - 00042171 _____ () C:\Users\Admin\Downloads\FRST.txt
2014-09-07 18:29 - 2014-09-07 18:28 - 00368705 _____ () C:\Users\Admin\Downloads\gm.zip
2014-09-07 18:28 - 2014-09-07 18:28 - 00602112 _____ (OldTimer Tools) C:\Users\Admin\Downloads\OTL.scr
2014-09-07 18:28 - 2014-09-07 18:27 - 00000000 ____D () C:\Users\Admin\AppData\Local\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\ProgramData\AdFender
2014-09-07 18:27 - 2014-09-07 18:27 - 00000000 ____D () C:\Program Files (x86)\AdFender
2014-09-07 18:24 - 2014-09-07 18:23 - 00002992 _____ () C:\Users\Admin\Desktop\Rkill.txt
2014-09-07 18:23 - 2014-09-07 18:23 - 00000000 ____D () C:\Users\Admin\Desktop\rkill
2014-09-07 18:18 - 2014-09-07 18:17 - 02735032 _____ (AdFender, Inc.) C:\Users\Admin\Downloads\Setup.exe
2014-09-07 17:58 - 2014-04-05 09:54 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\TS3Client
2014-09-07 17:16 - 2014-09-07 17:16 - 02347384 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_plk.exe
2014-09-07 12:39 - 2014-09-07 12:39 - 04834344 _____ () C:\Users\Admin\Desktop\avast_premier_antivirus_setup_online.exe
2014-09-07 12:17 - 2014-07-29 15:19 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2014-09-07 12:16 - 2014-09-07 12:16 - 00000000 ____D () C:\TDSSKiller_Quarantine
2014-09-07 12:03 - 2014-09-07 11:59 - 04181856 _____ (Kaspersky Lab ZAO) C:\Users\Admin\Downloads\tdsskiller.exe
2014-09-07 11:59 - 2014-08-24 18:24 - 00000000 ____D () C:\Users\Admin\Downloads\vol1-m2twg
2014-09-07 11:56 - 2014-03-31 10:05 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-07 11:56 - 2014-03-31 10:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-07 11:56 - 2014-03-31 10:05 - 00000930 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-06 22:32 - 2014-04-29 17:39 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-06 22:05 - 2014-08-27 12:44 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-09-06 22:05 - 2014-08-07 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefront
2014-09-06 22:04 - 2014-06-27 15:30 - 00000000 ____D () C:\ProgramData\1d268881d9c7e4d5
2014-09-06 21:02 - 2014-08-01 22:41 - 00000000 ____D () C:\Users\Admin\AppData\Local\CrashDumps
2014-09-06 17:38 - 2014-05-18 19:11 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-06 17:37 - 2014-09-06 17:37 - 00017513 _____ () C:\Windows\DirectX.log
2014-09-06 17:34 - 2014-09-06 17:34 - 00000728 _____ () C:\Users\Public\Desktop\Counter-Strike Global Offensive.lnk
2014-09-06 17:34 - 2014-09-06 17:34 - 00000671 _____ () C:\Users\Public\Desktop\Update Counter-Strike Global Offensive.lnk
2014-09-06 17:34 - 2014-09-06 17:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strogino CS Portal
2014-09-06 14:42 - 2014-09-06 14:41 - 00013314 _____ () C:\Users\Admin\Desktop\eRanking.sk
2014-09-06 14:42 - 2014-09-06 14:20 - 305122912 _____ () C:\Users\Admin\Downloads\Symulator_Jazdy_2_PL_(www_dodane_pl).rar
2014-09-06 13:42 - 2014-09-06 13:34 - 174866560 _____ (Kaspersky Lab) C:\Users\Admin\Downloads\kis15.0.0.463pl-pl.exe
2014-09-04 21:48 - 2014-09-04 21:46 - 19722284 _____ () C:\Users\Admin\Desktop\Audio 2014-09-04 21-46-46.wav
2014-09-04 21:46 - 2014-08-31 15:27 - 00000020 _____ () C:\Windows\capsys184523.log
2014-09-04 18:18 - 2009-07-14 06:45 - 00010112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-04 18:18 - 2009-07-14 06:45 - 00010112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-04 15:22 - 2014-09-04 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-04 15:22 - 2014-09-04 15:22 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-04 15:22 - 2014-06-15 20:45 - 00000926 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-09-03 15:39 - 2014-09-03 15:39 - 00921632 _____ () C:\PA207.DAT
2014-09-03 15:29 - 2014-08-28 19:28 - 00026258 _____ () C:\Users\Admin\Desktop\warzywa.txt
2014-08-31 18:27 - 2014-08-31 18:22 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Audacity
2014-08-31 18:21 - 2014-08-05 22:21 - 00001023 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-31 18:21 - 2014-08-05 22:21 - 00001011 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-31 18:21 - 2014-08-05 22:20 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-31 11:30 - 2014-04-05 10:32 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Notepad++
2014-08-28 12:04 - 2014-08-28 12:03 - 00000000 ____D () C:\Program Files (x86)\AnMing
2014-08-28 12:03 - 2014-08-28 12:03 - 00000928 _____ () C:\Users\Admin\Desktop\MP3 To Ringtone Gold.lnk
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\Temp
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To Ringtone Gold
2014-08-28 12:03 - 2014-08-28 12:03 - 00000000 ____D () C:\AnMingringtone
2014-08-27 22:29 - 2014-08-27 22:21 - 00000000 ____D () C:\Users\Admin\Desktop\bremu
2014-08-27 20:04 - 2014-08-27 20:04 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-08-27 12:45 - 2014-08-27 12:45 - 00000000 ____D () C:\Users\Admin\Documents\My Cheat Tables
2014-08-27 12:44 - 2014-08-27 12:44 - 09052192 _____ (Cheat Engine ) C:\Users\Admin\Desktop\CheatEngine64.exe
2014-08-24 17:07 - 2014-07-28 20:05 - 00070144 _____ () C:\Windows\SysWOW64\tasks.dll
2014-08-24 16:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-24 10:57 - 2014-08-24 10:56 - 05461521 _____ () C:\Users\Admin\Desktop\Top 10 Spawn by Farbenemo1-.rar
2014-08-23 11:36 - 2014-08-23 11:36 - 00000000 ____D () C:\Users\Admin\AppData\Local\Packages
2014-08-23 11:36 - 2014-08-23 11:35 - 00000000 ____D () C:\ProgramData\weubsaveere
2014-08-21 20:37 - 2014-08-21 20:37 - 00001214 _____ () C:\Users\Admin\Desktop\filezilla.exe — skrót.lnk
2014-08-20 10:17 - 2014-04-01 12:25 - 00000000 ____D () C:\ProgramData\Skype
2014-08-19 14:07 - 2014-08-19 14:07 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-19 12:57 - 2014-04-09 17:32 - 00000000 ____D () C:\Windows\Minidump
2014-08-19 12:56 - 2014-04-12 17:50 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-19 12:56 - 2014-04-12 17:50 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-18 19:44 - 2014-08-16 21:51 - 2570635282 _____ () C:\Users\Admin\Downloads\AUTOMAPA_6.15_1312_FINAL_EUROPA_CRACKED iso.rar
2014-08-18 10:02 - 2014-08-18 10:02 - 00000014 _____ () C:\Users\Admin\Desktop\kod do media ewxpert.txt
2014-08-17 16:02 - 2009-07-14 07:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-16 22:01 - 2014-08-16 22:01 - 00000000 _RSHD () C:\Program Files (x86)\Remote Manipulator System - Host
2014-08-16 21:20 - 2009-07-14 14:43 - 00739852 _____ () C:\Windows\system32\perfh015.dat
2014-08-16 21:20 - 2009-07-14 14:43 - 00155426 _____ () C:\Windows\system32\perfc015.dat
2014-08-16 21:20 - 2009-07-14 07:13 - 01668226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-16 16:04 - 2014-08-16 13:08 - 1073741824 _____ () C:\Users\Admin\Downloads\AutoMapa 6.16 (1406) Polska i Europa (Cracked).part1.rar
2014-08-16 13:16 - 2014-08-16 13:16 - 00000000 ____D () C:\Users\Admin\Documents\NeroVision
2014-08-16 13:13 - 2014-08-16 13:13 - 00000000 ____D () C:\Users\Admin\Documents\Nero Home
2014-08-16 13:13 - 2014-07-26 16:28 - 00000000 ____D () C:\Users\Admin\AppData\Local\Ahead
2014-08-16 13:12 - 2014-08-16 13:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Nero
2014-08-16 13:12 - 2014-07-26 16:26 - 00007867 _____ () C:\Windows\Irremote.ini
2014-08-16 13:12 - 2014-07-26 16:25 - 00001024 _____ () C:\Users\Admin\.rnd
2014-08-16 11:54 - 2014-04-04 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-08-16 11:48 - 2014-08-16 11:48 - 00000000 ____D () C:\Users\Admin\Desktop\ItemShop
2014-08-16 11:47 - 2014-08-16 11:45 - 04650240 _____ () C:\Users\Admin\Desktop\ItemShop.rar
2014-08-15 16:40 - 2014-08-15 16:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combat Mission - Shock Force

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-21 14:38

==================== End Of Log ============================