Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by TOMEK (administrator) on TOMEK-PC on 01-02-2015 23:19:33
Running from C:\Users\TOMEK\Downloads
Loaded Profiles: TOMEK (Available profiles: TOMEK)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Polski (Polska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Rsupport Co., Ltd.) C:\Program Files (x86)\Samsung\Remote PC\rvagent.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Red Bend Ltd.) C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel® Corporation) C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Redefine Sp z o.o.) C:\Program Files (x86)\ipla\ipla.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
() C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
(Dropbox, Inc.) C:\Users\TOMEK\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331_STI.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Rsupport Co., Ltd.) C:\Program Files (x86)\Samsung\Remote PC\rvagtray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(FileZilla Project) D:\Program Files (x86)\FileZilla FTP Client\filezilla.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [IntelWirelessWiMAX] => C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe [1626112 2011-12-01] (Intel® Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2866960 2011-12-16] (Synaptics Incorporated)
HKLM\...\Run: [SynLenovoGestureMgr] => C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [410896 2011-12-16] (Synaptics)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [8079408 2013-08-20] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [6200368 2013-08-20] (Lenovo(beijing) Limited)
HKLM\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [789856 2013-08-20] (Lenovo)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331_STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-12] (Intel Corporation)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-13] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [926896 2012-09-23] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-31] (Apple Inc.)
HKLM-x32\...\Run: [RemoteView5 Tray] => C:\Program Files (x86)\Samsung\Remote PC\rvagtray.exe [2615704 2014-05-08] (Rsupport Co., Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3718346503-4284574425-1885734499-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd)
HKU\S-1-5-21-3718346503-4284574425-1885734499-1000\...\Run: [MaxigetMasterUpdate] => "C:\Users\TOMEK\AppData\Roaming\Maxiget\Master\Updater\MasterUpdater.exe" -autorun
HKU\S-1-5-21-3718346503-4284574425-1885734499-1000\...\MountPoints2: {3512a6f5-1df3-11e3-8d94-a41731b7b037} - H:\AutoRun.exe /s
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [166568 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: , c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: [Uchwyt nakładania ikony podpisu cyfrowego] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> D:\Pliki programów (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1

FireFox:
========
FF ProfilePath: C:\Users\TOMEK\AppData\Roaming\Mozilla\Firefox\Profiles\xmodkdra.default
FF NetworkProxy: "ftp", "202.148.27.122"
FF NetworkProxy: "ftp_port", 80
FF NetworkProxy: "gopher", "202.148.27.122"
FF NetworkProxy: "gopher_port", 80
FF NetworkProxy: "http", "202.148.27.122"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "socks", "202.148.27.122"
FF NetworkProxy: "socks_port", 80
FF NetworkProxy: "ssl", "202.148.27.122"
FF NetworkProxy: "ssl_port", 80
FF NetworkProxy: "type", 
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-3718346503-4284574425-1885734499-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\TOMEK\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: Best Proxy Switcher - C:\Users\TOMEK\AppData\Roaming\Mozilla\Firefox\Profiles\xmodkdra.default\Extensions\bestproxyswitcher@bestproxyswitcher.com.xpi [2014-12-14]
FF Extension: Adblock Plus - C:\Users\TOMEK\AppData\Roaming\Mozilla\Firefox\Profiles\xmodkdra.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-11]
FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2015-01-26]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-12-31]
FF Extension: No Name - C:\Users\TOMEK\AppData\Roaming\Mozilla\Firefox\Profiles\xmodkdra.default\extensions\{442ad619-2fad-4d96-9434-49e6d1c6e280}.xpi [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR Profile: C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentacje Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-01]
CHR Extension: (Dokumenty Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-01]
CHR Extension: (Dysk Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-01]
CHR Extension: (YouTube) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-01]
CHR Extension: (Szukaj w Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-01]
CHR Extension: (Arkusze Google) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-01]
CHR Extension: (Google Wallet) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-01]
CHR Extension: (Gmail) - C:\Users\TOMEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [945440 2012-02-01] (Broadcom Corporation.)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
R2 DMAgent; C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [514048 2011-11-30] (Red Bend Ltd.) [File not signed]
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-28] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [1910128 2015-01-30] (Electronic Arts)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RemotePC Agent; C:\Program Files (x86)\Samsung\Remote PC\rvagent.exe [813448 2014-05-07] (Rsupport Co., Ltd.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer9; D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [4915040 2014-02-17] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WiMAXAppSrv; C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [979456 2011-11-30] (Intel(R) Corporation) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-08-21] (Disc Soft Ltd)
S3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [442368 2013-05-07] (Intel(R) Corporation) [File not signed]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2011-12-06] (Vimicro Corporation)
R3 vrvd5; C:\Windows\System32\DRIVERS\vrvd5.sys [13344 2014-09-03] (Rsupport Corporation)
R1 {df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64; C:\Windows\System32\drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys [48784 2015-01-31] (StdLib)
S3 cpuz135; \??\C:\Users\TOMEK\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]
S3 cpuz137; \??\C:\Users\TOMEK\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 massfilter_lte; \??\C:\Windows\system32\drivers\massfilter_lte.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 zgdcat; system32\DRIVERS\zgdcat.sys [X]
S3 zgdcdiag; system32\DRIVERS\zgdcdiag.sys [X]
S3 zgdcmdm; system32\DRIVERS\zgdcmdm.sys [X]
S3 zgdcnet; system32\DRIVERS\zgdcnet.sys [X]
S3 zgdcnmea; system32\DRIVERS\zgdcnmea.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-01 23:19 - 2015-02-01 23:19 - 00025388 _____ () C:\Users\TOMEK\Downloads\FRST.txt
2015-02-01 23:18 - 2015-02-01 23:19 - 00000000 ____D () C:\FRST
2015-02-01 23:17 - 2015-02-01 23:17 - 02131456 _____ (Farbar) C:\Users\TOMEK\Downloads\FRST64.exe
2015-02-01 22:38 - 2015-02-01 22:38 - 00002265 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-01 22:38 - 2015-02-01 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-01 22:37 - 2015-02-01 22:42 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-01 22:37 - 2015-02-01 22:42 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-01 22:37 - 2015-02-01 22:37 - 00004042 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-01 22:37 - 2015-02-01 22:37 - 00003790 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-01 22:36 - 2015-02-01 22:36 - 00000000 ____D () C:\Windows\pss
2015-02-01 22:28 - 2015-02-01 22:28 - 00000000 ____H () C:\ProgramData\cm-lock
2015-02-01 22:23 - 2015-02-01 22:24 - 02194432 _____ () C:\Users\TOMEK\Downloads\AdwCleaner (1).exe
2015-02-01 22:23 - 2015-02-01 22:23 - 02194432 _____ () C:\Users\TOMEK\Downloads\AdwCleaner.exe
2015-02-01 22:13 - 2015-02-01 22:13 - 00000000 ____D () C:\Program Files (x86)\Atheros
2015-02-01 22:12 - 2015-02-01 22:12 - 00000000 ____D () C:\ProgramData\Atheros
2015-02-01 21:14 - 2015-02-01 21:14 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Easeware
2015-02-01 19:46 - 2015-02-01 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-02-01 19:46 - 2015-02-01 22:20 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-01 16:05 - 2015-02-01 22:20 - 00000000 ____D () C:\Program Files (x86)\MaxiGet Software Manager
2015-02-01 15:56 - 2015-02-01 15:56 - 00003826 _____ () C:\Windows\System32\Tasks\MaxigetMasterUpdate
2015-02-01 15:55 - 2015-02-01 15:55 - 00060472 _____ (C Vital) C:\Users\TOMEK\Downloads\Mouse and Keyboard Record...---PMS.exe
2015-02-01 15:47 - 2015-01-31 19:25 - 00048784 _____ (StdLib) C:\Windows\system32\Drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys
2015-02-01 15:44 - 2015-02-01 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReMouse Standard
2015-02-01 15:44 - 2015-02-01 15:44 - 00000000 ____D () C:\Program Files (x86)\ReMouse Standard
2015-02-01 15:43 - 2015-02-01 15:43 - 01114168 _____ (AutomaticSolution Software ) C:\Users\TOMEK\Downloads\ReMouseStandard-Setup.exe
2015-02-01 15:40 - 2015-02-01 22:42 - 00000000 ____D () C:\Users\TOMEK\Documents\AutomaticSolution Software
2015-02-01 15:40 - 2015-02-01 15:40 - 00910728 _____ (ghost-mouse.com ) C:\Users\TOMEK\Downloads\GhostMouse-Setup.exe
2015-02-01 15:38 - 2015-02-01 15:38 - 00730528 _____ () C:\Users\TOMEK\Downloads\StrokesPlus(35233)-dp.exe
2015-02-01 15:24 - 2015-02-01 22:28 - 00005410 _____ () C:\Windows\PFRO.log
2015-02-01 15:24 - 2015-02-01 22:28 - 00000728 _____ () C:\Windows\setupact.log
2015-02-01 15:24 - 2015-02-01 15:24 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-01 15:18 - 2015-02-01 15:18 - 00700904 _____ (komputerswiat.pl) C:\Users\TOMEK\Downloads\Tasker 4.110.exe
2015-02-01 15:18 - 2015-02-01 15:18 - 00421314 _____ (Copyright © 2008 Vista Software www.vista-software.com ) C:\Users\TOMEK\Downloads\Tasker 4.110 [1].exe
2015-01-29 15:13 - 2015-01-29 15:13 - 00713168 _____ (Opera Software) C:\Users\TOMEK\Downloads\Opera_NI_stable.exe
2015-01-29 07:11 - 2015-01-29 07:11 - 00657920 _____ () C:\Users\TOMEK\Downloads\keywordrequest__11424_il1389021.exe
2015-01-28 16:22 - 2015-01-28 16:22 - 01080608 _____ (Unity Technologies ApS) C:\Users\TOMEK\Downloads\UnityWebPlayer.exe
2015-01-28 16:22 - 2015-01-28 16:22 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\Unity
2015-01-26 18:36 - 2015-01-29 13:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-23 19:27 - 2015-02-01 22:28 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\ipla
2015-01-23 19:27 - 2015-01-23 19:27 - 00000000 ____D () C:\ProgramData\RDRM
2015-01-23 19:27 - 2015-01-23 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ipla
2015-01-23 19:27 - 2015-01-23 19:27 - 00000000 ____D () C:\ProgramData\ipla
2015-01-23 19:26 - 2015-01-23 19:27 - 00000000 ____D () C:\Program Files (x86)\ipla
2015-01-23 19:26 - 2015-01-23 19:26 - 39138904 _____ () C:\Users\TOMEK\Downloads\iplasetup.exe
2015-01-23 19:26 - 2015-01-23 19:26 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2015-01-23 19:26 - 2015-01-23 19:26 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2015-01-22 23:04 - 2015-01-22 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-22 23:04 - 2015-01-22 23:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-22 23:04 - 2015-01-22 23:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-22 23:03 - 2015-01-22 23:04 - 13087456 _____ (Microsoft Corporation) C:\Users\TOMEK\Downloads\Silverlight_x64.exe
2015-01-21 22:08 - 2015-01-21 22:08 - 00025784 _____ () C:\Users\TOMEK\Downloads\mail_merge-3.9.1-sm+tb.xpi
2015-01-18 22:17 - 2015-01-18 22:17 - 01199607 _____ () C:\Users\TOMEK\Downloads\GameObcol.rar
2015-01-18 22:00 - 2015-01-18 22:00 - 06381120 _____ (Tim Kosse) C:\Users\TOMEK\Downloads\FileZilla_3.10.0.2_win32-setup.exe
2015-01-17 23:38 - 2015-01-17 23:41 - 00000832 _____ () C:\Users\Public\Desktop\FIFA 15.lnk
2015-01-17 23:38 - 2015-01-17 23:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15
2015-01-17 22:57 - 2015-01-17 22:57 - 00000000 ____D () C:\Users\TOMEK\Documents\FIFA 11
2015-01-17 22:08 - 2015-01-17 23:49 - 00000000 ____D () C:\Users\TOMEK\Documents\FIFA 15
2015-01-09 18:37 - 2015-02-01 22:31 - 00135227 _____ () C:\Windows\WindowsUpdate.log
2015-01-09 14:23 - 2015-01-09 14:23 - 00064814 _____ () C:\Users\TOMEK\Downloads\google.csv
2015-01-09 14:12 - 2015-01-09 14:15 - 00000000 ____D () C:\Program Files (x86)\Tasker
2015-01-09 14:12 - 2015-01-09 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tasker
2015-01-09 12:00 - 2015-01-09 12:00 - 00010885 _____ () C:\Users\TOMEK\.recently-used.xbel
2015-01-03 20:30 - 2015-01-03 20:30 - 00000278 _____ () C:\Windows\system32\GfLstC71.dat

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-01 23:14 - 2014-02-24 12:21 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\FileZilla
2015-02-01 22:38 - 2014-12-05 14:14 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Opera Software
2015-02-01 22:38 - 2014-12-05 14:14 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\Opera Software
2015-02-01 22:38 - 2014-12-05 14:14 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-02-01 22:38 - 2013-08-26 15:07 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\Google
2015-02-01 22:37 - 2013-08-22 16:09 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-01 22:37 - 2013-08-20 16:21 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\Deployment
2015-02-01 22:35 - 2013-10-21 14:45 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-01 22:35 - 2013-08-22 18:02 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-02-01 22:35 - 2013-08-22 18:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-02-01 22:35 - 2013-08-22 18:02 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-02-01 22:35 - 2013-08-22 18:02 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-01 22:35 - 2013-08-22 18:02 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-01 22:35 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-01 22:35 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-01 22:34 - 2011-02-04 18:55 - 00740494 _____ () C:\Windows\system32\perfh015.dat
2015-02-01 22:34 - 2011-02-04 18:55 - 00156036 _____ () C:\Windows\system32\perfc015.dat
2015-02-01 22:34 - 2009-07-14 06:13 - 01669794 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-01 22:30 - 2013-08-22 21:13 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Media Player Classic
2015-02-01 22:28 - 2014-06-11 16:04 - 00000000 ____D () C:\AdwCleaner
2015-02-01 22:28 - 2014-01-23 20:19 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Dropbox
2015-02-01 22:28 - 2013-08-21 22:16 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2015-02-01 22:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-01 22:27 - 2009-07-14 03:34 - 00000678 _____ () C:\Windows\win.ini
2015-02-01 22:24 - 2014-09-07 11:29 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\KishontiLtd
2015-02-01 22:20 - 2014-09-09 16:51 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\vlc
2015-02-01 22:20 - 2014-09-04 09:26 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-01 22:20 - 2013-12-03 13:37 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-01 22:20 - 2013-09-26 13:51 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth
2015-02-01 22:20 - 2013-08-22 15:53 - 00000000 ____D () C:\Users\TOMEK\AppData\Local\Adobe
2015-02-01 22:20 - 2013-08-22 02:28 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Winamp
2015-02-01 22:20 - 2013-08-20 16:17 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-02-01 22:20 - 2013-08-20 16:08 - 00000000 ____D () C:\Users\TOMEK\AppData\Roaming\Intel
2015-02-01 22:20 - 2013-08-20 16:08 - 00000000 ____D () C:\Program Files (x86)\Cisco
2015-02-01 22:20 - 2013-08-20 16:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2015-02-01 22:20 - 2013-08-20 16:05 - 00000000 ____D () C:\Windows\SysWOW64\Atheros_L1e
2015-02-01 22:20 - 2013-08-20 15:57 - 00000000 ____D () C:\Program Files\Common Files\Intel
2015-02-01 22:20 - 2013-08-20 15:55 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-02-01 22:20 - 2013-08-20 15:54 - 00000000 ____D () C:\ProgramData\Intel
2015-02-01 22:20 - 2013-08-20 15:54 - 00000000 ____D () C:\Program Files\Intel
2015-02-01 22:20 - 2013-08-20 15:53 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-02-01 22:20 - 2013-08-20 14:57 - 00000000 ____D () C:\Users\TOMEK
2015-02-01 22:20 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-02-01 22:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-01 22:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-01-30 09:33 - 2013-08-21 12:20 - 00000000 ____D () C:\ProgramData\Origin
2015-01-17 23:38 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-17 22:28 - 2013-09-25 23:27 - 00000000 ____D () C:\Users\TOMEK\Documents\FIFA 14
2015-01-11 15:54 - 2009-07-14 06:08 - 00032604 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-01-10 22:36 - 2014-02-24 12:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-01-09 12:00 - 2013-10-28 21:48 - 00000000 ____D () C:\Users\TOMEK\.gimp-2.6
2015-01-08 16:37 - 2014-12-31 11:54 - 00000000 __SHD () C:\Users\TOMEK\wc

==================== Files in the root of some directories =======

2014-12-03 14:17 - 2014-12-08 13:25 - 0000132 _____ () C:\Users\TOMEK\AppData\Roaming\Preferencje CC formatu PNG firmy Adobe
2013-08-21 09:46 - 2013-08-21 09:46 - 0007605 _____ () C:\Users\TOMEK\AppData\Local\Resmon.ResmonCfg
2014-02-18 09:22 - 2014-02-18 09:22 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-02-01 22:28 - 2015-02-01 22:28 - 0000000 ____H () C:\ProgramData\cm-lock

Some content of TEMP:
====================
C:\Users\TOMEK\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvexusl.dll
C:\Users\TOMEK\AppData\Local\Temp\ICReinstall_Tasker 4.110.exe
C:\Users\TOMEK\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\TOMEK\AppData\Local\Temp\Quarantine.exe
C:\Users\TOMEK\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe
[2010-11-21 04:24] - [2013-09-22 10:45] - 2872320 ____A (Microsoft Corporation) A6104413A0E1276878ABFFB3D6B10A12

C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-25 13:45

==================== End Of Log ============================